last executing test programs: 23.012307928s ago: executing program 4 (id=1947): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000002000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES8, @ANYBLOB="6c137f815ceb0ec4a9bdc54e5d2a26df9f2b9f8e4df27b394277773a627a2a934815c647e8209ddce49e44463e839bf7a099ef19b7d4dbe009fdd20b73c744e3989dbe70a15afb9cbed075ea9ab9c05671d53bc4ac8abb14ac214c3b89e1f9874771d128a2894cd77c560ba8b508ff5203ceb289233a5834c06079ab7fd484298d20998bb3dfbf30cf298ea68c0de4bea203560a0d5327190d39444c44278e14bf3f2ef572732b54c0ccd440d9", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 22.84437944s ago: executing program 4 (id=1954): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT], 0x20) 22.81347594s ago: executing program 4 (id=1955): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680100005800a00010006000000fdff0000565bc59976790de5daa486d6d5f4f0539267229aa9f7602be378f612465be3fd9c9abb33cd677a232fff39d30ab622220d360cb7557aee92ffbcb530a8820694a2e7fe8ea62183b8f5da71849b42dcbd21ccd6dba304a44e358d79b14332af789ca38086d68b148a151fc34ba3efb7dadf96fa5b9500118065506deca18cf8a09d5374db32e7b7dbc085226e1e8517bbd07d1bd52e4e3608f62f4d03"], 0x78}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001a00010000000000000000001c1400000000000000000000840013000000000000000000000000000000000000000800"/146, @ANYRES16], 0xa0}}, 0x1) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r3}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r7}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) 22.623255162s ago: executing program 4 (id=1962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000200000007000000000000001e995e3dda807b82b6a95e60e6d0e8872159192adbc52c1cc999b71528f4e651025021c7081dc4c4e55f8d5fef25e9b30adf4e801d81e7c783b84fe494bde888c6c7a6f178484432edee9d0f1f9a3a5d368166c29d8dd59347f111f65a452977d410049ba89e9e4a9754479d84d833d8ec84", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xfffffffc, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x11c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x60840, 0x111) fcntl$setlease(r5, 0x400, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) syz_clone3(&(0x7f0000001c40)={0x102000, 0x0, &(0x7f0000001980), 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x20, 0x7, 0x5, 0x2, {{0x37, 0x4, 0x2, 0x3, 0xdc, 0x67, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ssrr={0x89, 0x27, 0x77, [@multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010101, @local, @broadcast, @remote, @broadcast, @private=0xa010100]}, @rr={0x7, 0x3, 0x28}, @rr={0x7, 0x17, 0x1c, [@loopback, @local, @empty, @loopback, @multicast2]}, @noop, @ssrr={0x89, 0xb, 0x99, [@empty, @multicast1]}, @ssrr={0x89, 0x2b, 0x26, [@rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @private=0xa010100, @private=0xa010100, @multicast2]}, @cipso={0x86, 0x50, 0x3, [{0x1, 0x3, "cd"}, {0x0, 0x9, "7c0f501a0484e2"}, {0x1, 0xe, "46790e0cd8d007850e726041"}, {0x0, 0x10, "3aea9599cf734cf2e54e07eefb93"}, {0x1, 0xe, "0dab0e9d259e3b2acdaa3264"}, {0x0, 0x6, "26722c94"}, {0x2, 0xc, "d06a77ae7952ad0b789b"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 22.364440886s ago: executing program 4 (id=1971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='rpc_call_rpcerror\x00', r0, 0x0, 0xfffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, 0x0, 0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r3, 0x0, 0x0) r6 = socket$inet6(0xa, 0x200000000003, 0x87) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000006c0)=ANY=[], 0x28) 22.091699499s ago: executing program 4 (id=1981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r1, &(0x7f0000001400)="3b27a4b403e92b", 0x4944) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x7ffff000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f00000021c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x6, 0x8}, {0x5, 0xd}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0x0, 0x0, 0x1000, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "57c8af53dd7b4498d8ade2815b4cd4862f2c84aa9d161e26e2ef9b24edf3ae99acd0488828138b3227b3b29a9e6d4805aa976cc920252d77c406"}]}}}}}}}, 0x0) 22.091422209s ago: executing program 32 (id=1981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r1, &(0x7f0000001400)="3b27a4b403e92b", 0x4944) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x7ffff000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f00000021c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x6, 0x8}, {0x5, 0xd}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0x0, 0x0, 0x1000, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "57c8af53dd7b4498d8ade2815b4cd4862f2c84aa9d161e26e2ef9b24edf3ae99acd0488828138b3227b3b29a9e6d4805aa976cc920252d77c406"}]}}}}}}}, 0x0) 1.57383297s ago: executing program 0 (id=2404): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.471239161s ago: executing program 0 (id=2407): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="1b0000000000000000000000475f000000000000", @ANYRES32=0x1, @ANYBLOB="dc8b764500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100d346050000002f79c55d210000000000ca52df9e1bd32ab9d902d804000000e3f46fa40e34d9d98c1f0306da865ea854ac8185ac9ba6e6e33e8b9dc4694e24a9f6606a74bf87fd05c7e8f575c6f3871f8e6b7ed07fae801865b9d93f870a50a9075342c938ab30d19f20635c93ba8131f151e2cd61f011c2644f321d7a730869601b2f9b2b35e5cb7ab1e545"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) lchown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0x0) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, 0x0}, &(0x7f0000001e80)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="b9909270e6b1b3115d27628e9d935d7ee60a67a8b76a204bb06545f885e39c75abf9d3dcf280cdca4b8f3421e7d2c24849d6baa728fc8aa83bb413b248589ac4812deb705b552a214438539830dd4be57c7f23c971a9f7008929407182bc958853061bfb85817b1ac6b262c4a93796b77d9f030d2b43478369f5f2e897bf77ffe2e51b01c2d9963c577873", 0x8b}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000004800)="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", 0x1000}, {&(0x7f0000001a00)="61faa09ab11293843dce3ed551ab478f3d6f035477634a6b7b5d9b63ad31799d1bdb556d70be95bca908b1f6cb2853f306d2f7bb167a0ae0c57bcc1276fdfa709793636dbf5827ca21be2c8d10c6ba7d5f135106bd88a39194b7c1c44fac843d519900909f9838579417918649adb41b5ad99d5690743296dbe229c71afd79dec28bad6c8564a1d6aa92d77850c1a1d8babe93046b4c335b", 0x98}, {&(0x7f0000001ac0)="c6ed6aaf1ce38324da8f3e46333e1b0405cf786fa800ddb574284fecbfe0e967b82cf683af20caec3c7728c00eef1a2f837a68d1cd530898d810e21b82561546321d98ff525b18da5803623c772a3f5f91863c72ad56cf96cac72339521373ef5a8fbfc7318d65d5dca07674904ac140196365a6f7dcc832e84c3c1fdcafb386974dc09c453bcf7b8deb44371751ed3c4e69403a3dbc435c8a5512a1dd316a1fbf69741e5c6183bde7a3927274793d1c2fa92f723e4c1ee060b3b768ccc88466f7b10b53bec9966359c315c301cc15e3ea885126b763943476acbeece9e03f11b0da1fe948a287e3c960b5c4a3d88f", 0xef}, {&(0x7f0000001bc0)="0a8d2a3a428fa1ab603d94b92fbe94056d57211e55aac0eae225c07d3325c8f3308dc3533ddf43c7c50c6f63d2de4f7b645cb6665fa2b7d5a85e5adbce5e027f064a6fff5693eb9f2eeca1300c5f91f6ff6856ffef9481c2d01956595be9f8db0b70779cca9a6b317c2b630495f40f6a71441b0f634f2cbae9cdbfe7579e37235ec8551ec3bcd1460eedcda0c899f7cff0bf2e4ee81e524d491f47c00a8c30c679317835b16963f138771714377f6e572e7844fd1e70d06a356f52292948818301d9d76ba101b095173ee0615dd990c050c8d439edb99172463ca59b0659b7a2f89a912dcdeadabd0e813f5f6878901b02ef42", 0xf3}, {&(0x7f0000001cc0)="a4", 0x1}], 0x8, &(0x7f0000001ec0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r3}}}], 0x70, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000001, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x400000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800ef97030000000000b3e23e17bd65b99a2143", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x31, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5696, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780080006000000000008001340000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x4ffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x8, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000780)={0x7, 0x4, 0xa1, {0xfffffc00, 0x5}, 0x7fffffff, 0x400}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r10}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1437708, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4e, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@grpid}, {@sysvgroups}]}, 0x0, 0x43a, &(0x7f0000000340)="$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") 1.390099932s ago: executing program 1 (id=2409): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x6}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x400002, 0x9c}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) symlink(0x0, &(0x7f00000017c0)='./file0\x00') ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xf5) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.345717783s ago: executing program 1 (id=2410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000200), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.330889853s ago: executing program 1 (id=2411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000014000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 1.289360783s ago: executing program 1 (id=2413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.284405463s ago: executing program 1 (id=2415): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) getrusage(0xfffffffffffffffe, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}}, 0x24}}, 0x0) 1.265507224s ago: executing program 0 (id=2417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.148604155s ago: executing program 0 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000200), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.115045825s ago: executing program 0 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) 1.013229207s ago: executing program 1 (id=2425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0xe, 0x8, 0xc, 0xe, 0x3ff}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000800)={0xa, 0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f00000001c0)}, {&(0x7f0000001980)=""/178, 0xb2}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f0000001a40)=""/226, 0xe2}], &(0x7f00000005c0)=[0x6, 0x7fffffffffffffff, 0x9, 0x7f]}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200), 0x1, 0x527, &(0x7f0000019580)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c279617", 0x3b}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1}, 0x40fd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x18) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00'}, 0x18) 1.012826427s ago: executing program 33 (id=2425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0xe, 0x8, 0xc, 0xe, 0x3ff}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000800)={0xa, 0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f00000001c0)}, {&(0x7f0000001980)=""/178, 0xb2}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f0000001a40)=""/226, 0xe2}], &(0x7f00000005c0)=[0x6, 0x7fffffffffffffff, 0x9, 0x7f]}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200), 0x1, 0x527, &(0x7f0000019580)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c279617", 0x3b}], 0x1, 0x0, 0x0, 0x4}, 0x4000000) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1}, 0x40fd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x18) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00'}, 0x18) 677.766471ms ago: executing program 5 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="18448e0000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100800000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100000000dc", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000040)=ANY=[], 0x4e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r11], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 525.020533ms ago: executing program 3 (id=2442): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 497.219874ms ago: executing program 3 (id=2444): r0 = getpid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x780000, 0x100) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9}}, '.\x00'}) io_uring_enter(r2, 0x6043, 0x1f66, 0xe, &(0x7f0000000080)={[0x7]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x95}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xa4, &(0x7f0000000180)=""/164, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x8, 0x3}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000002c0)=[{0x1, 0x2, 0x6, 0x1}, {0x5, 0x4, 0x2, 0x9}, {0x0, 0x3, 0x7, 0x5}, {0x3, 0x4, 0xf, 0x1}, {0x5, 0x4, 0xc, 0xb}, {0x0, 0x4, 0x10, 0x9}, {0x1, 0x2, 0xd, 0x7}, {0x0, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x4}, {0x1, 0x5, 0xa, 0x4}], 0x10, 0x400, @void, @value}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f0000000440)=0x6, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x2, 0x8, 0x4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x1, 0xfffffffb, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x700, 0x80, 0x7, 0xfffffffb, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x9, [{@broadcast, 0x10}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x9}]}, @ssrr={0x89, 0xb, 0x9e, [@dev={0xac, 0x14, 0x14, 0x39}, @local]}, @generic={0x86, 0xd, "4921adbb860b551c2ff1db"}, @timestamp={0x44, 0x24, 0x74, 0x0, 0x3, [0x80000000, 0xff, 0x7, 0x3, 0x10000, 0x5, 0x8, 0x101]}, @timestamp_prespec={0x44, 0x1c, 0x48, 0x3, 0x7, [{@multicast2, 0x6}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x4}, 0x5e}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x30, 0x2, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x0, 0x7, 0xffffffff, 0xffffff18}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000940)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001080)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f00000009c0)={0x65c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0xa, 0x3d, 0xff}, {0xeacc, 0x6, 0x22, 0xc567}, {0x289, 0x0, 0xa, 0x7ff}, {0x0, 0x5, 0xf, 0xf}, {0x1, 0x59, 0x10, 0x8}, {0x1, 0x3, 0xe, 0x3}, {0x8, 0x1, 0x9, 0xff}, {0x3, 0x8, 0x8, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x400, 0x7, 0x3, 0x3}, {0x2, 0x3, 0x5}, {0x800, 0x3b, 0x17, 0x1f}, {0x8, 0xb}]}}}]}}, {{0x8, 0x1, r11}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff07}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x4001}, 0x24048801) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000010c0)={0x0, @local, @loopback}, &(0x7f0000001100)=0xc) r15 = syz_open_dev$vcsa(&(0x7f0000001200), 0x2, 0x40000) perf_event_open(&(0x7f0000001180)={0x4, 0x80, 0x8, 0x2, 0x40, 0xf, 0x0, 0x4, 0x40, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2b, 0x2, @perf_bp={&(0x7f0000001140)}, 0x81, 0x5, 0x7, 0x9, 0x100000000, 0x7, 0xd, 0x0, 0x8, 0x0, 0xc44f}, r0, 0xb, r15, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000001c00)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_DELCHAIN={0x154, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8c4e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x47ee}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x23, 0xc, "f2320bb26cd288d414bcaf75bd2dfaeb2c6189df820d57c7b37da9e97c6505"}, @NFTA_CHAIN_USERDATA={0x61, 0xc, "011c76a517ab856752c5a8d63fa630ecc8916fb51f2006043f420c83cea9d84ffbb07cc86cf2c09eeb4d9242df4af6ee6019715f2317278a88c4824df2326e139a3ee416c3ba8948027254bbd97b2eee315b0d39e9a9c2e38e4ddce63c"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x4c8, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x2d4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x522}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffe440}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0xb4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc065}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ccc185}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7cc95a93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5682}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_USERDATA={0xb8, 