last executing test programs: 4.723148869s ago: executing program 1 (id=1061): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000580)) 4.654566275s ago: executing program 1 (id=1066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote}, &(0x7f0000000100)=0xc) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x8000) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.766179277s ago: executing program 1 (id=1075): creat(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x2, 0x0) io_setup(0x23, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) unshare(0x40020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}) 2.794699955s ago: executing program 1 (id=1080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000003c0)={0x0, 0x0}) 2.713083562s ago: executing program 1 (id=1081): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000100000f5ffffff030000000e0a000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x639ff91e}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x6, 0x4}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x2e]}}, &(0x7f00000004c0)=""/6, 0x68, 0x6, 0x0, 0x405, 0x0, @void, @value}, 0x28) 2.706492433s ago: executing program 1 (id=1082): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in=@broadcast, 0x4e21, 0x6c, 0x4e22, 0x2, 0xa, 0x0, 0xa0, 0x4, 0x0, r2}, {0x756, 0x220f8794, 0x8000, 0x5c1, 0x7, 0x3162, 0x8, 0x4}, {0xc9, 0x8, 0x2, 0x5}, 0x5, 0x6e6bbe, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x0, 0x9, 0x6, 0x8, 0x2}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f0000000340)={0x2e, 0x1, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) write$binfmt_script(r4, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0xfffffffc, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) 2.225309937s ago: executing program 2 (id=1090): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=normal,mode=0x0000000000000003,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=maciceland,overriderockperm,map=normal,mode=0x000000000000001,map=acorn,check=strict,overriderockperm,map=normal,cruft,\x00\x00'], 0x3, 0x3f8, &(0x7f0000000f00)="$eJzs3N1O3EYbwPExH2/2pRKqFDUQwsGk6QE9yMZryqJVDirXO7tM4rWtGW8ERxUqEKFAWjWp1HBUTmgrtReR015Er6U3EPUSWvlj04UFNuFrUfT/SWhm7cczz2OtPFojWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEETdetOSLUUXdVnixomrhzyv7eeJ8eak6ZVwgn+xOVipgtNs3e/G/3J8UgM8WnGVHJmorY++jWxw9vToz1jj8loSvx4tXes/Wdnc3vR53Ipfvr2K1tFWkb647fVlLbWDbqdffBSsvKlg6VXbOp6sjAKD+NjVwIPpe1RmNRqupa3I3aTT9UvY3L9z3XrctH1UT5xsbRg0dVG6zoMNRRO4/Jdmcxy9kX8bFOZar8jpRb2zubi335iAkx+J3IgmrD6suCvGFBnut5tZrn1epLjaVl150Y2OAeIQYiRv+lxWhd8BUcOLt/yvUfAAAAAAB8uJz8Hnv2+38yvw/viJYOlTvqtAAAAAAAwAXK//M/kzWTWW9WOPz+BwAAAADgQ/PL0GfsbHLD+fNvYcyks5+sfubs+lmcvzteHDd+dMS0NedMl4PkTX2i/BSoeed2EXS7F/2mbLaG5eFcQALiNzFXxMxtFO1Gb08xy1RLh6oaxOHDmvD96bFUraY/PN/+UeTl/xp1ph2xtb2zWf3m252NPJf9bJT93fIBioHnKE7J5eXb5x6Pr3gyvxFTzjtVzOv21z9WHD72HnMeiDtFzJ2pop06XH8lm7NWPan6MovaOSs/EPNFzPzCvay5t3BMFt6wLLz+LM50Lt4hi8VhWSyeMwsAGJWtvlWoUm47vP4PrLtnuMpdzep+IO4WMXfn8gvrxNwxV3R32BXdfefVrTxTR7L4Y+AdCCetsdm8vx9ZVV9nB7w+cV4bek52Csdf7n4nbr14tXd/e3f96ebTzeeet1h3v3DdJU9M5mWUDWsPAOAYyrxxptKfHWN08nWt0aj56YqSJg4eS6ObbSV1lCoTrPhRW8nExGkcxGHWeaKbykrbTZLYpLIVG5nEVq/mb36R5atfrOr4UaoDm4TKt0oGcZT6QSqb2gYy6X4VaruiTH6wTVSgWzrwUx1H0sZdE6iqlFapvkDdVFGqWzrrRjIxuuObNfkkDrsdJZvKBkYnaVwM2JtLR63YdPJhq6M+2QAAXBNv32B3iZ1R1wgAAA478yr9v0tKCAAAAAAAAAAAAAAAAAAAAAAADLiK5/+utvPl9Ujj2Xp5hn86/4Dj16Gc3vuersvpfe/O/8sC+nbdEOcdeVyMvK5L6ozoggTgyvwbAAD//wH4ltc=") mount$bind(0x0, 0x0, 0x0, 0x189505a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xa0000001}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)) r3 = getpgid(0xffffffffffffffff) capset(&(0x7f00000002c0)={0x20080522, r3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="aa", 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) shutdown(r0, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 1.883975808s ago: executing program 2 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0) 1.808734705s ago: executing program 3 (id=1097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) add_key$user(&(0x7f0000000640), &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffffd) getrandom(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x154}}, 0x0) pipe(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000680)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) poll(0x0, 0x0, 0xffffffffffbffff8) 1.783741257s ago: executing program 2 (id=1098): socket$inet6(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x4}, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa12, 0xfffc, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$tipc(0x1e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3208498, &(0x7f0000000480)={[{@commit={'commit', 0x3d, 0x2f7}}, {@lazytime}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x5}}, {@block_validity}, {@abort}, {@nolazytime}, {@data_ordered}]}, 0x0, 0x7af, &(0x7f0000000f80)="$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") iopl(0x3) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) socket$kcm(0x2, 0x7, 0x73) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 1.600918993s ago: executing program 2 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000003c0)={0x0, &(0x7f0000000380)}) 1.600349144s ago: executing program 2 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) timer_create(0x2, 0x0, &(0x7f0000000200)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) timer_getoverrun(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x3c}}, 0x0) ioperm(0x0, 0x8, 0x400) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) 1.589871455s ago: executing program 2 (id=1101): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x8, 0x3) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000d523dfeaaecd5f827b2a750571ef795444d0c2e2964e28f3dce5dd29b53aecda4621c9e45f1057b760ffbdec248dffeb013ff982a70e4f14c402e44dc49340a7721cb4a0c480eb589be5d8cce287bcc149ebb29865082e0209467c60932b42b80dbdc6e8add18bb9b97d3657f2d6a5f6aa629388ebccb5f84f4dd6c2a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000980)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x0, 0x1}, 0x10}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0xf, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x2, 0x4, 0xa, 0xb, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x2a}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x7c0, 0x80, &(0x7f0000000180)=""/128, 0x40f00, 0x35, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0xc2cd, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0x10, @void, @value}, 0x94) 1.175269942s ago: executing program 4 (id=1108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000093000077fce1adb12ee0b97e918a68b5bd14bd57396697111c03a0113578dbdd141299466f3efa35049caff7beaf9dd957001b6ac970e0d9154095fc22e1d6946ba0425d5847602ba3fd3734e6c053797b84f59bf44c16c33de804"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x600, 0x0, 0x1d}) 1.086429791s ago: executing program 4 (id=1110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.025556796s ago: executing program 0 (id=1111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(0xfffffffffffffffc, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x2}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000040a695c050000000000000000000004b8ddd8f442234c39790f6a6d0735134a090080000000020000000000000028937697535c4b7e9ff7483a4ea7e4a9fdb9528d19133917a4168dc804c66e34f72e4eee174933f40085cfc01a3573935145824a16472eee1ba6d4cd78210e233fc5eb8f2c2f4b26940dfa7763653aa559d9621040bd8298945931b0b2f661d39afdf8a5ca5e36"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40004880) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000002200), 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TCXONC(r4, 0x540a, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) 959.395632ms ago: executing program 4 (id=1112): syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/49, 0x75}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000f0000000000181100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaa94aaaaaaafaaaa0086dd3d00000000140600fe8000000000000200000040000000a639fe00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000500)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x2c, 0x6, 0x0, @remote, @mcast1, {[], {{0x0, 0x4e22, r7, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7, {[@generic={0x5, 0x12, "134a321e813905d5d1642b4a49d8a260"}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 909.985487ms ago: executing program 3 (id=1113): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 909.395517ms ago: executing program 3 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000640), &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffffd) getrandom(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x154}}, 0x0) pipe(0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r7 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000680)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47fc, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) 882.38235ms ago: executing