0xd, 0x1, 0x0, "78fda46658b0557b82e67923381b803b41c00c886f23d2230da284066e53494ee365f9fa2a926faf05b5e0c7bf3fb6db428313d9ba55fafaa9f2b4ecf223927fe6a7ae96d557069073d20062e5b76662eb3070ad52eee56f502cc23acd393164d6a05140df890eb770fd44e5e2a642a43500dc88343eb0a7179a9d8dc9a43c6ed56f77ab65c7b31f7bb31d6cad07d4d724f24b70dfb0f921a942aeabcedd16451dfd0da87a62eb8eea61aeb128aea257108e50dd"}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TUNNEL_MODE={0x8}]}}}]}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWCHAIN={0xf4, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2595d42c}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e5c61e4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x150, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xa8, 0xc, "da2b055c64c1f8a23fe6dc07bb0e60dad3de4f65c39c4eb733449e32ef4e32660a31de4a951b5b9205dd08da75b3c2d26789b5001d31ac39a410a3da077ba387ec8e07d959df2a142df34a5d948ff01b71154ab78ce1a6eb61cff8fc2f3b21f8d355a5d4f59215090cc6431813670a7ad1cfbf0450ec3c5f4fd726cfd36dac31eec82d8f0b865ec2774adb996b6b3c7d3fc338cb8d420061e9d352b7af1180d20871d68c"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5800000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x918}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001c80)={0x2, &(0x7f0000001c40)=[{0xa400, 0x80, 0xf5, 0x10}, {0x0, 0x5, 0x9e, 0x4}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000001cc0)={0x3cee, r16, 0x21, {0x696c, 0x2}, 0xff}, 0x1) bind$packet(r2, &(0x7f0000001d00)={0x11, 0x7a, r12, 0x1, 0x7}, 0x14) fsetxattr$security_evm(r15, &(0x7f0000001d40), &(0x7f0000001d80)=@v2={0x3, 0x1, 0xd, 0x8, 0x7b, "2ddb324c4a8ce6340f70084b61d41671ad1c104522f1c6d23afb5261a7fc809766ec1f13d5ecd45615cada734e2405929b39db48eddfa45edb51f4bb9f4693e6af186a518a9099935c23f4b001f2327d2532f7c8f3421424562bc890d024c56865ca16df6bada002cba03e7019a2ec8491aeb9d7c811d40f51e63e"}, 0x84, 0x0) statfs(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)=""/196) creat(&(0x7f0000001f80)='./file1\x00', 0x100) getsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000001fc0)=""/101, &(0x7f0000002040)=0x65) 496.257523ms ago: executing program 5 (id=2445): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x10012, r2, 0x4000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe, 0x5}]}, 0x10) 448.493884ms ago: executing program 3 (id=2446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x94b9}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x66, &(0x7f0000000340)={0x0, 0x0, 0xb2, 0x92, ""/146}, &(0x7f0000000080)=0x16, 0x0) (fail_nth: 2) 437.782624ms ago: executing program 2 (id=2447): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) getrusage(0xfffffffffffffffe, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}}, 0x24}}, 0x0) 379.820024ms ago: executing program 2 (id=2448): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) finit_module(r2, &(0x7f0000000080)='%-010d \x00', 0x3) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, r6, 0x0, 0x46) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 379.502484ms ago: executing program 3 (id=2449): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x400000}]) 241.841826ms ago: executing program 0 (id=2450): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004809}, 0x10) 200.362777ms ago: executing program 2 (id=2451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x400000}]) 199.681917ms ago: executing program 3 (id=2452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0x2}]}, {0x0, [0x61, 0x5f, 0x30, 0x5f, 0x0, 0x30, 0x30]}}, &(0x7f0000000240)=""/73, 0x31, 0x49, 0x1, 0x2, 0x0, @void, @value}, 0x28) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_test', 0x2000, 0x180) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x1, 0x1, 0x8020, r5, 0xa2, '\x00', 0x0, r6, 0x5, 0x5, 0x1, 0x0, @value=r7, @void, @void, @value}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000540)="8f21d17b0000", 0x0, 0x0, 0x0, 0x1, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x94b9}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x66, &(0x7f0000000340)={0x0, 0x0, 0xb2, 0x92, ""/146}, &(0x7f0000000080)=0x16, 0x0) 184.725167ms ago: executing program 5 (id=2453): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 150.837467ms ago: executing program 3 (id=2454): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "87fdbbcefb3193d3", "1b8ea2c964061ecc00851173747441d9", "ddd87efc", "dd850c2e4be71901"}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000640)='console\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x14, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x94b9}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r12, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe4e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) 150.204798ms ago: executing program 2 (id=2455): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffeff}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x80000001}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 131.572787ms ago: executing program 5 (id=2456): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 54.106109ms ago: executing program 2 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 40.359979ms ago: executing program 5 (id=2458): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 29.858789ms ago: executing program 2 (id=2459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) 0s ago: executing program 5 (id=2460): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) finit_module(r2, &(0x7f0000000080)='%-010d \x00', 0x3) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, r6, 0x0, 0x46) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3.1654: Failed to acquire dquot type 1 [ 147.905633][ T8259] EXT4-fs (loop3): 1 truncate cleaned up [ 147.920727][ T8259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.971672][ T8252] Q6\bY4 speed is unknown, defaulting to 1000 [ 147.979693][ T8259] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.013494][ T8259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.204959][ T8278] SELinux: syz.2.1664 (8278) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.289122][ T8291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1668'. [ 148.299327][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 148.379668][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 148.480489][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1675'. [ 148.508361][ T8307] loop2: detected capacity change from 0 to 164 [ 148.516396][ T8307] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.534749][ T8307] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.543799][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.581362][ T8321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1676'. [ 148.634394][ T8323] SELinux: syz.4.1681 (8323) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 148.698190][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 148.763560][ T8332] loop2: detected capacity change from 0 to 512 [ 149.016791][ T8338] netlink: 'syz.2.1685': attribute type 10 has an invalid length. [ 149.040344][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.059349][ T8338] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.096868][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 149.291753][ T8349] loop1: detected capacity change from 0 to 512 [ 149.317675][ T8351] loop2: detected capacity change from 0 to 512 [ 149.325321][ T8351] EXT4-fs: journaled quota format not specified [ 149.337427][ T8349] EXT4-fs: inline encryption not supported [ 149.367826][ T8349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.390923][ T8349] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.428031][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.487875][ T8336] loop4: detected capacity change from 0 to 8192 [ 149.507062][ T8336] vfat: Unknown parameter '&(^|C:93٧$e}x6I>֓Z!PC F’;ce2BŪvkޏ2m8vb`gp;tStukewZ趰J bIۼi'I䩣 2)l2˛xИ?S5)-D' [ 149.735057][ T8389] loop1: detected capacity change from 0 to 512 [ 149.770941][ T8389] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.778372][ T8389] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1708: bad orphan inode 13 [ 149.901506][ T8389] ext4_test_bit(bit=12, block=18) = 1 [ 149.907269][ T8389] is_bad_inode(inode)=0 [ 149.911548][ T8389] NEXT_ORPHAN(inode)=2130706432 [ 149.916734][ T8389] max_ino=32 [ 149.919999][ T8389] i_nlink=1 [ 149.923697][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.955211][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.020038][ T8401] Q6\bY4 speed is unknown, defaulting to 1000 [ 150.460887][ T8336] loop4: detected capacity change from 0 to 8192 [ 150.643255][ T8425] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 150.643255][ T8425] program syz.2.1723 not setting count and/or reply_len properly [ 150.765413][ T8435] loop1: detected capacity change from 0 to 512 [ 150.795735][ T8435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.817786][ T8435] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.851657][ T8435] pim6reg: entered allmulticast mode [ 150.859328][ T8435] pim6reg: left allmulticast mode [ 150.894269][ T8455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.901703][ T8455] IPv6: NLM_F_CREATE should be set when creating new route [ 150.919970][ T8450] loop4: detected capacity change from 0 to 256 [ 150.935240][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.153855][ T8470] loop1: detected capacity change from 0 to 512 [ 151.191673][ T8470] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1737: corrupted in-inode xattr: invalid ea_ino [ 151.308924][ T8479] Q6\bY4 speed is unknown, defaulting to 1000 [ 151.669141][ T8486] SELinux: syz.2.1746 (8486) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.712517][ T8488] loop4: detected capacity change from 0 to 512 [ 151.786261][ T8488] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1747: Failed to acquire dquot type 1 [ 151.797847][ T8470] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1737: couldn't read orphan inode 15 (err -117) [ 151.813497][ T8470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.829347][ T8488] EXT4-fs (loop4): 1 truncate cleaned up [ 151.836373][ T8488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.852811][ T8488] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.883761][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 151.883778][ T29] audit: type=1400 audit(1745511118.219:5368): avc: denied { setattr } for pid=8464 comm="syz.1.1737" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.890517][ T8495] loop2: detected capacity change from 0 to 256 [ 151.913002][ T29] audit: type=1400 audit(1745511118.219:5369): avc: denied { write } for pid=8464 comm="syz.1.1737" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.928731][ T8488] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.941788][ T29] audit: type=1400 audit(1745511118.219:5370): avc: denied { add_name } for pid=8464 comm="syz.1.1737" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.974798][ T29] audit: type=1400 audit(1745511118.219:5371): avc: denied { create } for pid=8464 comm="syz.1.1737" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.996595][ T29] audit: type=1400 audit(1745511118.219:5372): avc: denied { read append open } for pid=8464 comm="syz.1.1737" path="/374/file0/file0/cpuset.effective_cpus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.022570][ T29] audit: type=1400 audit(1745511118.219:5373): avc: denied { name_bind } for pid=8494 comm="syz.2.1748" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.044352][ T29] audit: type=1400 audit(1745511118.219:5374): avc: denied { node_bind } for pid=8494 comm="syz.2.1748" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 152.073741][ T29] audit: type=1400 audit(1745511118.249:5375): avc: denied { read } for pid=8464 comm="syz.1.1737" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.098462][ T29] audit: type=1400 audit(1745511118.249:5376): avc: denied { open } for pid=8464 comm="syz.1.1737" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.122877][ T29] audit: type=1400 audit(1745511118.249:5377): avc: denied { ioctl } for pid=8464 comm="syz.1.1737" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.190038][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.252543][ T8501] loop2: detected capacity change from 0 to 512 [ 152.261005][ T8501] EXT4-fs: inline encryption not supported [ 152.300116][ T8501] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.396719][ T8516] loop2: detected capacity change from 0 to 256 [ 152.469476][ T8516] __nla_validate_parse: 8 callbacks suppressed [ 152.469495][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 152.526878][ T8525] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1757'. [ 152.556655][ T8529] loop2: detected capacity change from 0 to 512 [ 152.611957][ T8529] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1760: Failed to acquire dquot type 1 [ 152.663450][ T8529] EXT4-fs (loop2): 1 truncate cleaned up [ 152.685038][ T8529] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.717598][ T8527] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1761'. [ 152.857441][ T8556] loop2: detected capacity change from 0 to 256 [ 152.870723][ T8555] loop1: detected capacity change from 0 to 512 [ 152.896806][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 152.918220][ T8560] loop4: detected capacity change from 0 to 512 [ 152.935548][ T8555] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.954030][ T8560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.965329][ T8564] loop2: detected capacity change from 0 to 512 [ 152.971901][ T8564] EXT4-fs: inline encryption not supported [ 152.995358][ T8555] pim6reg: entered allmulticast mode [ 153.003601][ T8555] pim6reg: left allmulticast mode [ 153.023302][ T8560] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1765: invalid block [ 153.037603][ T8560] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1765: invalid indirect mapped block 4294967295 (level 1) [ 153.054712][ T8560] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1765: invalid indirect mapped block 4294967295 (level 1) [ 153.072773][ T8564] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.093233][ T8560] EXT4-fs (loop4): 2 truncates cleaned up [ 153.126284][ T8560] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #12: block 7: comm syz.4.1765: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 153.183794][ T8576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1769'. [ 153.209450][ T8576] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 153.352155][ T8579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1765: bg 0: block 5: invalid block bitmap [ 153.360683][ T8584] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1772'. [ 153.372502][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 153.382575][ T8588] batman_adv: batadv0: Interface deactivated: dummy0 [ 153.389686][ T8588] batman_adv: batadv0: Removing interface: dummy0 [ 153.403303][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.410763][ T8588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.423747][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1775'. [ 153.435222][ T8590] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 153.445460][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.453154][ T8588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.535364][ T8596] loop1: detected capacity change from 0 to 512 [ 153.542880][ T8596] EXT4-fs: inline encryption not supported [ 153.575405][ T8596] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.621025][ T8601] loop3: detected capacity change from 0 to 512 [ 153.653875][ T8606] loop2: detected capacity change from 0 to 512 [ 153.678016][ T8606] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 153.690767][ T8606] block device autoloading is deprecated and will be removed. [ 153.700159][ T8601] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1779: Failed to acquire dquot type 1 [ 153.713768][ T8606] bio_check_eod: 24 callbacks suppressed [ 153.713784][ T8606] syz.2.1782: attempt to access beyond end of device [ 153.713784][ T8606] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 153.734928][ T8601] EXT4-fs (loop3): 1 truncate cleaned up [ 153.741280][ T8601] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.754130][ T8606] EXT4-fs (loop2): couldn't read superblock of external journal [ 153.808273][ T8612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1783'. [ 153.823845][ T8613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1793'. [ 153.831168][ T8616] loop2: detected capacity change from 0 to 512 [ 153.849555][ T8612] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 153.858236][ T8619] loop1: detected capacity change from 0 to 512 [ 153.880029][ T8619] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1785: Failed to acquire dquot type 1 [ 153.896130][ T8616] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1784: Failed to acquire dquot type 1 [ 153.900346][ T8619] EXT4-fs (loop1): 1 truncate cleaned up [ 153.909104][ T8616] EXT4-fs (loop2): 1 truncate cleaned up [ 153.931384][ T8619] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.933476][ T8616] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.983997][ T8629] atomic_op ffff88812e9e4d28 conn xmit_atomic 0000000000000000 [ 154.085902][ T8641] loop4: detected capacity change from 0 to 256 [ 154.285260][ T8661] loop2: detected capacity change from 0 to 512 [ 154.304884][ T8661] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.322449][ T8661] pim6reg: entered allmulticast mode [ 154.331697][ T8667] loop1: detected capacity change from 0 to 512 [ 154.339793][ T8661] pim6reg: left allmulticast mode [ 154.348057][ T8667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.363733][ T8667] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1803: invalid block [ 154.377788][ T8667] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1803: invalid indirect mapped block 4294967295 (level 1) [ 154.392577][ T8667] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1803: invalid indirect mapped block 4294967295 (level 1) [ 154.400098][ T8672] bridge0: port 1(vlan0) entered blocking state [ 154.414662][ T8672] bridge0: port 1(vlan0) entered disabled state [ 154.421314][ T8672] vlan0: entered allmulticast mode [ 154.425946][ T8667] EXT4-fs (loop1): 2 truncates cleaned up [ 154.426544][ T8672] bridge0: entered allmulticast mode [ 154.434918][ T8667] EXT4-fs error (device loop1): ext4_find_dest_de:2054: inode #12: block 7: comm syz.1.1803: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 154.457532][ T8672] vlan0: left allmulticast mode [ 154.462494][ T8672] bridge0: left allmulticast mode [ 154.818328][ T8694] Q6\bY4 speed is unknown, defaulting to 1000 [ 155.423773][ T8715] FAULT_INJECTION: forcing a failure. [ 155.423773][ T8715] name failslab, interval 1, probability 0, space 0, times 0 [ 155.436843][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.2.1819 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 155.436870][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.436883][ T8715] Call Trace: [ 155.436891][ T8715] [ 155.436901][ T8715] dump_stack_lvl+0xf6/0x150 [ 155.436926][ T8715] dump_stack+0x15/0x1a [ 155.436952][ T8715] should_fail_ex+0x261/0x270 [ 155.437019][ T8715] should_failslab+0x8f/0xb0 [ 155.437046][ T8715] __kmalloc_node_noprof+0xaf/0x420 [ 155.437081][ T8715] ? __vmalloc_node_range_noprof+0x3e1/0xe80 [ 155.437161][ T8715] __vmalloc_node_range_noprof+0x3e1/0xe80 [ 155.437208][ T8715] ? selinux_capable+0x1f9/0x260 [ 155.437263][ T8715] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 155.437288][ T8715] __vmalloc_noprof+0x5e/0x70 [ 155.437304][ T8715] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 155.437340][ T8715] bpf_prog_alloc_no_stats+0x49/0x390 [ 155.437365][ T8715] ? bpf_prog_alloc+0x28/0x150 [ 155.437390][ T8715] bpf_prog_alloc+0x3a/0x150 [ 155.437499][ T8715] bpf_prog_load+0x532/0x10e0 [ 155.437605][ T8715] __sys_bpf+0x533/0x800 [ 155.437641][ T8715] __x64_sys_bpf+0x43/0x50 [ 155.437708][ T8715] x64_sys_call+0x23da/0x2e10 [ 155.437803][ T8715] do_syscall_64+0xc9/0x1a0 [ 155.437834][ T8715] ? clear_bhb_loop+0x25/0x80 [ 155.437896][ T8715] ? clear_bhb_loop+0x25/0x80 [ 155.437916][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.437940][ T8715] RIP: 0033:0x7f39d3eae969 [ 155.437958][ T8715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.437975][ T8715] RSP: 002b:00007f39d2517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.437993][ T8715] RAX: ffffffffffffffda RBX: 00007f39d40d5fa0 RCX: 00007f39d3eae969 [ 155.438004][ T8715] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 155.438015][ T8715] RBP: 00007f39d2517090 R08: 0000000000000000 R09: 0000000000000000 [ 155.438026][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.438088][ T8715] R13: 0000000000000000 R14: 00007f39d40d5fa0 R15: 00007ffc9f43a2a8 [ 155.438112][ T8715] [ 155.438169][ T8715] syz.2.1819: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 155.677770][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.2.1819 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 155.677803][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.677818][ T8715] Call Trace: [ 155.677828][ T8715] [ 155.677837][ T8715] dump_stack_lvl+0xf6/0x150 [ 155.677867][ T8715] dump_stack+0x15/0x1a [ 155.677881][ T8715] warn_alloc+0x145/0x1b0 [ 155.677986][ T8715] __vmalloc_node_range_noprof+0x478/0xe80 [ 155.678026][ T8715] ? selinux_capable+0x1f9/0x260 [ 155.678056][ T8715] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 155.678080][ T8715] __vmalloc_noprof+0x5e/0x70 [ 155.678094][ T8715] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 155.678118][ T8715] bpf_prog_alloc_no_stats+0x49/0x390 [ 155.678142][ T8715] ? bpf_prog_alloc+0x28/0x150 [ 155.678167][ T8715] bpf_prog_alloc+0x3a/0x150 [ 155.678190][ T8715] bpf_prog_load+0x532/0x10e0 [ 155.678227][ T8715] __sys_bpf+0x533/0x800 [ 155.678274][ T8715] __x64_sys_bpf+0x43/0x50 [ 155.678296][ T8715] x64_sys_call+0x23da/0x2e10 [ 155.678314][ T8715] do_syscall_64+0xc9/0x1a0 [ 155.678336][ T8715] ? clear_bhb_loop+0x25/0x80 [ 155.678477][ T8715] ? clear_bhb_loop+0x25/0x80 [ 155.678496][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.678540][ T8715] RIP: 0033:0x7f39d3eae969 [ 155.678552][ T8715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.678567][ T8715] RSP: 002b:00007f39d2517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.678583][ T8715] RAX: ffffffffffffffda RBX: 00007f39d40d5fa0 RCX: 00007f39d3eae969 [ 155.678593][ T8715] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 155.678643][ T8715] RBP: 00007f39d2517090 R08: 0000000000000000 R09: 0000000000000000 [ 155.678653][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.678663][ T8715] R13: 0000000000000000 R14: 00007f39d40d5fa0 R15: 00007ffc9f43a2a8 [ 155.678680][ T8715] [ 155.678685][ T8715] Mem-Info: [ 155.891194][ T8715] active_anon:5954 inactive_anon:8 isolated_anon:0 [ 155.891194][ T8715] active_file:4289 inactive_file:2831 isolated_file:0 [ 155.891194][ T8715] unevictable:0 dirty:27 writeback:0 [ 155.891194][ T8715] slab_reclaimable:2963 slab_unreclaimable:16121 [ 155.891194][ T8715] mapped:30905 shmem:3148 pagetables:987 [ 155.891194][ T8715] sec_pagetables:0 bounce:0 [ 155.891194][ T8715] kernel_misc_reclaimable:0 [ 155.891194][ T8715] free:1889316 free_pcp:20973 free_cma:0 [ 155.937033][ T8715] Node 0 active_anon:23816kB inactive_anon:32kB active_file:17156kB inactive_file:11324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123620kB dirty:224kB writeback:0kB shmem:12592kB writeback_tmp:0kB kernel_stack:2848kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.966914][ T8715] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.995515][ T8715] lowmem_reserve[]: 0 2882 7860 7860 [ 156.000852][ T8715] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 156.030224][ T8715] lowmem_reserve[]: 0 0 4978 4978 [ 156.035366][ T8715] Node 0 Normal free:4594124kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:23816kB inactive_anon:32kB active_file:17156kB inactive_file:11324kB unevictable:0kB writepending:224kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:80364kB local_pcp:41744kB free_cma:0kB [ 156.066636][ T8715] lowmem_reserve[]: 0 0 0 0 [ 156.071757][ T8715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.085942][ T8715] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB [ 156.102458][ T8715] Node 0 Normal: 1859*4kB (UME) 1114*8kB (UME) 1052*16kB (UME) 1115*32kB (UM) 867*64kB (UME) 509*128kB (UM) 318*256kB (UME) 218*512kB (UME) 131*1024kB (UME) 57*2048kB (UME) 967*4096kB (UM) = 4594236kB [ 156.123248][ T8715] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 156.132666][ T8715] 10225 total pagecache pages [ 156.137358][ T8715] 0 pages in swap cache [ 156.141657][ T8715] Free swap = 123724kB [ 156.146036][ T8715] Total swap = 124996kB [ 156.150393][ T8715] 2097051 pages RAM [ 156.154253][ T8715] 0 pages HighMem/MovableOnly [ 156.158953][ T8715] 80823 pages reserved [ 156.301078][ T8744] FAULT_INJECTION: forcing a failure. [ 156.301078][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 156.314509][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.1.1830 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 156.314543][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.314557][ T8744] Call Trace: [ 156.314579][ T8744] [ 156.314588][ T8744] dump_stack_lvl+0xf6/0x150 [ 156.314656][ T8744] dump_stack+0x15/0x1a [ 156.314796][ T8744] should_fail_ex+0x261/0x270 [ 156.314825][ T8744] should_failslab+0x8f/0xb0 [ 156.314851][ T8744] __kmalloc_node_noprof+0xaf/0x420 [ 156.314883][ T8744] ? __kmalloc_noprof+0x1eb/0x410 [ 156.314916][ T8744] ? get_callchain_buffers+0x18d/0x2d0 [ 156.314984][ T8744] get_callchain_buffers+0x18d/0x2d0 [ 156.315050][ T8744] stack_map_alloc+0x247/0x2b0 [ 156.315114][ T8744] map_create+0x881/0xba0 [ 156.315146][ T8744] __sys_bpf+0x6ac/0x800 [ 156.315208][ T8744] __x64_sys_bpf+0x43/0x50 [ 156.315239][ T8744] x64_sys_call+0x23da/0x2e10 [ 156.315318][ T8744] do_syscall_64+0xc9/0x1a0 [ 156.315345][ T8744] ? clear_bhb_loop+0x25/0x80 [ 156.315366][ T8744] ? clear_bhb_loop+0x25/0x80 [ 156.315390][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.315417][ T8744] RIP: 0033:0x7f877171e969 [ 156.315438][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.315459][ T8744] RSP: 002b:00007f876fd87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.315482][ T8744] RAX: ffffffffffffffda RBX: 00007f8771945fa0 RCX: 00007f877171e969 [ 156.315518][ T8744] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 0000000000000000 [ 156.315533][ T8744] RBP: 00007f876fd87090 R08: 0000000000000000 R09: 0000000000000000 [ 156.315546][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.315560][ T8744] R13: 0000000000000000 R14: 00007f8771945fa0 R15: 00007ffc427193b8 [ 156.315613][ T8744] [ 156.573538][ T8754] atomic_op ffff88812e9e5d28 conn xmit_atomic 0000000000000000 [ 156.692982][ T8776] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 156.857755][ T8804] atomic_op ffff88812e9e7928 conn xmit_atomic 0000000000000000 [ 156.886600][ T8806] SELinux: syz.1.1853 (8806) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.913475][ T8811] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 156.937036][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 156.937054][ T29] audit: type=1326 audit(1745511123.270:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 156.971968][ T29] audit: type=1326 audit(1745511123.270:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 156.998247][ T29] audit: type=1326 audit(1745511123.270:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.023030][ T29] audit: type=1326 audit(1745511123.270:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.048855][ T29] audit: type=1326 audit(1745511123.270:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.076030][ T29] audit: type=1326 audit(1745511123.270:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.101044][ T29] audit: type=1326 audit(1745511123.270:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.124898][ T29] audit: type=1326 audit(1745511123.270:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.148964][ T29] audit: type=1326 audit(1745511123.270:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.173043][ T29] audit: type=1326 audit(1745511123.270:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.0.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 157.226345][ T8827] syzkaller1: entered promiscuous mode [ 157.232247][ T8827] syzkaller1: entered allmulticast mode [ 157.402811][ T8832] FAULT_INJECTION: forcing a failure. [ 157.402811][ T8832] name failslab, interval 1, probability 0, space 0, times 0 [ 157.415567][ T8832] CPU: 1 UID: 0 PID: 8832 Comm: syz.3.1861 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 157.415601][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.415616][ T8832] Call Trace: [ 157.415625][ T8832] [ 157.415634][ T8832] dump_stack_lvl+0xf6/0x150 [ 157.415659][ T8832] dump_stack+0x15/0x1a [ 157.415675][ T8832] should_fail_ex+0x261/0x270 [ 157.415701][ T8832] should_failslab+0x8f/0xb0 [ 157.415727][ T8832] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 157.415788][ T8832] ? __alloc_skb+0x10d/0x320 [ 157.415813][ T8832] __alloc_skb+0x10d/0x320 [ 157.415834][ T8832] ? prep_new_page+0x52/0x1c0 [ 157.415852][ T8832] alloc_skb_with_frags+0x80/0x460 [ 157.415873][ T8832] ? should_fail_ex+0xd7/0x270 [ 157.415927][ T8832] ? ref_tracker_alloc+0x1ff/0x310 [ 157.415993][ T8832] sock_alloc_send_pskb+0x437/0x500 [ 157.416104][ T8832] ? __check_object_size+0x367/0x510 [ 157.416135][ T8832] ? __rcu_read_unlock+0x4e/0x70 [ 157.416157][ T8832] isotp_sendmsg+0x5ba/0xc10 [ 157.416255][ T8832] ? __pfx_isotp_sendmsg+0x10/0x10 [ 157.416277][ T8832] __sock_sendmsg+0x140/0x180 [ 157.416312][ T8832] __sys_sendto+0x1aa/0x230 [ 157.416349][ T8832] __x64_sys_sendto+0x78/0x90 [ 157.416374][ T8832] x64_sys_call+0x2bcb/0x2e10 [ 157.416422][ T8832] do_syscall_64+0xc9/0x1a0 [ 157.416452][ T8832] ? clear_bhb_loop+0x25/0x80 [ 157.416516][ T8832] ? clear_bhb_loop+0x25/0x80 [ 157.416546][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.416569][ T8832] RIP: 0033:0x7efcd63b07fc [ 157.416589][ T8832] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 157.416655][ T8832] RSP: 002b:00007efcd4a15ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 157.416679][ T8832] RAX: ffffffffffffffda RBX: 00007efcd4a15fc0 RCX: 00007efcd63b07fc [ 157.416694][ T8832] RDX: 0000000000000020 RSI: 00007efcd4a16010 RDI: 0000000000000004 [ 157.416709][ T8832] RBP: 0000000000000000 R08: 00007efcd4a15f14 R09: 000000000000000c [ 157.416787][ T8832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 157.416800][ T8832] R13: 00007efcd4a15f68 R14: 00007efcd4a16010 R15: 0000000000000000 [ 157.416823][ T8832] [ 157.760265][ T8840] loop2: detected capacity change from 0 to 512 [ 157.768413][ T8840] EXT4-fs: inline encryption not supported [ 157.789569][ T8842] atomic_op ffff888150ee6d28 conn xmit_atomic 0000000000000000 [ 157.809251][ T8840] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.841583][ T8848] __nla_validate_parse: 21 callbacks suppressed [ 157.841603][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 157.884630][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 157.938732][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 158.173274][ T8868] netlink: 'syz.4.1874': attribute type 4 has an invalid length. [ 158.569712][ T8873] loop4: detected capacity change from 0 to 512 [ 158.645946][ T8873] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1876: Failed to acquire dquot type 1 [ 158.660662][ T8873] EXT4-fs (loop4): 1 truncate cleaned up [ 158.668931][ T8873] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.795478][ T8883] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1879'. [ 158.968509][ T8895] loop4: detected capacity change from 0 to 512 [ 158.984780][ T8895] EXT4-fs: inline encryption not supported [ 159.004577][ T8895] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.086390][ T8904] loop4: detected capacity change from 0 to 512 [ 159.099447][ T8904] EXT4-fs: journaled quota format not specified [ 159.140506][ T8907] 9pnet: Could not find request transport: f [ 159.154655][ T8910] loop4: detected capacity change from 0 to 512 [ 159.190296][ T8910] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1889: Failed to acquire dquot type 1 [ 159.213478][ T8910] EXT4-fs (loop4): 1 truncate cleaned up [ 159.219841][ T8910] EXT4-fs mount: 28 callbacks suppressed [ 159.219854][ T8910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.272813][ T8910] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.285532][ T8910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.455956][ T8926] SELinux: syz.1.1895 (8926) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.483307][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 159.516054][ T8928] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 159.522504][ T8932] loop3: detected capacity change from 0 to 512 [ 159.532140][ T8932] EXT4-fs: inline encryption not supported [ 159.538378][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 159.554448][ T8932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.575185][ T8932] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.603656][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.658654][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 159.693192][ T8899] program syz.2.1886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.717450][ T8948] loop3: detected capacity change from 0 to 512 [ 159.742921][ T8952] FAULT_INJECTION: forcing a failure. [ 159.742921][ T8952] name failslab, interval 1, probability 0, space 0, times 0 [ 159.755969][ T8952] CPU: 1 UID: 0 PID: 8952 Comm: syz.4.1903 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 159.756000][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.756015][ T8952] Call Trace: [ 159.756022][ T8952] [ 159.756031][ T8952] dump_stack_lvl+0xf6/0x150 [ 159.756059][ T8952] dump_stack+0x15/0x1a [ 159.756157][ T8952] should_fail_ex+0x261/0x270 [ 159.756201][ T8952] should_failslab+0x8f/0xb0 [ 159.756225][ T8952] __kmalloc_noprof+0xad/0x410 [ 159.756259][ T8952] ? alloc_trace_uprobe+0x37/0x1f0 [ 159.756343][ T8952] ? kmem_cache_free+0xe4/0x2e0 [ 159.756372][ T8952] alloc_trace_uprobe+0x37/0x1f0 [ 159.756399][ T8952] create_local_trace_uprobe+0xc0/0x300 [ 159.756494][ T8952] perf_uprobe_init+0xc2/0x140 [ 159.756523][ T8952] perf_uprobe_event_init+0xe2/0x140 [ 159.756555][ T8952] perf_try_init_event+0xcd/0x530 [ 159.756616][ T8952] ? perf_event_alloc+0xaa0/0x1660 [ 159.756643][ T8952] perf_event_alloc+0xaab/0x1660 [ 159.756700][ T8952] __se_sys_perf_event_open+0x5be/0x2220 [ 159.756732][ T8952] ? bpf_trace_run2+0x12c/0x1d0 [ 159.756761][ T8952] __x64_sys_perf_event_open+0x67/0x80 [ 159.756783][ T8952] x64_sys_call+0x27bb/0x2e10 [ 159.756841][ T8952] do_syscall_64+0xc9/0x1a0 [ 159.756872][ T8952] ? clear_bhb_loop+0x25/0x80 [ 159.756898][ T8952] ? clear_bhb_loop+0x25/0x80 [ 159.756921][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.757000][ T8952] RIP: 0033:0x7f6cdff1e969 [ 159.757018][ T8952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.757035][ T8952] RSP: 002b:00007f6cde587038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 159.757056][ T8952] RAX: ffffffffffffffda RBX: 00007f6ce0145fa0 RCX: 00007f6cdff1e969 [ 159.757067][ T8952] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0 [ 159.757093][ T8952] RBP: 00007f6cde587090 R08: 0000000000000000 R09: 0000000000000000 [ 159.757111][ T8952] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 159.757126][ T8952] R13: 0000000000000000 R14: 00007f6ce0145fa0 R15: 00007ffeb7214a48 [ 159.757151][ T8952] [ 159.757169][ T8952] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 159.825840][ T8948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.650497][ T8948] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.006999][ T8937] Q6\bY4 speed is unknown, defaulting to 1000 [ 161.025887][ T8967] pim6reg: entered allmulticast mode [ 161.032678][ T8948] pim6reg: left allmulticast mode [ 161.094533][ T8973] loop4: detected capacity change from 0 to 512 [ 161.104538][ T8973] EXT4-fs: inline encryption not supported [ 161.174149][ T8973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.175641][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.199265][ T8973] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.257858][ T8985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1914'. [ 161.268103][ T8985] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 161.277201][ T8981] loop1: detected capacity change from 0 to 512 [ 161.298540][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.363583][ T8981] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1912: Failed to acquire dquot type 1 [ 161.380289][ T8981] EXT4-fs (loop1): 1 truncate cleaned up [ 161.386862][ T8981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.402691][ T8981] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.429934][ T8981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.495195][ T9006] FAULT_INJECTION: forcing a failure. [ 161.495195][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 161.508168][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.4.1921 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 161.508215][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.508231][ T9006] Call Trace: [ 161.508239][ T9006] [ 161.508250][ T9006] dump_stack_lvl+0xf6/0x150 [ 161.508281][ T9006] dump_stack+0x15/0x1a [ 161.508300][ T9006] should_fail_ex+0x261/0x270 [ 161.508331][ T9006] should_failslab+0x8f/0xb0 [ 161.508401][ T9006] __kmalloc_cache_noprof+0x55/0x320 [ 161.508479][ T9006] ? alloc_bprm+0x64/0x680 [ 161.508518][ T9006] alloc_bprm+0x64/0x680 [ 161.508549][ T9006] do_execveat_common+0x12b/0x7e0 [ 161.508567][ T9006] ? getname_flags+0x15a/0x3b0 [ 161.508633][ T9006] __x64_sys_execveat+0x75/0x90 [ 161.508673][ T9006] x64_sys_call+0x2ac7/0x2e10 [ 161.508700][ T9006] do_syscall_64+0xc9/0x1a0 [ 161.508730][ T9006] ? clear_bhb_loop+0x25/0x80 [ 161.508793][ T9006] ? clear_bhb_loop+0x25/0x80 [ 161.508818][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.508845][ T9006] RIP: 0033:0x7f6cdff1e969 [ 161.508864][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.508885][ T9006] RSP: 002b:00007f6cde587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 161.508908][ T9006] RAX: ffffffffffffffda RBX: 00007f6ce0145fa0 RCX: 00007f6cdff1e969 [ 161.508922][ T9006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 161.508937][ T9006] RBP: 00007f6cde587090 R08: 0000000000001000 R09: 0000000000000000 [ 161.508958][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.509037][ T9006] R13: 0000000000000000 R14: 00007f6ce0145fa0 R15: 00007ffeb7214a48 [ 161.509059][ T9006] [ 161.705282][ T9007] Q6\bY4 speed is unknown, defaulting to 1000 [ 161.824536][ T9009] loop1: detected capacity change from 0 to 512 [ 161.885074][ T9009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.939270][ T9013] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1923'. [ 161.954825][ T9009] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.045533][ T9009] pim6reg: entered allmulticast mode [ 162.094174][ T9020] pim6reg: left allmulticast mode [ 162.289991][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 162.290007][ T29] audit: type=1326 audit(1745511128.420:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.321763][ T29] audit: type=1326 audit(1745511128.420:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.346902][ T29] audit: type=1326 audit(1745511128.420:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.371895][ T29] audit: type=1326 audit(1745511128.420:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.395648][ T29] audit: type=1326 audit(1745511128.420:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.419706][ T29] audit: type=1326 audit(1745511128.420:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.443442][ T29] audit: type=1326 audit(1745511128.420:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.443835][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 162.467206][ T29] audit: type=1326 audit(1745511128.420:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.467281][ T29] audit: type=1326 audit(1745511128.430:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.523418][ T29] audit: type=1326 audit(1745511128.430:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdff1e969 code=0x7ffc0000 [ 162.637937][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.649827][ T9032] geneve0: entered allmulticast mode [ 162.687406][ T9039] FAULT_INJECTION: forcing a failure. [ 162.687406][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 162.703653][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: syz.1.1932 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 162.703685][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.703701][ T9039] Call Trace: [ 162.703709][ T9039] [ 162.703720][ T9039] dump_stack_lvl+0xf6/0x150 [ 162.703749][ T9039] dump_stack+0x15/0x1a [ 162.703843][ T9039] should_fail_ex+0x261/0x270 [ 162.703965][ T9039] should_failslab+0x8f/0xb0 [ 162.704002][ T9039] __kmalloc_noprof+0xad/0x410 [ 162.704084][ T9039] ? __se_sys_name_to_handle_at+0x277/0x580 [ 162.704112][ T9039] __se_sys_name_to_handle_at+0x277/0x580 [ 162.704143][ T9039] __x64_sys_name_to_handle_at+0x67/0x80 [ 162.704176][ T9039] x64_sys_call+0x2739/0x2e10 [ 162.704266][ T9039] do_syscall_64+0xc9/0x1a0 [ 162.704298][ T9039] ? clear_bhb_loop+0x25/0x80 [ 162.704325][ T9039] ? clear_bhb_loop+0x25/0x80 [ 162.704353][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.704444][ T9039] RIP: 0033:0x7f877171e969 [ 162.704462][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.704481][ T9039] RSP: 002b:00007f876fd87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 162.704500][ T9039] RAX: ffffffffffffffda RBX: 00007f8771945fa0 RCX: 00007f877171e969 [ 162.704513][ T9039] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 162.704582][ T9039] RBP: 00007f876fd87090 R08: 0000000000001000 R09: 0000000000000000 [ 162.704595][ T9039] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.704608][ T9039] R13: 0000000000000000 R14: 00007f8771945fa0 R15: 00007ffc427193b8 [ 162.704644][ T9039] [ 162.886326][ T9031] loop4: detected capacity change from 0 to 1024 [ 162.898004][ T9031] EXT4-fs: test_dummy_encryption option not supported [ 162.926571][ T9045] loop4: detected capacity change from 0 to 512 [ 162.934654][ T9045] EXT4-fs: inline encryption not supported [ 162.971500][ T9045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.986604][ T9045] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.014927][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.058319][ T9058] __nla_validate_parse: 2 callbacks suppressed [ 163.058340][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1940'. [ 163.097112][ T9060] sctp: [Deprecated]: syz.4.1941 (pid 9060) Use of int in max_burst socket option. [ 163.097112][ T9060] Use struct sctp_assoc_value instead [ 163.234565][ T9064] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1943'. [ 163.274659][ T9050] loop3: detected capacity change from 0 to 8192 [ 163.285729][ T9050] vfat: Unknown parameter '&(^|C:93٧$e}x6I>֓Z!PC F’;ce2BŪvkޏ2m8vb`gp;tStukewZ趰J bIۼi'I䩣 2)l2˛xИ?S5)-D' [ 163.440933][ T9071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1946'. [ 163.475326][ T9073] loop4: detected capacity change from 0 to 512 [ 163.501007][ T9073] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1947: Failed to acquire dquot type 1 [ 163.514973][ T9073] EXT4-fs (loop4): 1 truncate cleaned up [ 163.520783][ T9079] xt_TCPMSS: Only works on TCP SYN packets [ 163.533262][ T9073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.554304][ T9073] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.589843][ T9073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.616641][ T9085] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1951'. [ 163.779425][ T9050] loop3: detected capacity change from 0 to 8192 [ 163.843222][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1959'. [ 163.918631][ T9109] loop4: detected capacity change from 0 to 2048 [ 163.941496][ T9118] loop2: detected capacity change from 0 to 512 [ 163.948969][ T9115] loop3: detected capacity change from 0 to 512 [ 163.955729][ T9118] EXT4-fs: journaled quota format not specified [ 163.973566][ T9109] loop4: p1 < > p4 [ 163.978525][ T9109] loop4: p4 size 8388608 extends beyond EOD, truncated [ 163.986344][ T9115] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1965: Failed to acquire dquot type 1 [ 163.999594][ T9115] EXT4-fs (loop3): 1 truncate cleaned up [ 164.006601][ T9120] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1967'. [ 164.008786][ T9115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.033881][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 164.043258][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 164.052804][ T9115] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.064946][ T9115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.075399][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 164.084418][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 164.455505][ T9167] loop3: detected capacity change from 0 to 512 [ 164.474623][ T9167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.487925][ T9167] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.503301][ T9167] pim6reg: entered allmulticast mode [ 164.509408][ T9167] pim6reg: left allmulticast mode [ 164.519960][ T9162] Q6\bY4 speed is unknown, defaulting to 1000 [ 164.595920][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.632105][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 164.699871][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.707265][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.715816][ T9162] bridge_slave_0: entered allmulticast mode [ 164.722611][ T9162] bridge_slave_0: entered promiscuous mode [ 164.729661][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.737017][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.744679][ T9162] bridge_slave_1: entered allmulticast mode [ 164.751380][ T9162] bridge_slave_1: entered promiscuous mode [ 164.774989][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.785754][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.823129][ T9162] team0: Port device team_slave_0 added [ 164.835379][ T9162] team0: Port device team_slave_1 added [ 164.884594][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.892032][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.918307][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.983918][ T9207] loop1: detected