program 0 (id=1115): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '_!oU\x885\r\x00\xff\xff\xff\xff\xfe\xff\xff\xffp\xbaH6X40\xe2D\xe0\xe4\xf2\xdd\f0\x12\x00F\x1d\xf8\x9c\xdd\xb0Q\xf7\x13\xed\xb3\x11\x049Z\x88\x96\xb3B\xdf\xff\xff\xff\xff\xfd\xd8\xa9\v\xfb\t\x0fn\xe2\xf6&\xde\xff\xb5F\x00\x00\x00\x00\x00'}}]}}) 793.136827ms ago: executing program 0 (id=1116): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 764.63122ms ago: executing program 0 (id=1117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1081e, &(0x7f0000000200)=ANY=[], 0x1, 0x6d0, &(0x7f0000000a40)="$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") open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) 709.114565ms ago: executing program 0 (id=1118): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=normal,mode=0x0000000000000003,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=maciceland,overriderockperm,map=normal,mode=0x000000000000001,map=acorn,check=strict,overriderockperm,map=normal,cruft,\x00\x00'], 0x3, 0x3f8, &(0x7f0000000f00)="$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") mount$bind(0x0, 0x0, 0x0, 0x189505a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0xa0000001}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)) r3 = getpgid(0xffffffffffffffff) capset(&(0x7f00000002c0)={0x20080522, r3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="aa", 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) shutdown(r0, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 581.268387ms ago: executing program 0 (id=1119): creat(0x0, 0x124) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000280)={'binder1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000019000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYRES16], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x5, 0x2, "c5f0"}, 0xa) mount$nfs4(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="636f6e746578743d22f1"]) 103.59642ms ago: executing program 4 (id=1120): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') ioctl$sock_bt_hci(r1, 0x60066ca5, &(0x7f0000000180)="316ed799120c34e8096a94e4b481f1db8c2dc50ed5d33504f4367e1bf8047fbcfc4b775c217d24c5327a2ca3343343237250a07823ff4cdacde2948e1556c97e33d5b505cec7ff9b596ea30801fb97f66793478945c960709d2c04f7e9ddf56459f9d9cd0cd5e1825c91aaed0ba21f0a175bffb42636b88a62ac54") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x7, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/176) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 50.521995ms ago: executing program 4 (id=1121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) 50.083295ms ago: executing program 3 (id=1122): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb10000000000080040", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 854.4µs ago: executing program 4 (id=1123): inotify_init1(0x80000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011000500000000000000200007000000", @ANYRES32=r2, @ANYBLOB="0000003df20000000c001a800800058004000a"], 0x2c}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7, @ANYBLOB="0000080004ed7b32c43417676a43a197d43fb220000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200), 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup2(r3, r8) bind$unix(r9, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x18000, &(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f5, &(0x7f0000000e00)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000008c0)={'#! ', '', [{0x20, 'e\xec\xc4\x1dBf;\xf6\xfc\xc4\xbdQ\xe0\x83\xbb\xa0\xdf\b\xb3\xa2\xfc\xf8}\x92\x13\xd8\xf9\xdb\xb3?\x98f\xcd\x0f\xaa\x88BQx\xc4\xb7\rJ\xa9\x9dY\xe2\xa5\xa4\xf2\xaf\xe5Qt#\xf9\x9c\v\xd1\xff\xfb\xdb-\xeb\x11bq\xae\x1b\xea!\x15\xfaB\xeb\x19\xe5\x82\x04\xe6K\xd7\xd6\xe0zh'}, {}, {}, {0x20, '\xefh:%'}], 0xa, "8f2c6da8fa1551f65aaacdc6395a5c0509807ee27bb3be72"}, 0x7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) fdatasync(r10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000002c0)) 531.79µs ago: executing program 3 (id=1124): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000080)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfdef) 0s ago: executing program 3 (id=1125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(0xfffffffffffffffc, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x2}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000040a695c050000000000000000000004b8ddd8f442234c39790f6a6d0735134a090080000000020000000000000028937697535c4b7e9ff7483a4ea7e4a9fdb9528d19133917a4168dc804c66e34f72e4eee174933f40085cfc01a3573935145824a16472eee1ba6d4cd78210e233fc5eb8f2c2f4b26940dfa7763653aa559d9621040bd8298945931b0b2f661d39afdf8a5ca5e36"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40004880) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000002200), 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TCXONC(r4, 0x540a, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) kernel console output (not intermixed with test programs): ge from 0 to 2048 [ 61.271689][ T4412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.301276][ T4414] bridge0: port 3(vlan0) entered blocking state [ 61.307687][ T4414] bridge0: port 3(vlan0) entered disabled state [ 61.314562][ T4412] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.324: bad orphan inode 8 [ 61.317048][ T4414] vlan0: entered allmulticast mode [ 61.330293][ T4414] vlan0: left allmulticast mode [ 61.351990][ T4412] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.324: bg 0: block 2: invalid block bitmap [ 61.487993][ T4426] loop1: detected capacity change from 0 to 512 [ 61.494659][ T4426] vfat: Unknown parameter '/dev/ttyS3' [ 61.615028][ T4432] loop1: detected capacity change from 0 to 512 [ 61.639609][ T4432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.660950][ T4432] EXT4-fs (loop1): 1 orphan inode deleted [ 61.666781][ T4432] EXT4-fs (loop1): 1 truncate cleaned up [ 61.674840][ T4434] loop0: detected capacity change from 0 to 2048 [ 61.693630][ T4434] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 61.741536][ T4432] lo speed is unknown, defaulting to 1000 [ 61.874895][ T4443] usb usb1: usbfs: process 4443 (syz.1.334) did not claim interface 8 before use [ 61.916778][ T4443] loop1: detected capacity change from 0 to 2048 [ 61.942962][ T4443] Y­4`Ò˜: renamed from lo (while UP) [ 62.169164][ T4451] __nla_validate_parse: 4 callbacks suppressed [ 62.169233][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 62.388860][ T4461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 62.432124][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 63.092736][ T4482] FAULT_INJECTION: forcing a failure. [ 63.092736][ T4482] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.106029][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz.4.347 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 63.116290][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.126355][ T4482] Call Trace: [ 63.129654][ T4482] [ 63.132666][ T4482] dump_stack_lvl+0xf2/0x150 [ 63.137303][ T4482] dump_stack+0x15/0x20 [ 63.141596][ T4482] should_fail_ex+0x223/0x230 [ 63.146420][ T4482] should_fail_alloc_page+0xfd/0x110 [ 63.151730][ T4482] __alloc_pages_noprof+0x109/0x360 [ 63.156949][ T4482] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 63.162433][ T4482] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 63.167839][ T4482] handle_mm_fault+0xdbe/0x2a80 [ 63.172804][ T4482] exc_page_fault+0x3b9/0x650 [ 63.177527][ T4482] asm_exc_page_fault+0x26/0x30 [ 63.182397][ T4482] RIP: 0033:0x7ff999fbb23b [ 63.186843][ T4482] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 63.206555][ T4482] RSP: 002b:00007ff998c5de10 EFLAGS: 00010246 [ 63.212636][ T4482] RAX: 00007ff998c5ff30 RBX: 00007ff99a19b620 RCX: 0000000000000000 [ 63.220683][ T4482] RDX: 00007ff998c5ff78 RSI: 00007ff99a06c900 RDI: 00007ff998c5de30 [ 63.228833][ T4482] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 63.236816][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.244870][ T4482] R13: 0000000000000000 R14: 00007ff99a1c6058 R15: 00007ffcc8466a68 [ 63.252856][ T4482] [ 63.256088][ T4482] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 63.294746][ T4488] siw: device registration error -23 [ 63.398993][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 63.435243][ T4495] loop4: detected capacity change from 0 to 512 [ 63.454318][ T4497] loop1: detected capacity change from 0 to 136 [ 63.471893][ T4495] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.478824][ T4495] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 63.489286][ T4495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 63.498264][ T4495] System zones: 1-12 [ 63.515247][ T4495] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.353: corrupted in-inode xattr: e_value size too large [ 63.535255][ T4495] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 63.615613][ T4495] netlink: 9 bytes leftover after parsing attributes in process `syz.4.353'. [ 63.690538][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 63.760597][ T4519] bridge0: port 