capacity change from 0 to 512 [ 164.990942][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.998424][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.024791][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.096154][ T9162] hsr_slave_0: entered promiscuous mode [ 165.103022][ T9162] hsr_slave_1: entered promiscuous mode [ 165.109203][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.118355][ T9207] EXT4-fs (loop1): 1 orphan inode deleted [ 165.124753][ T9207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.138337][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 165.150313][ T9162] Cannot create hsr debugfs directory [ 165.161102][ T9207] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.193296][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.294879][ T9162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.311260][ T9162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.325024][ T9162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.334695][ T9162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.384877][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.406482][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.432421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.440076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.455068][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.462333][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.503440][ T9228] loop1: detected capacity change from 0 to 512 [ 165.516517][ T9228] EXT4-fs: journaled quota format not specified [ 165.540284][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.693863][ T9162] veth0_vlan: entered promiscuous mode [ 165.713910][ T9162] veth1_vlan: entered promiscuous mode [ 165.738465][ T9162] veth0_macvtap: entered promiscuous mode [ 165.754257][ T9162] veth1_macvtap: entered promiscuous mode [ 165.777627][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.798219][ T9248] loop3: detected capacity change from 0 to 512 [ 165.803351][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.808743][ T9248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.823203][ T9162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.832110][ T9162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.841239][ T9162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.850174][ T9162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.862989][ T9248] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2001: invalid block [ 165.883716][ T9248] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2001: invalid indirect mapped block 4294967295 (level 1) [ 165.903808][ T9248] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2001: invalid indirect mapped block 4294967295 (level 1) [ 165.918594][ T9248] EXT4-fs (loop3): 2 truncates cleaned up [ 165.925756][ T9248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.943736][ T9248] EXT4-fs error (device loop3): ext4_find_dest_de:2054: inode #12: block 7: comm syz.3.2001: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 166.001148][ T9248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2001: bg 0: block 5: invalid block bitmap [ 166.028894][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.104091][ T9274] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 166.124979][ T9279] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 166.313308][ T9294] loop5: detected capacity change from 0 to 512 [ 166.321511][ T9294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.334054][ T9294] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2018: invalid block [ 166.347282][ T9294] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2018: invalid indirect mapped block 4294967295 (level 1) [ 166.371804][ T9294] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2018: invalid indirect mapped block 4294967295 (level 1) [ 166.401881][ T9294] EXT4-fs (loop5): 2 truncates cleaned up [ 166.414841][ T9294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.434332][ T9303] loop1: detected capacity change from 0 to 1024 [ 166.442539][ T9294] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #12: block 7: comm syz.5.2018: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 166.481123][ T9303] EXT4-fs: Ignoring removed orlov option [ 166.486902][ T9303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.500856][ T9294] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2018: bg 0: block 5: invalid block bitmap [ 166.580684][ T9303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.600825][ T9305] bridge0: port 1(vlan0) entered blocking state [ 166.608683][ T9305] bridge0: port 1(vlan0) entered disabled state [ 166.638867][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.654366][ T9305] vlan0: entered allmulticast mode [ 166.660606][ T9305] bridge0: entered allmulticast mode [ 166.680847][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.685965][ T9311] SELinux: syz.1.2025 (9311) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.709786][ T9305] vlan0: left allmulticast mode [ 166.718986][ T9305] bridge0: left allmulticast mode [ 166.886291][ T9325] loop2: detected capacity change from 0 to 512 [ 166.893364][ T9325] EXT4-fs: journaled quota format not specified [ 167.035737][ T9342] loop5: detected capacity change from 0 to 512 [ 167.056114][ T9342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.082953][ T9342] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2038: invalid block [ 167.114486][ T9342] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2038: invalid indirect mapped block 4294967295 (level 1) [ 167.129971][ T9342] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2038: invalid indirect mapped block 4294967295 (level 1) [ 167.146692][ T9342] EXT4-fs (loop5): 2 truncates cleaned up [ 167.153029][ T9342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.171089][ T9342] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #12: block 7: comm syz.5.2038: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 167.197445][ T9354] SELinux: syz.3.2041 (9354) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 167.261490][ T9342] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2038: bg 0: block 5: invalid block bitmap [ 167.310662][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.381004][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 167.381022][ T29] audit: type=1400 audit(1745511133.710:6166): avc: denied { ioctl } for pid=9371 comm="syz.5.2048" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.414577][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.423835][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.447630][ T29] audit: type=1400 audit(1745511133.760:6167): avc: denied { write } for pid=9371 comm="syz.5.2048" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.453424][ T9373] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.481402][ T9373] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 167.491588][ T29] audit: type=1400 audit(1745511133.830:6168): avc: denied { bind } for pid=9371 comm="syz.5.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.609942][ T9382] loop3: detected capacity change from 0 to 512 [ 167.624657][ T9382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.638254][ T9382] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.653245][ T9382] pim6reg: entered allmulticast mode [ 167.659551][ T9382] pim6reg: left allmulticast mode [ 167.698062][ T9388] loop2: detected capacity change from 0 to 512 [ 167.705194][ T9388] EXT4-fs: inline encryption not supported [ 167.714094][ T9388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.726883][ T9388] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.740094][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.755206][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.774501][ T9392] SELinux: syz.3.2055 (9392) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 167.800726][ T29] audit: type=1326 audit(1745511134.130:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 167.826293][ T29] audit: type=1326 audit(1745511134.160:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 167.850199][ T29] audit: type=1326 audit(1745511134.160:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 167.873792][ T29] audit: type=1326 audit(1745511134.160:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 167.898216][ T29] audit: type=1326 audit(1745511134.160:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 167.921942][ T29] audit: type=1326 audit(1745511134.160:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 167.945642][ T29] audit: type=1326 audit(1745511134.160:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.2.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3eae969 code=0x7ffc0000 [ 168.141722][ T9418] loop2: detected capacity change from 0 to 512 [ 168.158939][ T9418] EXT4-fs: journaled quota format not specified [ 168.177332][ T9421] pim6reg: entered allmulticast mode [ 168.184385][ T9421] pim6reg: left allmulticast mode [ 168.210085][ T9422] __nla_validate_parse: 19 callbacks suppressed [ 168.210107][ T9422] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2065'. [ 168.293005][ T9430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2068'. [ 168.311337][ T9432] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2071'. [ 168.361544][ T9439] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 168.378148][ T9440] loop5: detected capacity change from 0 to 512 [ 168.406064][ T9440] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2073: Failed to acquire dquot type 1 [ 168.430743][ T9440] EXT4-fs (loop5): 1 truncate cleaned up [ 168.436902][ T9440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.450341][ T9440] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.462828][ T9440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.487201][ T9450] pim6reg: entered allmulticast mode [ 168.494436][ T9450] pim6reg: left allmulticast mode [ 168.549754][ T9452] FAULT_INJECTION: forcing a failure. [ 168.549754][ T9452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.563123][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.5.2079 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 168.563155][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.563170][ T9452] Call Trace: [ 168.563178][ T9452] [ 168.563187][ T9452] dump_stack_lvl+0xf6/0x150 [ 168.563215][ T9452] dump_stack+0x15/0x1a [ 168.563235][ T9452] should_fail_ex+0x261/0x270 [ 168.563338][ T9452] should_fail_alloc_page+0xfd/0x110 [ 168.563367][ T9452] __alloc_frozen_pages_noprof+0x11d/0x360 [ 168.563395][ T9452] alloc_pages_mpol+0xb6/0x260 [ 168.563429][ T9452] alloc_pages_noprof+0xe8/0x130 [ 168.563544][ T9452] pte_alloc_one+0x2f/0x110 [ 168.563575][ T9452] __pte_alloc+0x36/0x2b0 [ 168.563724][ T9452] handle_mm_fault+0x1d69/0x2e80 [ 168.563752][ T9452] ? mas_walk+0x204/0x320 [ 168.563773][ T9452] ? __rcu_read_unlock+0x4e/0x70 [ 168.563800][ T9452] exc_page_fault+0x3b9/0x6a0 [ 168.563853][ T9452] ? do_syscall_64+0xd6/0x1a0 [ 168.563883][ T9452] asm_exc_page_fault+0x26/0x30 [ 168.563905][ T9452] RIP: 0033:0x7f01820b0d66 [ 168.563922][ T9452] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 168.563981][ T9452] RSP: 002b:00007f01808564a0 EFLAGS: 00010246 [ 168.564061][ T9452] RAX: 0000000000000001 RBX: 00007f0180856540 RCX: 0000000000000101 [ 168.564074][ T9452] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007f01808565e0 [ 168.564088][ T9452] RBP: 0000000000000102 R08: 00007f0178437000 R09: 0000000000000000 [ 168.564101][ T9452] R10: 0000000000000000 R11: 00007f0180856550 R12: 0000000000000001 [ 168.564114][ T9452] R13: 00007f018228bfc0 R14: 0000000000000000 R15: 00007f01808565e0 [ 168.564139][ T9452] [ 168.564150][ T9452] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 168.753478][ T9452] loop5: detected capacity change from 0 to 512 [ 168.775832][ T9452] EXT4-fs (loop5): 1 orphan inode deleted [ 168.782015][ T9452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.795860][ T9452] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.798837][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 168.830206][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.987980][ T9474] loop2: detected capacity change from 0 to 2048 [ 169.008577][ T9474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.092043][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.100824][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'. [ 169.110376][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.118027][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.126189][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.134099][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.149100][ T9480] loop2: detected capacity change from 0 to 512 [ 169.158327][ T9480] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2090: Failed to acquire dquot type 1 [ 169.170691][ T9480] EXT4-fs (loop2): 1 truncate cleaned up [ 169.177348][ T9480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.190507][ T9480] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.202051][ T9480] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.374742][ T9497] loop5: detected capacity change from 0 to 512 [ 169.383825][ T9497] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2097: Failed to acquire dquot type 1 [ 169.396412][ T9497] EXT4-fs (loop5): 1 truncate cleaned up [ 169.403040][ T9497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.422615][ T9497] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.440337][ T9497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.524114][ T9500] Q6\bY4 speed is unknown, defaulting to 1000 [ 170.465288][ T9509] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 170.465288][ T9509] program syz.1.2101 not setting count and/or reply_len properly [ 170.489154][ T9509] loop1: detected capacity change from 0 to 512 [ 170.496343][ T9516] loop5: detected capacity change from 0 to 512 [ 170.525110][ T9509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 170.538273][ T9509] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.560450][ T9516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.579001][ T9516] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.579856][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2106'. [ 170.604847][ T9516] pim6reg: entered allmulticast mode [ 170.611428][ T9516] pim6reg: left allmulticast mode [ 170.642708][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2106'. [ 170.675121][ T9525] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.2101: corrupted inode contents [ 170.694622][ T9525] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #19: comm syz.1.2101: mark_inode_dirty error [ 170.706813][ T9525] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.2101: corrupted inode contents [ 170.719826][ T9525] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.2101: mark_inode_dirty error [ 170.726242][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.741481][ T9525] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.2101: mark inode dirty (error -117) [ 170.765171][ T9525] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 170.786860][ T9535] loop5: detected capacity change from 0 to 512 [ 170.795038][ T9535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.805221][ T9535] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2108: invalid block [ 170.818553][ T9535] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2108: invalid indirect mapped block 4294967295 (level 1) [ 170.832949][ T9535] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2108: invalid indirect mapped block 4294967295 (level 1) [ 170.848367][ T9535] EXT4-fs (loop5): 2 truncates cleaned up [ 170.854910][ T9535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.871757][ T9535] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #12: block 7: comm syz.5.2108: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 170.894936][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.933034][ T9535] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2108: bg 0: block 5: invalid block bitmap [ 170.984523][ T9551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2116'. [ 170.994085][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.024654][ T9557] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2119'. [ 171.034087][ T9558] FAULT_INJECTION: forcing a failure. [ 171.034087][ T9558] name failslab, interval 1, probability 0, space 0, times 0 [ 171.046944][ T9558] CPU: 1 UID: 0 PID: 9558 Comm: syz.1.2115 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 171.047027][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.047043][ T9558] Call Trace: [ 171.047051][ T9558] [ 171.047139][ T9558] dump_stack_lvl+0xf6/0x150 [ 171.047165][ T9558] dump_stack+0x15/0x1a [ 171.047182][ T9558] should_fail_ex+0x261/0x270 [ 171.047207][ T9558] should_failslab+0x8f/0xb0 [ 171.047229][ T9558] kmem_cache_alloc_noprof+0x59/0x340 [ 171.047305][ T9558] ? getname_flags+0x81/0x3b0 [ 171.047330][ T9558] getname_flags+0x81/0x3b0 [ 171.047361][ T9558] user_path_at+0x26/0x140 [ 171.047390][ T9558] __se_sys_mount+0x25e/0x2e0 [ 171.047422][ T9558] ? __bpf_trace_sys_enter+0x10/0x30 [ 171.047562][ T9558] __x64_sys_mount+0x67/0x80 [ 171.047582][ T9558] x64_sys_call+0xd11/0x2e10 [ 171.047611][ T9558] do_syscall_64+0xc9/0x1a0 [ 171.047636][ T9558] ? clear_bhb_loop+0x25/0x80 [ 171.047658][ T9558] ? clear_bhb_loop+0x25/0x80 [ 171.047716][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.047755][ T9558] RIP: 0033:0x7f877171e969 [ 171.047771][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.047789][ T9558] RSP: 002b:00007f876fd66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.047807][ T9558] RAX: ffffffffffffffda RBX: 00007f8771946080 RCX: 00007f877171e969 [ 171.047884][ T9558] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 171.047897][ T9558] RBP: 00007f876fd66090 R08: 0000200000000140 R09: 0000000000000000 [ 171.047908][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.047920][ T9558] R13: 0000000000000000 R14: 00007f8771946080 R15: 00007ffc427193b8 [ 171.047939][ T9558] [ 171.256958][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2120'. [ 171.317112][ T9573] SELinux: syz.5.2125 (9573) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 171.333068][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2125'. [ 171.364286][ T9573] hsr_slave_1 (unregistering): left promiscuous mode [ 171.506076][ T9584] loop5: detected capacity change from 0 to 512 [ 171.522581][ T9584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.534716][ T9584] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2130: invalid block [ 171.549443][ T9584] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2130: invalid indirect mapped block 4294967295 (level 1) [ 171.585360][ T9589] smc: net device bond0 applied user defined pnetid SYZ2 [ 171.602897][ T9584] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2130: invalid indirect mapped block 4294967295 (level 1) [ 171.642366][ T9584] EXT4-fs (loop5): 2 truncates cleaned up [ 171.648820][ T9584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.664067][ T9584] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2130: bg 0: block 5: invalid block bitmap [ 171.694884][ T9592] bridge0: port 3(hsr0) entered blocking state [ 171.701354][ T9592] bridge0: port 3(hsr0) entered disabled state [ 171.708065][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.713073][ T9592] hsr0: entered allmulticast mode [ 171.722199][ T9592] hsr_slave_0: entered allmulticast mode [ 171.728961][ T9592] hsr0: entered promiscuous mode [ 171.734386][ T9592] bridge0: port 3(hsr0) entered blocking state [ 171.740653][ T9592] bridge0: port 3(hsr0) entered forwarding state [ 171.749129][ T9595] xt_bpf: check failed: parse error [ 171.809927][ T9603] loop5: detected capacity change from 0 to 512 [ 171.825310][ T9603] EXT4-fs (loop5): 1 orphan inode deleted [ 171.831796][ T9603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.848623][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 171.856871][ T9603] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.915865][ T9162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.146344][ T9632] 9pnet: p9_errstr2errno: server reported unknown error [ 172.198916][ T9632] loop2: detected capacity change from 0 to 512 [ 172.206056][ T9632] EXT4-fs: Ignoring removed oldalloc option [ 172.213912][ T9632] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2147: Parent and EA inode have the same ino 15 [ 172.226853][ T9632] EXT4-fs (loop2): Remounting filesystem read-only [ 172.233461][ T9632] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 172.243846][ T9632] EXT4-fs (loop2): 1 orphan inode deleted [ 172.249973][ T9632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.262871][ T9632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.347313][ T9644] SELinux: syz.2.2151 (9644) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 172.433420][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 172.433437][ T29] audit: type=1326 audit(1745511138.760:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.468757][ T29] audit: type=1326 audit(1745511138.770:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.492556][ T29] audit: type=1326 audit(1745511138.770:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.516207][ T29] audit: type=1326 audit(1745511138.770:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.539656][ T29] audit: type=1326 audit(1745511138.770:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.563230][ T29] audit: type=1326 audit(1745511138.770:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.586989][ T29] audit: type=1326 audit(1745511138.770:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.610941][ T29] audit: type=1326 audit(1745511138.770:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.634898][ T29] audit: type=1326 audit(1745511138.770:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.658717][ T29] audit: type=1326 audit(1745511138.770:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9645 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877171e969 code=0x7ffc0000 [ 172.732079][ T9664] loop2: detected capacity change from 0 to 512 [ 172.771794][ T9664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.784628][ T9664] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.809078][ T9664] pim6reg: entered allmulticast mode [ 172.815998][ T9664] pim6reg: left allmulticast mode [ 172.874453][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.886104][ T9681] SELinux: syz.3.2163 (9681) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 172.920677][ T9685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.945612][ T9685] loop1: detected capacity change from 0 to 512 [ 172.971059][ T9685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.023718][ T9685] EXT4-fs (loop1): 1 truncate cleaned up [ 173.030155][ T9685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.131172][ T9706] loop2: detected capacity change from 0 to 2048 [ 173.143524][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.173866][ T9706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.237957][ T9717] __nla_validate_parse: 19 callbacks suppressed [ 173.237978][ T9717] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2176'. [ 173.270885][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.309851][ T9721] SELinux: syz.5.2180 (9721) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 173.347239][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2180'. [ 173.401300][ T9725] loop2: detected capacity change from 0 to 527 [ 173.408616][ T9725] EXT4-fs (loop2): failed to parse options in superblock:  [ 173.421563][ T9725] EXT4-fs (loop2): Unsupported encryption level 4 [ 173.424368][ T9735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2182'. [ 173.477205][ T9738] loop3: detected capacity change from 0 to 512 [ 173.496857][ T9738] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2185: Failed to acquire dquot type 1 [ 173.509510][ T9738] EXT4-fs (loop3): 1 truncate cleaned up [ 173.516394][ T9738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.529875][ T9738] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.541671][ T9738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.590798][ T9751] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2189'. [ 173.624300][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 173.633518][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 173.804883][ T9770] loop3: detected capacity change from 0 to 512 [ 173.848355][ T9770] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.899387][ T9770] pim6reg: entered allmulticast mode [ 173.913403][ T9770] pim6reg: left allmulticast mode [ 173.928337][ T9767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2196'. [ 173.944983][ T9783] loop5: detected capacity change from 0 to 512 [ 173.951878][ T9783] EXT4-fs: inline encryption not supported [ 173.990071][ T9785] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2200'. [ 174.001719][ T9783] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.020684][ T9791] FAULT_INJECTION: forcing a failure. [ 174.020684][ T9791] name failslab, interval 1, probability 0, space 0, times 0 [ 174.033542][ T9791] CPU: 1 UID: 0 PID: 9791 Comm: syz.3.2203 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 174.033574][ T9791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.033589][ T9791] Call Trace: [ 174.033598][ T9791] [ 174.033607][ T9791] dump_stack_lvl+0xf6/0x150 [ 174.033658][ T9791] dump_stack+0x15/0x1a [ 174.033759][ T9791] should_fail_ex+0x261/0x270 [ 174.033789][ T9791] should_failslab+0x8f/0xb0 [ 174.033816][ T9791] __kvmalloc_node_noprof+0x12c/0x520 [ 174.033853][ T9791] ? io_alloc_cache_init+0x33/0xa0 [ 174.033887][ T9791] ? io_alloc_cache_init+0x33/0xa0 [ 174.033906][ T9791] io_alloc_cache_init+0x33/0xa0 [ 174.033924][ T9791] io_rsrc_cache_init+0x26/0x50 [ 174.033959][ T9791] io_ring_ctx_alloc+0x34d/0x690 [ 174.034056][ T9791] io_uring_create+0x10a/0x610 [ 174.034090][ T9791] __se_sys_io_uring_setup+0x1f7/0x210 [ 174.034137][ T9791] __x64_sys_io_uring_setup+0x31/0x40 [ 174.034204][ T9791] x64_sys_call+0x1741/0x2e10 [ 174.034298][ T9791] do_syscall_64+0xc9/0x1a0 [ 174.034328][ T9791] ? clear_bhb_loop+0x25/0x80 [ 174.034353][ T9791] ? clear_bhb_loop+0x25/0x80 [ 174.034411][ T9791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.034502][ T9791] RIP: 0033:0x7efcd63ae969 [ 174.034520][ T9791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.034540][ T9791] RSP: 002b:00007efcd4a17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 174.034562][ T9791] RAX: ffffffffffffffda RBX: 00007efcd65d5fa0 RCX: 00007efcd63ae969 [ 174.034607][ T9791] RDX: 0000000000000000 RSI: 0000200000002380 RDI: 0000000000007d2e [ 174.034622][ T9791] RBP: 00007efcd4a17090 R08: 0000000000000000 R09: 0000000000000000 [ 174.034636][ T9791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.034649][ T9791] R13: 0000000000000001 R14: 00007efcd65d5fa0 R15: 00007ffd18fb5a88 [ 174.034671][ T9791] [ 174.300326][ T9801] loop1: detected capacity change from 0 to 512 [ 174.307432][ T9801] EXT4-fs: journaled quota format not specified [ 174.548204][ T9819] FAULT_INJECTION: forcing a failure. [ 174.548204][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 174.561192][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.5.2212 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 174.561275][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.561291][ T9819] Call Trace: [ 174.561299][ T9819] [ 174.561309][ T9819] dump_stack_lvl+0xf6/0x150 [ 174.561338][ T9819] dump_stack+0x15/0x1a [ 174.561358][ T9819] should_fail_ex+0x261/0x270 [ 174.561459][ T9819] should_failslab+0x8f/0xb0 [ 174.561482][ T9819] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 174.561510][ T9819] ? __alloc_skb+0x10d/0x320 [ 174.561563][ T9819] __alloc_skb+0x10d/0x320 [ 174.561583][ T9819] ? audit_log_start+0x37f/0x6e0 [ 174.561618][ T9819] audit_log_start+0x39a/0x6e0 [ 174.561651][ T9819] ? kstrtouint+0x7b/0xc0 [ 174.561729][ T9819] audit_seccomp+0x49/0x100 [ 174.561755][ T9819] __seccomp_filter+0x694/0x10e0 [ 174.561779][ T9819] ? vfs_write+0x669/0x950 [ 174.561806][ T9819] __secure_computing+0x7e/0x150 [ 174.561829][ T9819] syscall_trace_enter+0xcf/0x1f0 [ 174.561901][ T9819] do_syscall_64+0xaa/0x1a0 [ 174.561938][ T9819] ? clear_bhb_loop+0x25/0x80 [ 174.562061][ T9819] ? clear_bhb_loop+0x25/0x80 [ 174.562120][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.562145][ T9819] RIP: 0033:0x7f01821ee969 [ 174.562165][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.562187][ T9819] RSP: 002b:00007f0180857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 174.562209][ T9819] RAX: ffffffffffffffda RBX: 00007f0182415fa0 RCX: 00007f01821ee969 [ 174.562281][ T9819] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 174.562296][ T9819] RBP: 00007f0180857090 R08: 0000000000400000 R09: 0000000000000000 [ 174.562310][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.562324][ T9819] R13: 0000000000000000 R14: 00007f0182415fa0 R15: 00007ffdd01635b8 [ 174.562348][ T9819] [ 174.774955][ T9822] Q6\bY4 speed is unknown, defaulting to 1000 [ 174.823727][ T9825] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2214'. [ 174.969125][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2219'. [ 175.013818][ T9842] loop5: detected capacity change from 0 to 2048 [ 175.026100][ T9842] FAULT_INJECTION: forcing a failure. [ 175.026100][ T9842] name failslab, interval 1, probability 0, space 0, times 0 [ 175.038910][ T9842] CPU: 0 UID: 0 PID: 9842 Comm: syz.5.2221 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 175.038943][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.038958][ T9842] Call Trace: [ 175.038965][ T9842] [ 175.038975][ T9842] dump_stack_lvl+0xf6/0x150 [ 175.039045][ T9842] dump_stack+0x15/0x1a [ 175.039066][ T9842] should_fail_ex+0x261/0x270 [ 175.039112][ T9842] should_failslab+0x8f/0xb0 [ 175.039139][ T9842] __kmalloc_noprof+0xad/0x410 [ 175.039227][ T9842] ? kobject_get_path+0x91/0x1c0 [ 175.039256][ T9842] kobject_get_path+0x91/0x1c0 [ 175.039358][ T9842] ? __kmalloc_cache_noprof+0x18d/0x320 [ 175.039385][ T9842] kobject_uevent_env+0x1b9/0x550 [ 175.039402][ T9842] ? kernfs_put+0x22d/0x250 [ 175.039572][ T9842] kobject_uevent+0x1c/0x30 [ 175.039587][ T9842] __kobject_del+0x8e/0x1a0 [ 175.039614][ T9842] kobject_put+0x126/0x180 [ 175.039707][ T9842] net_rx_queue_update_kobjects+0x483/0x520 [ 175.039746][ T9842] netdev_unregister_kobject+0xbc/0x290 [ 175.039778][ T9842] unregister_netdevice_many_notify+0x129c/0x16a0 [ 175.039806][ T9842] ? __flush_work+0x4ae/0x590 [ 175.039829][ T9842] unregister_netdevice_queue+0x1fd/0x230 [ 175.039852][ T9842] unregister_netdev+0x1f/0x50 [ 175.039870][ T9842] slip_close+0xe5/0x100 [ 175.039895][ T9842] ? __pfx_slip_close+0x10/0x10 [ 175.039998][ T9842] tty_ldisc_close+0x72/0xa0 [ 175.040023][ T9842] tty_set_ldisc+0x1e2/0x3b0 [ 175.040041][ T9842] tiocsetd+0x52/0x60 [ 175.040058][ T9842] tty_ioctl+0xa92/0xbd0 [ 175.040074][ T9842] ? __pfx_tty_ioctl+0x10/0x10 [ 175.040090][ T9842] __se_sys_ioctl+0xc9/0x140 [ 175.040140][ T9842] __x64_sys_ioctl+0x43/0x50 [ 175.040177][ T9842] x64_sys_call+0x168d/0x2e10 [ 175.040200][ T9842] do_syscall_64+0xc9/0x1a0 [ 175.040222][ T9842] ? clear_bhb_loop+0x25/0x80 [ 175.040241][ T9842] ? clear_bhb_loop+0x25/0x80 [ 175.040279][ T9842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.040296][ T9842] RIP: 0033:0x7f01821ee969 [ 175.040310][ T9842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.040326][ T9842] RSP: 002b:00007f0180857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.040367][ T9842] RAX: ffffffffffffffda RBX: 00007f0182415fa0 RCX: 00007f01821ee969 [ 175.040377][ T9842] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 175.040403][ T9842] RBP: 00007f0180857090 R08: 0000000000000000 R09: 0000000000000000 [ 175.040413][ T9842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.040423][ T9842] R13: 0000000000000000 R14: 00007f0182415fa0 R15: 00007ffdd01635b8 [ 175.040440][ T9842] [ 175.320120][ T9848] loop1: detected capacity change from 0 to 512 [ 175.326821][ T9848] EXT4-fs: inline encryption not supported [ 175.354187][ T9848] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.374656][ T9852] SELinux: syz.2.2224 (9852) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.519534][ T9870] bond0 (unregistering): Released all slaves [ 175.742186][ T9892] loop5: detected capacity change from 0 to 4096 [ 175.912667][ T9895] SELinux: syz.2.2241 (9895) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 176.503251][ T9924] loop3: detected capacity change from 0 to 2048 [ 176.572934][ T9924] loop3: p1 < > p2 < > p3 p4 [ 176.577775][ T9924] loop3: partition table partially beyond EOD, truncated [ 176.603988][ T9924] loop3: p1 start 2305 is beyond EOD, truncated [ 176.610331][ T9924] loop3: p2 start 4294902784 is beyond EOD, truncated [ 176.617377][ T9924] loop3: p3 start 3724543488 is beyond EOD, truncated [ 176.624187][ T9924] loop3: p4 size 8192 extends beyond EOD, truncated [ 176.712066][ T9931] loop1: detected capacity change from 0 to 512 [ 176.755495][ T9931] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2251: Failed to acquire dquot type 1 [ 176.782081][ T9931] EXT4-fs (loop1): 1 truncate cleaned up [ 176.802179][ T9931] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.048970][ T9958] loop1: detected capacity change from 0 to 512 [ 177.079151][ T9958] EXT4-fs: inline encryption not supported [ 177.095071][ T9960] SELinux: syz.3.2261 (9960) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 177.123903][ T9958] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.197839][ T9966] loop1: detected capacity change from 0 to 512 [ 177.244963][ T9966] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.260027][ T9969] loop3: detected capacity change from 0 to 512 [ 177.282464][ T9966] pim6reg: entered allmulticast mode [ 177.290252][ T9969] EXT4-fs (loop3): 1 orphan inode deleted [ 177.300609][ T9969] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.313083][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 177.330074][ T9974] pim6reg: left allmulticast mode [ 177.537168][ T9978] loop1: detected capacity change from 0 to 512 [ 177.545622][ T9978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.559980][ T9980] FAULT_INJECTION: forcing a failure. [ 177.559980][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.573329][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.3.2266 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 177.573356][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.573367][ T9980] Call Trace: [ 177.573373][ T9980] [ 177.573382][ T9980] dump_stack_lvl+0xf6/0x150 [ 177.573410][ T9980] dump_stack+0x15/0x1a [ 177.573429][ T9980] should_fail_ex+0x261/0x270 [ 177.573508][ T9980] should_fail+0xb/0x10 [ 177.573532][ T9980] should_fail_usercopy+0x1a/0x20 [ 177.573563][ T9980] _copy_from_user+0x1c/0xa0 [ 177.573593][ T9980] copy_msghdr_from_user+0x54/0x2b0 [ 177.573681][ T9980] ? __fget_files+0x186/0x1c0 [ 177.573704][ T9980] __sys_sendmsg+0x141/0x240 [ 177.573741][ T9980] __x64_sys_sendmsg+0x46/0x50 [ 177.573792][ T9980] x64_sys_call+0x26f3/0x2e10 [ 177.573884][ T9980] do_syscall_64+0xc9/0x1a0 [ 177.573915][ T9980] ? clear_bhb_loop+0x25/0x80 [ 177.573984][ T9980] ? clear_bhb_loop+0x25/0x80 [ 177.574008][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.574033][ T9980] RIP: 0033:0x7efcd63ae969 [ 177.574051][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.574101][ T9980] RSP: 002b:00007efcd4a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.574123][ T9980] RAX: ffffffffffffffda RBX: 00007efcd65d5fa0 RCX: 00007efcd63ae969 [ 177.574136][ T9980] RDX: 0000000000040040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 177.574151][ T9980] RBP: 00007efcd4a17090 R08: 0000000000000000 R09: 0000000000000000 [ 177.574239][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.574251][ T9980] R13: 0000000000000000 R14: 00007efcd65d5fa0 R15: 00007ffd18fb5a88 [ 177.574282][ T9980] [ 177.617317][ T9978] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2265: invalid block [ 177.776725][ T9978] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2265: invalid indirect mapped block 4294967295 (level 1) [ 177.802603][ T9978] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2265: invalid indirect mapped block 4294967295 (level 1) [ 177.833253][ T9978] EXT4-fs (loop1): 2 truncates cleaned up [ 177.844683][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 177.844701][ T29] audit: type=1326 audit(1745511144.180:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 177.857751][ T9978] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2265: bg 0: block 5: invalid block bitmap [ 177.884073][ T9998] SELinux: syz.2.2273 (9998) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 177.911276][ T29] audit: type=1326 audit(1745511144.210:7515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 177.935018][ T29] audit: type=1326 audit(1745511144.210:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 177.958916][ T29] audit: type=1326 audit(1745511144.210:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 177.982703][ T29] audit: type=1326 audit(1745511144.210:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 178.006399][ T29] audit: type=1326 audit(1745511144.210:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 178.030436][ T29] audit: type=1326 audit(1745511144.210:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 178.054254][ T29] audit: type=1326 audit(1745511144.210:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 178.078213][ T29] audit: type=1326 audit(1745511144.210:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 178.102052][ T29] audit: type=1326 audit(1745511144.210:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9995 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3fadbe969 code=0x7ffc0000 [ 178.169341][T10011] netlink: 'syz.1.2274': attribute type 2 has an invalid length. [ 178.269604][T10015] loop2: detected capacity change from 0 to 2048 [ 178.293794][T10015] Alternate GPT is invalid, using primary GPT. [ 178.300134][T10015] loop2: p1 p2 p3 [ 178.350435][T10015] smc: net device bond0 erased user defined pnetid SYZ2 [ 178.366432][T10025] xt_CT: No such helper "snmp_trap" [ 178.458316][T10041] __nla_validate_parse: 15 callbacks suppressed [ 178.458335][T10041] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2286'. [ 178.479199][T10042] loop2: detected capacity change from 0 to 512 [ 178.500590][T10042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.555839][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.563367][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.570545][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.578214][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.585770][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.592838][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.599936][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.601483][T10042] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2284: invalid block [ 178.607383][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.626345][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.634059][T10048] xt_nfacct: accounting object `syz1' does not exists [ 178.641963][T10046] loop5: detected capacity change from 0 to 128 [ 178.642197][T10042] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2284: invalid indirect mapped block 4294967295 (level 1) [ 178.648748][T10046] vfat: Unknown parameter '' [ 178.663082][T10042] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2284: invalid indirect mapped block 4294967295 (level 1) [ 178.682213][T10042] EXT4-fs (loop2): 2 truncates cleaned up [ 178.697272][T10051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2291'. [ 178.709496][T10042] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2284: bg 0: block 5: invalid block bitmap [ 178.778988][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 178.835916][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 178.845143][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 178.857130][T10067] loop5: detected capacity change from 0 to 512 [ 178.873363][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 178.893753][T10072] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2298'. [ 178.903131][T10072] netlink: 'syz.3.2298': attribute type 5 has an invalid length. [ 178.905995][T10075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2297'. [ 178.910908][T10072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 178.920212][T10072] loop3: detected capacity change from 0 to 512 [ 178.937186][T10067] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.970848][T10067] pim6reg: entered allmulticast mode [ 178.977071][T10067] pim6reg: left allmulticast mode [ 178.994912][T10072] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 179.012965][T10079] loop2: detected capacity change from 0 to 527 [ 179.020236][T10079] EXT4-fs (loop2): failed to parse options in superblock:  [ 179.033546][T10079] EXT4-fs (loop2): Unsupported encryption level 4 [ 179.037998][T10072] EXT4-fs (loop3): invalid journal inode [ 179.051948][T10072] EXT4-fs (loop3): can't get journal size [ 179.059381][T10082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2301'. [ 179.078166][T10072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 179.093589][T10072] System zones: 1-12, 13-13 [ 179.100178][T10072] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2298: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 179.130124][T10072] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.2298: couldn't read orphan inode 15 (err -117) [ 179.261221][T10114] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.453109][T10133] Q6\bY4 speed is unknown, defaulting to 1000 [ 179.670574][T10137] atomic_op ffff88811a3af528 conn xmit_atomic 0000000000000000 [ 179.917368][T10151] loop5: detected capacity change from 0 to 512 [ 179.934672][T10151] EXT4-fs (loop5): 1 orphan inode deleted [ 179.941116][T10151] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.952463][ T167] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 180.205909][ T9] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 180.213942][ T9] hid-generic 0000:007F:FFFFFFFE.0003: unexpected long global item [ 180.236000][ T9] hid-generic 0000:007F:FFFFFFFE.0003: probe with driver hid-generic failed with error -22 [ 180.292198][T10182] loop5: detected capacity change from 0 to 512 [ 180.323122][T10180] FAULT_INJECTION: forcing a failure. [ 180.323122][T10180] name failslab, interval 1, probability 0, space 0, times 0 [ 180.336066][T10180] CPU: 1 UID: 0 PID: 10180 Comm: syz.2.2338 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 180.336107][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.336123][T10180] Call Trace: [ 180.336130][T10180] [ 180.336201][T10180] dump_stack_lvl+0xf6/0x150 [ 180.336284][T10180] dump_stack+0x15/0x1a [ 180.336344][T10180] should_fail_ex+0x261/0x270 [ 180.336374][T10180] should_failslab+0x8f/0xb0 [ 180.336402][T10180] __kmalloc_noprof+0xad/0x410 [ 180.336519][T10180] ? tracepoint_probe_unregister+0x181/0x6c0 [ 180.336618][T10180] ? __pfx_tp_stub_func+0x10/0x10 [ 180.336703][T10180] tracepoint_probe_unregister+0x181/0x6c0 [ 180.336746][T10180] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 180.336838][T10180] bpf_probe_unregister+0x37/0x50 [ 180.336894][T10180] bpf_raw_tp_link_release+0x27/0x40 [ 180.336919][T10180] bpf_link_free+0xb5/0x360 [ 180.336963][T10180] bpf_link_release+0x52/0x70 [ 180.336993][T10180] ? __pfx_bpf_link_release+0x10/0x10 [ 180.337025][T10180] __fput+0x2ac/0x640 [ 180.337059][T10180] ____fput+0x1c/0x30 [ 180.337140][T10180] task_work_run+0x13c/0x1b0 [ 180.337214][T10180] syscall_exit_to_user_mode+0xa8/0x120 [ 180.337322][T10180] do_syscall_64+0xd6/0x1a0 [ 180.337372][T10180] ? clear_bhb_loop+0x25/0x80 [ 180.337424][T10180] ? clear_bhb_loop+0x25/0x80 [ 180.337450][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.337481][T10180] RIP: 0033:0x7f39d3eae969 [ 180.337505][T10180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.337539][T10180] RSP: 002b:00007f39d2517038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 180.337623][T10180] RAX: 0000000000000000 RBX: 00007f39d40d5fa0 RCX: 00007f39d3eae969 [ 180.337639][T10180] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 180.337653][T10180] RBP: 00007f39d2517090 R08: 0000000000000000 R09: 0000000000000000 [ 180.337668][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.337682][T10180] R13: 0000000000000000 R14: 00007f39d40d5fa0 R15: 00007ffc9f43a2a8 [ 180.337705][T10180] [ 180.633381][T10182] EXT4-fs (loop5): 1 orphan inode deleted [ 180.654202][ T167] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 180.666840][T10182] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.731740][T10200] loop1: detected capacity change from 0 to 512 [ 180.739195][T10200] EXT4-fs: inline encryption not supported [ 180.769249][T10200] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.094560][T10212] Q6\bY4 speed is unknown, defaulting to 1000 [ 182.515036][T10214] Q6\bY4 speed is unknown, defaulting to 1000 [ 182.971142][T10228] loop5: detected capacity change from 0 to 512 [ 182.978893][T10228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.004601][T10228] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2355: invalid block [ 183.022140][T10228] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2355: invalid indirect mapped block 4294967295 (level 1) [ 183.042972][T10228] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2355: invalid indirect mapped block 4294967295 (level 1) [ 183.057906][T10228] EXT4-fs (loop5): 2 truncates cleaned up [ 183.069142][T10228] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2355: bg 0: block 5: invalid block bitmap [ 183.104209][T10234] loop2: detected capacity change from 0 to 2048 [ 183.165878][T10234] loop2: p1 < > p4 [ 183.177832][T10234] loop2: p4 size 8388608 extends beyond EOD, truncated [ 183.209778][T10247] FAULT_INJECTION: forcing a failure. [ 183.209778][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 183.209889][T10249] loop5: detected capacity change from 0 to 512 [ 183.222914][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz.1.2365 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 183.222955][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.222972][T10247] Call Trace: [ 183.222980][T10247] [ 183.222992][T10247] dump_stack_lvl+0xf6/0x150 [ 183.223035][T10247] dump_stack+0x15/0x1a [ 183.223056][T10247] should_fail_ex+0x261/0x270 [ 183.223133][T10247] should_failslab+0x8f/0xb0 [ 183.223160][T10247] kmem_cache_alloc_noprof+0x59/0x340 [ 183.223196][T10247] ? getname_flags+0x81/0x3b0 [ 183.223227][T10247] getname_flags+0x81/0x3b0 [ 183.223260][T10247] user_path_at+0x26/0x140 [ 183.223295][T10247] __se_sys_mount+0x25e/0x2e0 [ 