3(vlan2) entered blocking state [ 63.767104][ T4519] bridge0: port 3(vlan2) entered disabled state [ 63.773829][ T4519] vlan2: entered allmulticast mode [ 63.779610][ T4519] vlan2: left allmulticast mode [ 63.779705][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 63.931893][ T4529] hub 9-0:1.0: USB hub found [ 63.937343][ T4529] hub 9-0:1.0: 8 ports detected [ 64.025377][ T4535] FAULT_INJECTION: forcing a failure. [ 64.025377][ T4535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.038632][ T4535] CPU: 1 UID: 0 PID: 4535 Comm: syz.2.369 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 64.048893][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.058965][ T4535] Call Trace: [ 64.062252][ T4535] [ 64.065195][ T4535] dump_stack_lvl+0xf2/0x150 [ 64.069886][ T4535] dump_stack+0x15/0x20 [ 64.074211][ T4535] should_fail_ex+0x223/0x230 [ 64.078916][ T4535] should_fail+0xb/0x10 [ 64.083088][ T4535] should_fail_usercopy+0x1a/0x20 [ 64.088246][ T4535] _copy_to_user+0x1e/0xa0 [ 64.092675][ T4535] simple_read_from_buffer+0xa0/0x110 [ 64.098075][ T4535] proc_fail_nth_read+0xf9/0x140 [ 64.103119][ T4535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.108773][ T4535] vfs_read+0x195/0x720 [ 64.112961][ T4535] ? __rcu_read_unlock+0x4e/0x70 [ 64.118005][ T4535] ? __fget_files+0x1d4/0x210 [ 64.122772][ T4535] ksys_read+0xeb/0x1b0 [ 64.126977][ T4535] __x64_sys_read+0x42/0x50 [ 64.131568][ T4535] x64_sys_call+0x27d3/0x2d60 [ 64.136307][ T4535] do_syscall_64+0xc9/0x1c0 [ 64.140936][ T4535] ? clear_bhb_loop+0x55/0xb0 [ 64.145636][ T4535] ? clear_bhb_loop+0x55/0xb0 [ 64.150393][ T4535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.156365][ T4535] RIP: 0033:0x7f9167e2c93c [ 64.160797][ T4535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 64.180521][ T4535] RSP: 002b:00007f9166aa1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.188959][ T4535] RAX: ffffffffffffffda RBX: 00007f9167fe5f80 RCX: 00007f9167e2c93c [ 64.196954][ T4535] RDX: 000000000000000f RSI: 00007f9166aa10a0 RDI: 0000000000000004 [ 64.200063][ T4538] loop4: detected capacity change from 0 to 136 [ 64.205180][ T4535] RBP: 00007f9166aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 64.205199][ T4535] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 64.205216][ T4535] R13: 0000000000000000 R14: 00007f9167fe5f80 R15: 00007ffcedb08b48 [ 64.235398][ T4535] [ 64.263142][ T4540] program syz.2.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.351071][ T4544] bridge0: port 3(vlan2) entered blocking state [ 64.357747][ T4544] bridge0: port 3(vlan2) entered disabled state [ 64.361694][ T4546] loop0: detected capacity change from 0 to 512 [ 64.375251][ T4544] vlan2: entered allmulticast mode [ 64.390000][ T4546] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.401668][ T4544] vlan2: left allmulticast mode [ 64.407841][ T4546] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 64.448294][ T4546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 64.475438][ T4546] System zones: 1-12 [ 64.497704][ T4546] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.375: corrupted in-inode xattr: e_value size too large [ 64.567266][ T4555] hub 9-0:1.0: USB hub found [ 64.574210][ T4546] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.375: couldn't read orphan inode 15 (err -117) [ 64.592254][ T4565] bridge0: port 3(vlan2) entered blocking state [ 64.598707][ T4565] bridge0: port 3(vlan2) entered disabled state [ 64.605206][ T4565] vlan2: entered allmulticast mode [ 64.610859][ T4565] vlan2: left allmulticast mode [ 64.612204][ T4566] program syz.2.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.615816][ T4555] hub 9-0:1.0: 8 ports detected [ 64.779668][ T4546] netlink: 9 bytes leftover after parsing attributes in process `syz.0.375'. [ 64.877292][ T4575] loop3: detected capacity change from 0 to 136 [ 64.891150][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 64.891166][ T29] audit: type=1326 audit(1727060383.582:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580e4ddef9 code=0x7ffc0000 [ 64.924682][ T29] audit: type=1326 audit(1727060383.622:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f580e4ddef9 code=0x7ffc0000 [ 64.995018][ T29] audit: type=1326 audit(1727060383.682:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580e4ddef9 code=0x7ffc0000 [ 65.018457][ T29] audit: type=1326 audit(1727060383.682:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580e4ddef9 code=0x7ffc0000 [ 65.055919][ T29] audit: type=1326 audit(1727060383.752:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99a00def9 code=0x7ffc0000 [ 65.079331][ T29] audit: type=1326 audit(1727060383.752:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99a00def9 code=0x7ffc0000 [ 65.104095][ T29] audit: type=1326 audit(1727060383.792:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff99a00def9 code=0x7ffc0000 [ 65.127366][ T29] audit: type=1326 audit(1727060383.792:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99a00def9 code=0x7ffc0000 [ 65.150724][ T29] audit: type=1326 audit(1727060383.792:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99a00def9 code=0x7ffc0000 [ 65.185300][ T4585] siw: device registration error -23 [ 65.242207][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 65.396398][ T4598] loop3: detected capacity change from 0 to 1024 [ 65.428265][ T4598] EXT4-fs: Ignoring removed oldalloc option [ 65.447375][ T4598] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 65.499739][ T4598] 9pnet_fd: Insufficient options for proto=fd [ 65.560928][ T4603] hub 9-0:1.0: USB hub found [ 65.573502][ T4603] hub 9-0:1.0: 8 ports detected [ 65.683984][ T29] audit: type=1326 audit(1727060384.372:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 65.735208][ T4607] loop2: detected capacity change from 0 to 512 [ 65.745002][ T4607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.886312][ T4607] EXT4-fs (loop2): 1 orphan inode deleted [ 65.892140][ T4607] EXT4-fs (loop2): 1 truncate cleaned up [ 65.939578][ T4611] loop0: detected capacity change from 0 to 512 [ 65.954275][ T4611] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.977521][ T4607] lo speed is unknown, defaulting to 1000 [ 65.985936][ T4611] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 66.000083][ T4611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 66.016196][ T4611] System zones: 1-12 [ 66.022644][ T4611] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.399: corrupted in-inode xattr: e_value size too large [ 66.065193][ T4611] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.399: couldn't read orphan inode 15 (err -117) [ 66.174637][ T4617] loop2: detected capacity change from 0 to 136 [ 66.201202][ T4611] netlink: 9 bytes leftover after parsing attributes in process `syz.0.399'. [ 66.233027][ T4619] loop4: detected capacity change from 0 to 512 [ 66.252334][ T4619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.258268][ T4622] bridge0: port 3(vlan2) entered blocking state [ 66.264830][ T4619] EXT4-fs (loop4): 1 orphan inode deleted [ 66.268542][ T4622] bridge0: port 3(vlan2) entered disabled state [ 66.274153][ T4619] EXT4-fs (loop4): 1 truncate cleaned up [ 66.295464][ T4622] vlan2: entered allmulticast mode [ 66.304322][ T4622] vlan2: left allmulticast mode [ 66.326729][ T4619] lo speed is unknown, defaulting to 1000 [ 66.619318][ T4635] loop2: detected capacity change from 0 to 512 [ 66.736759][ T4635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.841431][ T4635] EXT4-fs (loop2): 1 orphan inode deleted [ 66.847247][ T4635] EXT4-fs (loop2): 1 truncate cleaned up [ 66.853536][ T4635] EXT4-fs mount: 27 callbacks suppressed [ 66.853560][ T4635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.970285][ T4635] lo speed is unknown, defaulting to 1000 [ 67.041036][ T4641] hub 9-0:1.0: USB hub found [ 67.060075][ T4641] hub 9-0:1.0: 8 ports detected [ 67.118351][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.191426][ T4643] loop2: detected capacity change from 0 to 2048 [ 67.211534][ T4643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.261968][ T4643] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.409: bad orphan inode 8 [ 67.282335][ T4643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.322266][ T4643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.409: bg 0: block 2: invalid block bitmap [ 67.377116][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.526726][ T4653] bpf_get_probe_write_proto: 14 callbacks suppressed [ 67.526766][ T4653] syz.4.413[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.545044][ T4653] syz.4.413[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.576059][ T4653] syz.4.413[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.607477][ T4653] syz.4.413[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.625262][ T4653] syz.4.413[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.649415][ T4653] syz.4.413[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.679564][ T4653] program syz.4.