183.223320][T10247] ? __bpf_trace_sys_enter+0x10/0x30 [ 183.223350][T10247] __x64_sys_mount+0x67/0x80 [ 183.223399][T10247] x64_sys_call+0xd11/0x2e10 [ 183.223450][T10247] do_syscall_64+0xc9/0x1a0 [ 183.223478][T10247] ? clear_bhb_loop+0x25/0x80 [ 183.223506][T10247] ? clear_bhb_loop+0x25/0x80 [ 183.223553][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.223581][T10247] RIP: 0033:0x7f877171e969 [ 183.223601][T10247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.223668][T10247] RSP: 002b:00007f876fd87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.223691][T10247] RAX: ffffffffffffffda RBX: 00007f8771945fa0 RCX: 00007f877171e969 [ 183.223707][T10247] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 183.223723][T10247] RBP: 00007f876fd87090 R08: 0000200000000600 R09: 0000000000000000 [ 183.223737][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.223753][T10247] R13: 0000000000000000 R14: 00007f8771945fa0 R15: 00007ffc427193b8 [ 183.223845][T10247] [ 183.479731][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 183.479747][ T29] audit: type=1326 audit(1745511149.760:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 183.510003][ T29] audit: type=1326 audit(1745511149.760:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 183.531365][T10267] __nla_validate_parse: 3 callbacks suppressed [ 183.531387][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 183.564173][T10273] loop2: detected capacity change from 0 to 512 [ 183.571704][T10273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.600867][T10249] EXT4-fs (loop5): 1 orphan inode deleted [ 183.608060][T10249] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.673480][T10278] Q6\bY4 speed is unknown, defaulting to 1000 [ 183.796353][T10273] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2372: invalid block [ 183.922901][T10273] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2372: invalid indirect mapped block 4294967295 (level 1) [ 183.988915][T10259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2368'. [ 184.010621][ T29] audit: type=1326 audit(1745511150.310:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.034552][ T29] audit: type=1326 audit(1745511150.310:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.058567][ T29] audit: type=1326 audit(1745511150.310:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.082238][ T29] audit: type=1326 audit(1745511150.310:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.105944][ T29] audit: type=1326 audit(1745511150.310:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.130065][ T29] audit: type=1326 audit(1745511150.310:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.154655][ T29] audit: type=1326 audit(1745511150.310:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.154759][T10273] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2372: invalid indirect mapped block 4294967295 (level 1) [ 184.178280][ T29] audit: type=1326 audit(1745511150.310:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd63ae969 code=0x7ffc0000 [ 184.192275][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 184.219988][T10273] EXT4-fs (loop2): 2 truncates cleaned up [ 184.265485][T10273] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2372: bg 0: block 5: invalid block bitmap [ 184.338793][T10295] loop2: detected capacity change from 0 to 512 [ 184.384534][T10301] SELinux: syz.5.2383 (10301) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.414098][T10295] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2379: Failed to acquire dquot type 1 [ 184.434747][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2383'. [ 184.462677][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 184.464768][T10311] pim6reg: entered allmulticast mode [ 184.477381][T10295] EXT4-fs (loop2): 1 truncate cleaned up [ 184.493251][T10295] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.497483][T10311] pim6reg: left allmulticast mode [ 184.535493][T10316] loop1: detected capacity change from 0 to 512 [ 184.555021][T10316] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.573850][T10316] pim6reg: entered allmulticast mode [ 184.580600][T10316] pim6reg: left allmulticast mode [ 184.593217][T10324] loop2: detected capacity change from 0 to 512 [ 184.600304][T10324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.620941][T10324] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2390: invalid block [ 184.633802][T10324] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2390: invalid indirect mapped block 4294967295 (level 1) [ 184.649895][T10324] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2390: invalid indirect mapped block 4294967295 (level 1) [ 184.666451][T10324] EXT4-fs (loop2): 2 truncates cleaned up [ 184.674630][T10329] loop5: detected capacity change from 0 to 512 [ 184.684391][T10324] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2390: bg 0: block 5: invalid block bitmap [ 184.684560][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2392'. [ 184.708759][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2392'. [ 184.718452][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2392'. [ 184.819833][T10348] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2400'. [ 184.828439][T10349] autofs4:pid:10349:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) [ 184.839315][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 184.905514][T10362] pim6reg: entered allmulticast mode [ 184.911369][T10362] pim6reg: left allmulticast mode [ 184.934885][T10365] loop1: detected capacity change from 0 to 512 [ 184.941992][T10365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.954654][T10365] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2405: invalid block [ 184.968375][T10365] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2405: invalid indirect mapped block 4294967295 (level 1) [ 184.982813][T10365] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2405: invalid indirect mapped block 4294967295 (level 1) [ 184.997450][T10365] EXT4-fs (loop1): 2 truncates cleaned up [ 185.047934][T10373] loop5: detected capacity change from 0 to 512 [ 185.076196][T10373] EXT4-fs (loop5): 1 orphan inode deleted [ 185.083617][T10373] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.094312][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 185.169980][T10381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2411'. [ 185.247469][T10391] pim6reg: entered allmulticast mode [ 185.254150][T10391] pim6reg: left allmulticast mode [ 185.318986][T10397] loop5: detected capacity change from 0 to 512 [ 185.325760][T10397] EXT4-fs: inline encryption not supported [ 185.345705][T10399] loop3: detected capacity change from 0 to 512 [ 185.354142][T10397] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.380919][T10399] EXT4-fs: inline encryption not supported [ 185.403944][T10399] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.449059][ T167] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.524082][ T167] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.598798][ T167] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.676766][T10441] loop3: detected capacity change from 0 to 512 [ 185.677780][ T167] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.684071][T10441] EXT4-fs: inline encryption not supported [ 185.703739][T10443] 9pnet: p9_errstr2errno: server reported unknown error [ 185.707016][T10422] Q6\bY4 speed is unknown, defaulting to 1000 [ 185.719899][T10441] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.826095][T10456] SELinux: syz.5.2439 (10456) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.944442][ T167] bond0 (unregistering): Released all slaves [ 185.954223][ T167] bond1 (unregistering): Released all slaves [ 186.022327][T10474] FAULT_INJECTION: forcing a failure. [ 186.022327][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.035809][T10474] CPU: 1 UID: 0 PID: 10474 Comm: syz.3.2446 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 186.035843][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.035930][T10474] Call Trace: [ 186.035994][T10474] [ 186.036005][T10474] dump_stack_lvl+0xf6/0x150 [ 186.036034][T10474] dump_stack+0x15/0x1a [ 186.036055][T10474] should_fail_ex+0x261/0x270 [ 186.036160][T10474] should_fail+0xb/0x10 [ 186.036180][T10474] should_fail_usercopy+0x1a/0x20 [ 186.036204][T10474] _copy_to_user+0x20/0xa0 [ 186.036239][T10474] lsm_fill_user_ctx+0x146/0x1e0 [ 186.036267][T10474] selinux_getselfattr+0x8f/0xf0 [ 186.036313][T10474] security_getselfattr+0x265/0x5d0 [ 186.036348][T10474] __x64_sys_lsm_get_self_attr+0x53/0x60 [ 186.036381][T10474] x64_sys_call+0x1eb0/0x2e10 [ 186.036404][T10474] do_syscall_64+0xc9/0x1a0 [ 186.036436][T10474] ? clear_bhb_loop+0x25/0x80 [ 186.036462][T10474] ? clear_bhb_loop+0x25/0x80 [ 186.036557][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.036600][T10474] RIP: 0033:0x7efcd63ae969 [ 186.036631][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.036652][T10474] RSP: 002b:00007efcd4a17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 186.036675][T10474] RAX: ffffffffffffffda RBX: 00007efcd65d5fa0 RCX: 00007efcd63ae969 [ 186.036691][T10474] RDX: 0000200000000080 RSI: 0000200000000340 RDI: 0000000000000066 [ 186.036706][T10474] RBP: 00007efcd4a17090 R08: 0000000000000000 R09: 0000000000000000 [ 186.036721][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.036735][T10474] R13: 0000000000000000 R14: 00007efcd65d5fa0 R15: 00007ffd18fb5a88 [ 186.036759][T10474] [ 186.045066][T10472] loop5: detected capacity change from 0 to 512 [ 186.230961][T10472] EXT4-fs: inline encryption not supported [ 186.238673][ T167] hsr_slave_0: left promiscuous mode [ 186.251108][ T167] veth1_macvtap: left promiscuous mode [ 186.257688][ T167] veth0_macvtap: left promiscuous mode [ 186.265249][T10472] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.295515][ T167] pimreg (unregistering): left allmulticast mode [ 186.371191][ T9] Q6\bY4 speed is unknown, defaulting to 1000 [ 186.373595][T10422] chnl_net:caif_netlink_parms(): no params data found [ 186.379261][ T9] infiniband syz0: ib_query_port failed (-19) [ 186.469293][T10493] pim6reg1: entered promiscuous mode [ 186.474868][T10493] pim6reg1: entered allmulticast mode [ 186.495005][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.502605][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.510375][T10422] bridge_slave_0: entered allmulticast mode [ 186.517266][T10422] bridge_slave_0: entered promiscuous mode [ 186.524808][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.524884][T10492] ================================================================== [ 186.524915][T10492] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 186.532048][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.540277][T10492] [ 186.540291][T10492] write to 0xffffffff86868748 of 8 bytes by task 10422 on cpu 1: [ 186.540310][T10492] data_alloc+0x290/0x2c0 [ 186.547409][T10422] bridge_slave_1: entered allmulticast mode [ 186.554025][T10492] prb_reserve+0x86a/0xb80 [ 186.554062][T10492] vprintk_store+0x552/0x860 [ 186.554099][T10492] vprintk_emit+0x1a0/0x6c0 [ 186.557062][T10422] bridge_slave_1: entered promiscuous mode [ 186.564375][T10492] vprintk_default+0x26/0x30 [ 186.564399][T10492] vprintk+0x1d/0x30 [ 186.564426][T10492] _printk+0x7f/0xb0 [ 186.607730][T10492] br_set_state+0x295/0x390 [ 186.612263][T10492] br_init_port+0x5b/0xf0 [ 186.616696][T10492] new_nbp+0x236/0x310 [ 186.620883][T10492] br_add_if+0x1ef/0xa50 [ 186.625383][T10492] br_add_slave+0x2c/0x40 [ 186.629829][T10492] do_set_master+0x3c0/0x4a0 [ 186.634625][T10492] do_setlink+0xafe/0x2430 [ 186.639063][T10492] rtnl_newlink+0xe84/0x12d0 [ 186.644018][T10492] rtnetlink_rcv_msg+0x65a/0x740 [ 186.649152][T10492] netlink_rcv_skb+0x12f/0x230 [ 186.654026][T10492] rtnetlink_rcv+0x1c/0x30 [ 186.658551][T10492] netlink_unicast+0x605/0x6c0 [ 186.663424][T10492] netlink_sendmsg+0x609/0x720 [ 186.668212][T10492] __sock_sendmsg+0x140/0x180 [ 186.673105][T10492] __sys_sendto+0x1aa/0x230 [ 186.677839][T10492] __x64_sys_sendto+0x78/0x90 [ 186.682670][T10492] x64_sys_call+0x2bcb/0x2e10 [ 186.687929][T10492] do_syscall_64+0xc9/0x1a0 [ 186.692554][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.698731][T10492] [ 186.701352][T10492] read to 0xffffffff86868748 of 8 bytes by task 10492 on cpu 0: [ 186.709463][T10492] prb_reserve+0x239/0xb80 [ 186.714192][T10492] vprintk_store+0x552/0x860 [ 186.719117][T10492] vprintk_emit+0x1a0/0x6c0 [ 186.723915][T10492] vprintk_default+0x26/0x30 [ 186.729042][T10492] vprintk+0x1d/0x30 [ 186.732980][T10492] _printk+0x7f/0xb0 [ 186.737264][T10492] caif_disconnect_client+0x13f/0x150 [ 186.742806][T10492] caif_release+0xea/0x230 [ 186.748931][T10492] sock_close+0x68/0x150 [ 186.753231][T10492] __fput+0x2ac/0x640 [ 186.757389][T10492] ____fput+0x1c/0x30 [ 186.762017][T10492] task_work_run+0x13c/0x1b0 [ 186.767202][T10492] syscall_exit_to_user_mode+0xa8/0x120 [ 186.773003][T10492] do_syscall_64+0xd6/0x1a0 [ 186.777661][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.783767][T10492] [ 186.786182][T10492] value changed: 0xfffffffffffc2a70 -> 0x000000000005f088 [ 186.793302][T10492] [ 186.795920][T10492] Reported by Kernel Concurrency Sanitizer on: [ 186.802201][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.3.2454 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 186.815242][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.825635][T10492] ================================================================== [ 186.849983][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.861278][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.882027][T10422] team0: Port device team_slave_0 added [ 186.889438][T10422] team0: Port device team_slave_1 added [ 186.907134][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.914244][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.940587][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.951940][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.959157][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.985186][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.014009][T10422] hsr_slave_0: entered promiscuous mode [ 187.020243][T10422] hsr_slave_1: entered promiscuous mode [ 187.053041][ T167] IPVS: stop unused estimator thread 0... [ 187.095046][T10422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.104061][T10422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.115489][T10422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.124920][T10422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.161289][T10422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.177819][T10422] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.189874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.198471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.212416][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.220097][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.281425][T10422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.381495][T10422] veth0_vlan: entered promiscuous mode [ 187.390096][T10422] veth1_vlan: entered promiscuous mode [ 187.406897][T10422] veth0_macvtap: entered promiscuous mode [ 187.415060][T10422] veth1_macvtap: entered promiscuous mode [ 187.427612][T10422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.440244][T10422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.449400][T10422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.458266][T10422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.467103][T10422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.476392][T10422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0