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.725245][ T4659] syz.4.414[4659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.725303][ T4659] syz.4.414[4659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.756375][ T4659] syz.4.414[4659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.778589][ T4659] syz.4.414[4659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.805763][ T4659] program syz.4.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.451708][ T4668] loop2: detected capacity change from 0 to 512 [ 68.506934][ T4668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.525130][ T4668] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.559956][ T4668] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.831062][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.856198][ T4677] loop3: detected capacity change from 0 to 136 [ 68.946978][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.977641][ T4685] loop0: detected capacity change from 0 to 136 [ 69.001735][ T4686] Dead loop on virtual device ip6_vti0, fix it urgently! [ 69.115644][ T4694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 69.253124][ T4706] program syz.3.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.284484][ T4709] loop2: detected capacity change from 0 to 512 [ 69.303233][ T4709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.330778][ T4709] EXT4-fs (loop2): 1 orphan inode deleted [ 69.336634][ T4709] EXT4-fs (loop2): 1 truncate cleaned up [ 69.350369][ T4713] loop3: detected capacity change from 0 to 512 [ 69.355379][ T4709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.499384][ T4718] lo speed is unknown, defaulting to 1000 [ 69.569797][ T4713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 69.586103][ T4713] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.599078][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.660499][ T4728] loop0: detected capacity change from 0 to 136 [ 69.694360][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.909785][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 69.909798][ T29] audit: type=1326 audit(1727060388.602:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 69.952100][ T4742] loop0: detected capacity change from 0 to 512 [ 69.964362][ T4742] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.987201][ T29] audit: type=1326 audit(1727060388.632:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.010667][ T29] audit: type=1326 audit(1727060388.632:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.034151][ T29] audit: type=1326 audit(1727060388.632:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.057505][ T29] audit: type=1326 audit(1727060388.632:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.080873][ T29] audit: type=1326 audit(1727060388.632:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.104410][ T29] audit: type=1326 audit(1727060388.632:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.127904][ T29] audit: type=1326 audit(1727060388.632:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.151269][ T29] audit: type=1326 audit(1727060388.642:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.174708][ T29] audit: type=1326 audit(1727060388.642:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc1f58adef9 code=0x7ffc0000 [ 70.205825][ T4742] EXT4-fs (loop0): 1 orphan inode deleted [ 70.211654][ T4742] EXT4-fs (loop0): 1 truncate cleaned up [ 70.219181][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.271315][ T4742] lo speed is unknown, defaulting to 1000 [ 70.374959][ T4713] netlink: 'syz.3.434': attribute type 13 has an invalid length. [ 70.382732][ T4713] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.434'. [ 70.416963][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.443927][ T4749] loop4: detected capacity change from 0 to 512 [ 70.470644][ T4750] Dead loop on virtual device ip6_vti0, fix it urgently! [ 70.472361][ T4749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.518048][ T4749] EXT4-fs (loop4): 1 orphan inode deleted [ 70.523838][ T4749] EXT4-fs (loop4): 1 truncate cleaned up [ 70.531305][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.612459][ T4757] program syz.2.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.629271][ T4765] siw: device registration error -23 [ 70.641202][ T4749] lo speed is unknown, defaulting to 1000 [ 70.729151][ T4771] siw: device registration error -23 [ 70.788192][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.903889][ T4780] loop4: detected capacity change from 0 to 2048 [ 70.911743][ T4780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.939870][ T4780] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.453: bad orphan inode 8 [ 70.948906][ T4777] loop3: detected capacity change from 0 to 128 [ 70.954705][ T4780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.997044][ T4780] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.453: bg 0: block 2: invalid block bitmap [ 71.033882][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.279247][ T4791] Dead loop on virtual device ip6_vti0, fix it urgently! [ 71.423016][ T4797] bridge0: port 3(vlan2) entered blocking state [ 71.429396][ T4797] bridge0: port 3(vlan2) entered disabled state [ 71.454428][ T4797] vlan2: entered allmulticast mode [ 71.478754][ T4797] vlan2: left allmulticast mode [ 71.502392][ T4799] loop3: detected capacity change from 0 to 512 [ 71.514327][ T4799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.527855][ T4799] EXT4-fs (loop3): 1 orphan inode deleted [ 71.533630][ T4799] EXT4-fs (loop3): 1 truncate cleaned up [ 71.540707][ T4799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.624898][ T4803] loop0: detected capacity change from 0 to 1024 [ 71.641512][ T4809] lo speed is unknown, defaulting to 1000 [ 71.660531][ T4807] loop4: detected capacity change from 0 to 512 [ 71.679238][ T4803] EXT4-fs: Ignoring removed oldalloc option [ 71.731603][ T4807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.734780][ T4803] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 71.768428][ T4807] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.790597][ T4803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.871708][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.881937][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.895696][ T4803] 9pnet_fd: Insufficient options for proto=fd [ 72.019371][ T4822] loop4: detected capacity change from 0 to 256 [ 72.033258][ T4825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.070038][ T4818] netlink: 6 bytes leftover after parsing attributes in process `syz.4.462'. [ 72.169813][ T4830] bridge0: port 3(vlan2) entered blocking state [ 72.176172][ T4830] bridge0: port 3(vlan2) entered disabled state [ 72.199270][ T4830] vlan2: entered allmulticast mode [ 72.210539][ T4830] vlan2: left allmulticast mode [ 72.244763][ T4834] loop4: detected capacity change from 0 to 128 [ 72.372444][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.447279][ T4839] cgroup: fork rejected by pids controller in /syz0 [ 72.474047][ T4839] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 72.474047][ T4839] program syz.0.469 not setting count and/or reply_len properly [ 72.555722][ T4844] syzkaller0: refused to change device tx_queue_len [ 72.608362][ T4845] syz.4.467: attempt to access beyond end of device [ 72.608362][ T4845] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 72.697849][ T1584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.778334][ T1584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.838708][ T1584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.933500][ T1584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.948523][ T4868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 72.962697][ T4854] lo speed is unknown, defaulting to 1000 [ 73.052820][ T1584] bridge_slave_1: left allmulticast mode [ 73.058590][ T1584] bridge_slave_1: left promiscuous mode [ 73.064425][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.103439][ T1584] bridge_slave_0: left allmulticast mode [ 73.109174][ T1584] bridge_slave_0: left promiscuous mode [ 73.115029][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.148477][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.148477][ T56] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 73.176684][ T4874] bpf_get_probe_write_proto: 20 callbacks suppressed [ 73.176704][ T4874] syz.4.479[4874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.184056][ T4874] syz.4.479[4874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.197475][ T4874] syz.4.479[4874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.238565][ T1584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.260262][ T1584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.272549][ T1584] bond0 (unregistering): Released all slaves [ 73.345722][ T1584] hsr_slave_0: left promiscuous mode [ 73.353727][ T1584] hsr_slave_1: left promiscuous mode [ 73.363052][ T1584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.370679][ T1584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.393372][ T1584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.400872][ T1584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.413232][ T1584] veth1_macvtap: left promiscuous mode [ 73.418768][ T1584] veth0_macvtap: left promiscuous mode [ 73.424347][ T1584] veth1_vlan: left promiscuous mode [ 73.429656][ T1584] veth0_vlan: left promiscuous mode [ 73.530943][ T4901] loop2: detected capacity change from 0 to 2048 [ 73.571196][ T1584] team0 (unregistering): Port device team_slave_1 removed [ 73.576343][ T3436] loop2: p1 < > p4 [ 73.583550][ T3436] loop2: p4 size 8388608 extends beyond EOD, truncated [ 73.591650][ T1584] team0 (unregistering): Port device team_slave_0 removed [ 73.601077][ T4901] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 73.713091][ T4854] chnl_net:caif_netlink_parms(): no params data found [ 73.833530][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.840727][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.865367][ T4909] random: crng reseeded on system resumption [ 73.871718][ T4854] bridge_slave_0: entered allmulticast mode [ 73.895701][ T4854] bridge_slave_0: entered promiscuous mode [ 73.918109][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.925245][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.957409][ T4854] bridge_slave_1: entered allmulticast mode [ 74.001385][ T4854] bridge_slave_1: entered promiscuous mode [ 74.092711][ T4854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.109508][ T4920] pim6reg1: entered promiscuous mode [ 74.114842][ T4920] pim6reg1: entered allmulticast mode [ 74.141897][ T4924] loop4: detected capacity change from 0 to 512 [ 74.157556][ T4924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.176644][ T4854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.194811][ T4924] EXT4-fs (loop4): 1 orphan inode deleted [ 74.200675][ T4924] EXT4-fs (loop4): 1 truncate cleaned up [ 74.210171][ T4924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.276136][ T4854] team0: Port device team_slave_0 added [ 74.286943][ T4932] pim6reg1: entered promiscuous mode [ 74.292273][ T4932] pim6reg1: entered allmulticast mode [ 74.314774][ T4854] team0: Port device team_slave_1 added [ 74.387891][ T46] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 74.445754][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.452798][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.478794][ T4854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.496747][ T4924] lo speed is unknown, defaulting to 1000 [ 74.505672][ T4936] bridge0: port 3(vlan3) entered blocking state [ 74.511989][ T4936] bridge0: port 3(vlan3) entered disabled state [ 74.520366][ T4936] vlan3: entered allmulticast mode [ 74.525975][ T4936] vlan3: left allmulticast mode [ 74.533629][ T4854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.540747][ T4854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.566798][ T4854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.624812][ T4940] syz.3.487[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.624872][ T4940] syz.3.487[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.638139][ T4940] syz.3.487[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.650648][ T4940] syz.3.487[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.668429][ T4943] bridge0: port 3(vlan3) entered blocking state [ 74.673494][ T4940] syz.3.487[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.679746][ T4943] bridge0: port 3(vlan3) entered disabled state [ 74.705515][ T4940] syz.3.487[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.711053][ T4940] program syz.3.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.731958][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.732844][ T4943] vlan3: entered allmulticast mode [ 74.760741][ T4943] vlan3: left allmulticast mode [ 74.782055][ T4854] hsr_slave_0: entered promiscuous mode [ 74.798832][ T4854] hsr_slave_1: entered promiscuous mode [ 74.827977][ T4854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.864967][ T4854] Cannot create hsr debugfs directory [ 75.002241][ T4971] loop3: detected capacity change from 0 to 2048 [ 75.065365][ T4971] loop3: p1 < > p4 [ 75.092733][ T4971] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.152351][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 75.152365][ T29] audit: type=1400 audit(1727060393.842:3149): avc: denied { execute } for pid=4969 comm="syz.3.493" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 75.210504][ T29] audit: type=1400 audit(1727060393.862:3150): avc: denied { unlink } for pid=2948 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.276432][ T29] audit: type=1400 audit(1727060393.902:3151): avc: denied { checkpoint_restore } for pid=4969 comm="syz.3.493" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.308518][ T4978] random: crng reseeded on system resumption [ 75.465856][ T4854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.484808][ T4854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.506504][ T4854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.519072][ T4854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.594785][ T4854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.613349][ T4854] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.623375][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.630535][ T1584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.643338][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.650512][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.658003][ T4993] FAULT_INJECTION: forcing a failure. [ 75.658003][ T4993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.671138][ T4993] CPU: 1 UID: 0 PID: 4993 Comm: syz.2.495 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 75.681395][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.691461][ T4993] Call Trace: [ 75.694748][ T4993] [ 75.697683][ T4993] dump_stack_lvl+0xf2/0x150 [ 75.702294][ T4993] dump_stack+0x15/0x20 [ 75.706517][ T4993] should_fail_ex+0x223/0x230 [ 75.711217][ T4993] should_fail+0xb/0x10 [ 75.715390][ T4993] should_fail_usercopy+0x1a/0x20 [ 75.720476][ T4993] _copy_from_user+0x1e/0xd0 [ 75.725111][ T4993] __sys_bpf+0x14e/0x7a0 [ 75.729428][ T4993] __x64_sys_bpf+0x43/0x50 [ 75.733865][ T4993] x64_sys_call+0x2625/0x2d60 [ 75.738559][ T4993] do_syscall_64+0xc9/0x1c0 [ 75.743145][ T4993] ? clear_bhb_loop+0x55/0xb0 [ 75.747968][ T4993] ? clear_bhb_loop+0x55/0xb0 [ 75.752710][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.758629][ T4993] RIP: 0033:0x7f9167e2def9 [ 75.763057][ T4993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.782838][ T4993] RSP: 002b:00007f9166aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.791266][ T4993] RAX: ffffffffffffffda RBX: 00007f9167fe5f80 RCX: 00007f9167e2def9 [ 75.799385][ T4993] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 75.807421][ T4993] RBP: 00007f9166aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 75.815478][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.823453][ T4993] R13: 0000000000000000 R14: 00007f9167fe5f80 R15: 00007ffcedb08b48 [ 75.831513][ T4993] [ 75.908497][ T4854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.933724][ T29] audit: type=1326 audit(1727060394.622:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.2.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x0 [ 76.042885][ T4854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.331018][ T4854] veth0_vlan: entered promiscuous mode [ 76.374060][ T4854] veth1_vlan: entered promiscuous mode [ 76.431502][ T4854] veth0_macvtap: entered promiscuous mode [ 76.457328][ T4854] veth1_macvtap: entered promiscuous mode [ 76.493518][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.504145][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.514011][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.524494][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.534335][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.544848][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.554733][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.565351][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.597333][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 76.638411][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.669951][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.680868][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.690748][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.701258][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.711183][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.721677][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.731538][ T4854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.742033][ T4854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.857423][ T4854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.921344][ T4854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.930154][ T4854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.938987][ T4854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.947824][ T4854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.051386][ T29] audit: type=1400 audit(1727060395.742:3153): avc: denied { mount } for pid=4854 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.150070][ T5051] siw: device registration error -23 [ 77.356263][ T5066] syz.0.501[5066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.357920][ T5066] program syz.0.501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.390541][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 77.399465][ T5069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.502'. [ 77.455396][ T5069] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 77.464858][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 77.481365][ T5069] loop4: detected capacity change from 0 to 512 [ 77.508744][ T5069] EXT4-fs: Ignoring removed i_version option [ 77.526062][ T5069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.548895][ T5069] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.565185][ T5069] EXT4-fs (loop4): 1 truncate cleaned up [ 77.571609][ T5069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.599816][ T29] audit: type=1400 audit(1727060396.292:3154): avc: denied { create } for pid=5068 comm="syz.4.502" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.668133][ T5069] 9pnet_fd: Insufficient options for proto=fd [ 77.701076][ T29] audit: type=1400 audit(1727060396.292:3155): avc: denied { write open } for pid=5068 comm="syz.4.502" path="/125/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.745321][ T29] audit: type=1400 audit(1727060396.342:3156): avc: denied { read } for pid=5068 comm="syz.4.502" path="/125/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.789526][ T29] audit: type=1400 audit(1727060396.352:3157): avc: denied { lock } for pid=5068 comm="syz.4.502" path="/125/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.836594][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.850042][ T5107] loop0: detected capacity change from 0 to 512 [ 77.874645][ T5107] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.921573][ T5114] bridge0: port 3(vlan2) entered blocking state [ 77.922825][ T29] audit: type=1326 audit(1727060396.522:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 77.928001][ T5114] bridge0: port 3(vlan2) entered disabled state [ 77.967788][ T5114] vlan2: entered allmulticast mode [ 77.968991][ T5107] EXT4-fs (loop0): 1 orphan inode deleted [ 77.978808][ T5107] EXT4-fs (loop0): 1 truncate cleaned up [ 77.984983][ T5114] vlan2: left allmulticast mode [ 77.990438][ T5107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.080045][ T5107] lo speed is unknown, defaulting to 1000 [ 78.190407][ T5133] bridge0: port 3(vlan2) entered blocking state [ 78.196862][ T5133] bridge0: port 3(vlan2) entered disabled state [ 78.231954][ T5133] vlan2: entered allmulticast mode [ 78.247330][ T5133] vlan2: left allmulticast mode [ 78.361665][ T4854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.439604][ T5143] loop4: detected capacity change from 0 to 512 [ 78.466410][ T5143] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.494175][ T5143] EXT4-fs (loop4): 1 orphan inode deleted [ 78.500170][ T5143] EXT4-fs (loop4): 1 truncate cleaned up [ 78.522290][ T5143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.626309][ T5143] lo speed is unknown, defaulting to 1000 [ 78.727539][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 78.808409][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.868040][ T5165] loop4: detected capacity change from 0 to 128 [ 78.891394][ T5167] bridge0: port 3(vlan2) entered blocking state [ 78.897823][ T5167] bridge0: port 3(vlan2) entered disabled state [ 78.920214][ T5167] vlan2: entered allmulticast mode [ 78.926000][ T5167] vlan2: left allmulticast mode [ 78.935551][ T5170] bridge0: port 3(vlan2) entered blocking state [ 78.939532][ T5165] syz.4.522: attempt to access beyond end of device [ 78.939532][ T5165] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 78.941856][ T5170] bridge0: port 3(vlan2) entered disabled state [ 78.963276][ T5170] vlan2: entered allmulticast mode [ 78.969565][ T5170] vlan2: left allmulticast mode [ 78.969881][ T11] kworker/u8:0: attempt to access beyond end of device [ 78.969881][ T11] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 79.000428][ T5176] bpf_get_probe_write_proto: 5 callbacks suppressed [ 79.000446][ T5176] syz.4.525[5176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.007228][ T5176] syz.4.525[5176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.018649][ T5176] syz.4.525[5176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.088032][ T5178] loop4: detected capacity change from 0 to 512 [ 79.110740][ T5184] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.114179][ T5178] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.148984][ T5178] EXT4-fs (loop4): 1 orphan inode deleted [ 79.154820][ T5178] EXT4-fs (loop4): 1 truncate cleaned up [ 79.163429][ T5178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.197494][ T5190] loop3: detected capacity change from 0 to 512 [ 79.209445][ T5190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.230332][ T5195] siw: device registration error -23 [ 79.237796][ T5190] EXT4-fs (loop3): 1 orphan inode deleted [ 79.243594][ T5190] EXT4-fs (loop3): 1 truncate cleaned up [ 79.250276][ T5178] lo speed is unknown, defaulting to 1000 [ 79.258917][ T5190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.303343][ T5190] lo speed is unknown, defaulting to 1000 [ 79.358308][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.468215][ T5203] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.513890][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.584263][ T5211] loop4: detected capacity change from 0 to 128 [ 79.680139][ T5216] syz.4.536: attempt to access beyond end of device [ 79.680139][ T5216] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 79.728794][ T50] kworker/u8:3: attempt to access beyond end of device [ 79.728794][ T50] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 79.908864][ T5223] loop4: detected capacity change from 0 to 512 [ 79.932784][ T5223] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.954169][ T5223] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 79.964987][ T5223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 79.972967][ T5223] System zones: 1-12 [ 79.978257][ T5223] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.540: corrupted in-inode xattr: e_value size too large [ 79.992564][ T5223] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.540: couldn't read orphan inode 15 (err -117) [ 80.005106][ T5223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.071212][ T5223] netlink: 9 bytes leftover after parsing attributes in process `syz.4.540'. [ 80.103983][ T5231] syz.2.543[5231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.104043][ T5231] syz.2.543[5231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.129324][ T5231] syz.2.543[5231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.141672][ T5231] program syz.2.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.184044][ T5239] bridge0: port 3(vlan2) entered blocking state [ 80.190611][ T5239] bridge0: port 3(vlan2) entered disabled state [ 80.192020][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 80.192041][ T29] audit: type=1326 audit(1727060398.882:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.197231][ T5239] vlan2: entered allmulticast mode [ 80.211651][ T29] audit: type=1326 audit(1727060398.892:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.227013][ T5241] loop0: detected capacity change from 0 to 512 [ 80.231596][ T29] audit: type=1326 audit(1727060398.892:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.258187][ T5241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.261282][ T29] audit: type=1326 audit(1727060398.892:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.296135][ T5241] EXT4-fs (loop0): 1 orphan inode deleted [ 80.317885][ T29] audit: type=1326 audit(1727060398.892:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.323749][ T5241] EXT4-fs (loop0): 1 truncate cleaned up [ 80.347105][ T29] audit: type=1326 audit(1727060398.892:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.363973][ T5241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.376102][ T29] audit: type=1326 audit(1727060398.892:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.411638][ T29] audit: type=1326 audit(1727060398.902:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.435076][ T29] audit: type=1326 audit(1727060398.902:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.458442][ T29] audit: type=1326 audit(1727060398.902:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 80.482113][ T5239] vlan2: left allmulticast mode [ 80.502255][ T5249] lo speed is unknown, defaulting to 1000 [ 80.502693][ T46] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 80.678338][ T4854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.881242][ T5263] lo speed is unknown, defaulting to 1000 [ 81.204112][ T5276] loop3: detected capacity change from 0 to 128 [ 81.251474][ T5279] loop0: detected capacity change from 0 to 128 [ 81.519939][ T5292] loop2: detected capacity change from 0 to 164 [ 81.541393][ T5292] Unable to read rock-ridge attributes [ 81.556743][ T5294] FAULT_INJECTION: forcing a failure. [ 81.556743][ T5294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.569885][ T5294] CPU: 1 UID: 0 PID: 5294 Comm: syz.3.560 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 81.580291][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.590375][ T5294] Call Trace: [ 81.593667][ T5294] [ 81.596721][ T5294] dump_stack_lvl+0xf2/0x150 [ 81.601330][ T5294] dump_stack+0x15/0x20 [ 81.605590][ T5294] should_fail_ex+0x223/0x230 [ 81.610436][ T5294] should_fail+0xb/0x10 [ 81.614603][ T5294] should_fail_usercopy+0x1a/0x20 [ 81.619774][ T5294] _copy_from_user+0x1e/0xd0 [ 81.624370][ T5294] copy_msghdr_from_user+0x54/0x2a0 [ 81.629622][ T5294] __sys_sendmsg+0x171/0x270 [ 81.634319][ T5294] __x64_sys_sendmsg+0x46/0x50 [ 81.639085][ T5294] x64_sys_call+0x2689/0x2d60 [ 81.643885][ T5294] do_syscall_64+0xc9/0x1c0 [ 81.648400][ T5294] ? clear_bhb_loop+0x55/0xb0 [ 81.653128][ T5294] ? clear_bhb_loop+0x55/0xb0 [ 81.657858][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.663787][ T5294] RIP: 0033:0x7f580e4ddef9 [ 81.668260][ T5294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.687864][ T5294] RSP: 002b:00007f580d157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.696310][ T5294] RAX: ffffffffffffffda RBX: 00007f580e695f80 RCX: 00007f580e4ddef9 [ 81.704278][ T5294] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 81.712351][ T5294] RBP: 00007f580d157090 R08: 0000000000000000 R09: 0000000000000000 [ 81.720319][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.728344][ T5294] R13: 0000000000000000 R14: 00007f580e695f80 R15: 00007fffbf8c5d58 [ 81.736330][ T5294] [ 81.753986][ T5296] bridge0: port 3(vlan2) entered blocking state [ 81.760426][ T5296] bridge0: port 3(vlan2) entered disabled state [ 81.769942][ T5296] vlan2: entered allmulticast mode [ 81.776985][ T5296] vlan2: left allmulticast mode [ 81.785123][ T5298] loop3: detected capacity change from 0 to 512 [ 81.792472][ T5298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.805217][ T5298] EXT4-fs (loop3): 1 orphan inode deleted [ 81.811006][ T5298] EXT4-fs (loop3): 1 truncate cleaned up [ 81.817545][ T5298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.873791][ T5298] lo speed is unknown, defaulting to 1000 [ 81.901193][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 81.941747][ T5310] loop2: detected capacity change from 0 to 512 [ 81.950722][ T5310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.961696][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.972289][ T5310] EXT4-fs (loop2): 1 orphan inode deleted [ 81.978083][ T5310] EXT4-fs (loop2): 1 truncate cleaned up [ 81.986351][ T5310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.992736][ T5313] siw: device registration error -23 [ 82.039635][ T5310] lo speed is unknown, defaulting to 1000 [ 82.107441][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.164636][ T5320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 82.272592][ T5324] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.420500][ T5337] lo speed is unknown, defaulting to 1000 [ 82.547766][ T5342] Driver unsupported XDP return value 0 on prog (id 502) dev N/A, expect packet loss! [ 82.742818][ T5351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 82.852995][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 82.877950][ T5357] program syz.3.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.917806][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.989660][ T5366] loop3: detected capacity change from 0 to 512 [ 82.997176][ T5366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.023548][ T5366] EXT4-fs (loop3): 1 orphan inode deleted [ 83.029527][ T5366] EXT4-fs (loop3): 1 truncate cleaned up [ 83.031691][ T5371] bridge0: port 3(vlan2) entered blocking state [ 83.036106][ T5366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.041448][ T5371] bridge0: port 3(vlan2) entered disabled state [ 83.073219][ T5371] vlan2: entered allmulticast mode [ 83.079104][ T5371] vlan2: left allmulticast mode [ 83.090897][ T5366] lo speed is unknown, defaulting to 1000 [ 83.107120][ T5377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.141150][ T5379] FAULT_INJECTION: forcing a failure. [ 83.141150][ T5379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.154584][ T5379] CPU: 0 UID: 0 PID: 5379 Comm: syz.4.592 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 83.164841][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.174949][ T5379] Call Trace: [ 83.178305][ T5379] [ 83.181241][ T5379] dump_stack_lvl+0xf2/0x150 [ 83.185848][ T5379] dump_stack+0x15/0x20 [ 83.190085][ T5379] should_fail_ex+0x223/0x230 [ 83.194770][ T5379] should_fail+0xb/0x10 [ 83.198960][ T5379] should_fail_usercopy+0x1a/0x20 [ 83.204031][ T5379] _copy_from_user+0x1e/0xd0 [ 83.208624][ T5379] copy_msghdr_from_user+0x54/0x2a0 [ 83.213859][ T5379] __sys_sendmmsg+0x21e/0x500 [ 83.218564][ T5379] __x64_sys_sendmmsg+0x57/0x70 [ 83.223421][ T5379] x64_sys_call+0xa49/0x2d60 [ 83.228017][ T5379] do_syscall_64+0xc9/0x1c0 [ 83.232612][ T5379] ? clear_bhb_loop+0x55/0xb0 [ 83.237366][ T5379] ? clear_bhb_loop+0x55/0xb0 [ 83.242080][ T5379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.247993][ T5379] RIP: 0033:0x7ff99a00def9 [ 83.252414][ T5379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.272057][ T5379] RSP: 002b:00007ff998c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.280586][ T5379] RAX: ffffffffffffffda RBX: 00007ff99a1c5f80 RCX: 00007ff99a00def9 [ 83.288563][ T5379] RDX: 03ffffffffffff06 RSI: 00000000200038c0 RDI: 0000000000000003 [ 83.296603][ T5379] RBP: 00007ff998c81090 R08: 0000000000000000 R09: 0000000000000000 [ 83.304595][ T5379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.312633][ T5379] R13: 0000000000000000 R14: 00007ff99a1c5f80 R15: 00007ffcc8466a68 [ 83.320619][ T5379] [ 83.364365][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 83.367130][ T5386] loop0: detected capacity change from 0 to 512 [ 83.383224][ T5386] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.395033][ T5386] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 83.431981][ T5386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 83.455362][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.458523][ T5386] System zones: 1-12 [ 83.471640][ T5386] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.595: corrupted in-inode xattr: e_value size too large [ 83.481510][ T5396] loop4: detected capacity change from 0 to 2048 [ 83.487047][ T5386] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.595: couldn't read orphan inode 15 (err -117) [ 83.495961][ T5396] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 83.504417][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.599208][ T5386] netlink: 9 bytes leftover after parsing attributes in process `syz.0.595'. [ 83.621287][ T5386] gretap0: entered promiscuous mode [ 83.768177][ T5409] FAULT_INJECTION: forcing a failure. [ 83.768177][ T5409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.781334][ T5409] CPU: 1 UID: 0 PID: 5409 Comm: syz.1.604 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 83.791593][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.801657][ T5409] Call Trace: [ 83.805024][ T5409] [ 83.807966][ T5409] dump_stack_lvl+0xf2/0x150 [ 83.812601][ T5409] dump_stack+0x15/0x20 [ 83.816870][ T5409] should_fail_ex+0x223/0x230 [ 83.821662][ T5409] should_fail+0xb/0x10 [ 83.825858][ T5409] should_fail_usercopy+0x1a/0x20 [ 83.830979][ T5409] _copy_to_user+0x1e/0xa0 [ 83.835513][ T5409] sctp_getsockopt_encap_port+0x302/0x390 [ 83.841270][ T5409] sctp_getsockopt+0xa86/0xab0 [ 83.846055][ T5409] sock_common_getsockopt+0x5b/0x70 [ 83.851366][ T5409] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 83.857365][ T5409] do_sock_getsockopt+0x1ca/0x260 [ 83.862420][ T5409] __sys_getsockopt+0x18e/0x200 [ 83.867299][ T5409] __x64_sys_getsockopt+0x66/0x80 [ 83.872387][ T5409] x64_sys_call+0x11cd/0x2d60 [ 83.877089][ T5409] do_syscall_64+0xc9/0x1c0 [ 83.882070][ T5409] ? clear_bhb_loop+0x55/0xb0 [ 83.886943][ T5409] ? clear_bhb_loop+0x55/0xb0 [ 83.891652][ T5409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.897563][ T5409] RIP: 0033:0x7f96509edef9 [ 83.901993][ T5409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.921708][ T5409] RSP: 002b:00007f964f661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 83.930241][ T5409] RAX: ffffffffffffffda RBX: 00007f9650ba5f80 RCX: 00007f96509edef9 [ 83.938244][ T5409] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000004 [ 83.946856][ T5409] RBP: 00007f964f661090 R08: 0000000020000100 R09: 0000000000000000 [ 83.954931][ T5409] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.963050][ T5409] R13: 0000000000000000 R14: 00007f9650ba5f80 R15: 00007ffcf24f3b78 [ 83.971049][ T5409] [ 83.986309][ T5410] lo speed is unknown, defaulting to 1000 [ 84.293365][ T5425] lo speed is unknown, defaulting to 1000 [ 84.386820][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 84.436415][ T5434] FAULT_INJECTION: forcing a failure. [ 84.436415][ T5434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.449570][ T5434] CPU: 0 UID: 0 PID: 5434 Comm: syz.2.609 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 84.459820][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.469886][ T5434] Call Trace: [ 84.473177][ T5434] [ 84.476128][ T5434] dump_stack_lvl+0xf2/0x150 [ 84.480772][ T5434] dump_stack+0x15/0x20 [ 84.484951][ T5434] should_fail_ex+0x223/0x230 [ 84.489742][ T5434] should_fail+0xb/0x10 [ 84.493910][ T5434] should_fail_usercopy+0x1a/0x20 [ 84.498956][ T5434] _copy_to_user+0x1e/0xa0 [ 84.503468][ T5434] sctp_getsockopt_encap_port+0x302/0x390 [ 84.509259][ T5434] sctp_getsockopt+0xa86/0xab0 [ 84.514034][ T5434] sock_common_getsockopt+0x5b/0x70 [ 84.519300][ T5434] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 84.525220][ T5434] do_sock_getsockopt+0x1ca/0x260 [ 84.530259][ T5434] __sys_getsockopt+0x18e/0x200 [ 84.535146][ T5434] __x64_sys_getsockopt+0x66/0x80 [ 84.540198][ T5434] x64_sys_call+0x11cd/0x2d60 [ 84.544938][ T5434] do_syscall_64+0xc9/0x1c0 [ 84.549466][ T5434] ? clear_bhb_loop+0x55/0xb0 [ 84.554215][ T5434] ? clear_bhb_loop+0x55/0xb0 [ 84.558901][ T5434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.564801][ T5434] RIP: 0033:0x7f9167e2def9 [ 84.569290][ T5434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.588959][ T5434] RSP: 002b:00007f9166aa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.597440][ T5434] RAX: ffffffffffffffda RBX: 00007f9167fe5f80 RCX: 00007f9167e2def9 [ 84.605415][ T5434] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000004 [ 84.613424][ T5434] RBP: 00007f9166aa1090 R08: 0000000020000100 R09: 0000000000000000 [ 84.621466][ T5434] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.629505][ T5434] R13: 0000000000000000 R14: 00007f9167fe5f80 R15: 00007ffcedb08b48 [ 84.637579][ T5434] [ 84.695370][ T5438] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.696909][ T5441] loop4: detected capacity change from 0 to 164 [ 84.706920][ T5442] netlink: 6 bytes leftover after parsing attributes in process `syz.1.613'. [ 84.722581][ T5441] Unable to read rock-ridge attributes [ 84.803183][ T5448] FAULT_INJECTION: forcing a failure. [ 84.803183][ T5448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.816348][ T5448] CPU: 0 UID: 0 PID: 5448 Comm: syz.1.615 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 84.826619][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.836748][ T5448] Call Trace: [ 84.840072][ T5448] [ 84.843017][ T5448] dump_stack_lvl+0xf2/0x150 [ 84.847715][ T5448] dump_stack+0x15/0x20 [ 84.851975][ T5448] should_fail_ex+0x223/0x230 [ 84.856716][ T5448] should_fail+0xb/0x10 [ 84.861059][ T5448] should_fail_usercopy+0x1a/0x20 [ 84.866167][ T5448] _copy_from_user+0x1e/0xd0 [ 84.870784][ T5448] copy_msghdr_from_user+0x54/0x2a0 [ 84.876008][ T5448] __sys_sendmsg+0x171/0x270 [ 84.880630][ T5448] __x64_sys_sendmsg+0x46/0x50 [ 84.885428][ T5448] x64_sys_call+0x2689/0x2d60 [ 84.890154][ T5448] do_syscall_64+0xc9/0x1c0 [ 84.894686][ T5448] ? clear_bhb_loop+0x55/0xb0 [ 84.899382][ T5448] ? clear_bhb_loop+0x55/0xb0 [ 84.904175][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.910093][ T5448] RIP: 0033:0x7f96509edef9 [ 84.914585][ T5448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.934275][ T5448] RSP: 002b:00007f964f661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.942719][ T5448] RAX: ffffffffffffffda RBX: 00007f9650ba5f80 RCX: 00007f96509edef9 [ 84.950721][ T5448] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 84.958748][ T5448] RBP: 00007f964f661090 R08: 0000000000000000 R09: 0000000000000000 [ 84.966767][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.974804][ T5448] R13: 0000000000000000 R14: 00007f9650ba5f80 R15: 00007ffcf24f3b78 [ 84.982806][ T5448] [ 85.044104][ T5466] program syz.2.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.070432][ T5456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61455 sclass=netlink_route_socket pid=5456 comm=syz.4.618 [ 85.107554][ T5472] loop3: detected capacity change from 0 to 256 [ 85.130186][ T5468] bridge0: port 3(vlan2) entered blocking state [ 85.136703][ T5468] bridge0: port 3(vlan2) entered disabled state [ 85.143383][ T5468] vlan2: entered allmulticast mode [ 85.150890][ T5468] vlan2: left allmulticast mode [ 85.194087][ T5479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 85.230219][ T5480] capability: warning: `syz.4.618' uses deprecated v2 capabilities in a way that may be insecure [ 85.256649][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 85.256666][ T29] audit: type=1326 audit(1727060403.952:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.295073][ T29] audit: type=1326 audit(1727060403.952:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.318650][ T29] audit: type=1326 audit(1727060403.982:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.318691][ T29] audit: type=1326 audit(1727060403.982:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.365458][ T29] audit: type=1326 audit(1727060403.982:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.389004][ T29] audit: type=1326 audit(1727060404.042:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.412461][ T29] audit: type=1326 audit(1727060404.042:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.435901][ T29] audit: type=1326 audit(1727060404.042:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.459510][ T29] audit: type=1326 audit(1727060404.042:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.482938][ T29] audit: type=1326 audit(1727060404.042:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 85.516916][ T5427] coredump: 387(syz.4.607): written to core: VMAs: 29, size 89030656; core: 60134062 bytes, pos 89038848 [ 85.524182][ T5484] loop2: detected capacity change from 0 to 512 [ 85.547383][ T5484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.559029][ T5484] EXT4-fs (loop2): 1 orphan inode deleted [ 85.564776][ T5484] EXT4-fs (loop2): 1 truncate cleaned up [ 85.572726][ T5484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.618468][ T5484] lo speed is unknown, defaulting to 1000 [ 85.673933][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.704630][ T5503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.635'. [ 85.720459][ T5503] program syz.2.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.801664][ T5507] syz.2.637[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.801823][ T5507] syz.2.637[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.816355][ T5507] syz.2.637[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.855276][ T5511] syz.2.639[5511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.866967][ T5511] syz.2.639[5511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.878782][ T5511] syz.2.639[5511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.894430][ T5515] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 85.912810][ T5515] dvmrp1: linktype set to 805 [ 85.988231][ T5523] bridge0: port 3(vlan2) entered blocking state [ 85.994518][ T5523] bridge0: port 3(vlan2) entered disabled state [ 86.001109][ T5523] vlan2: entered allmulticast mode [ 86.006786][ T5523] vlan2: left allmulticast mode [ 86.067436][ T5530] syz.2.649[5530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.067496][ T5530] syz.2.649[5530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.079567][ T5530] syz.2.649[5530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.081093][ T5532] loop4: detected capacity change from 0 to 164 [ 86.110652][ T5532] Unable to read rock-ridge attributes [ 86.139083][ T5534] loop4: detected capacity change from 0 to 256 [ 86.195679][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 86.293979][ T5562] loop2: detected capacity change from 0 to 512 [ 86.306972][ T5562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.319893][ T5562] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.343921][ T5568] syz.4.662[5568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.353196][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.377501][ T5570] loop4: detected capacity change from 0 to 256 [ 86.396734][ T4854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.412830][ T5572] program syz.3.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.458447][ T5576] loop2: detected capacity change from 0 to 164 [ 86.489774][ T5576] Unable to read rock-ridge attributes [ 86.507184][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 86.557612][ T5592] loop2: detected capacity change from 0 to 512 [ 86.563698][ T5594] loop0: detected capacity change from 0 to 136 [ 86.598259][ T5600] loop3: detected capacity change from 0 to 512 [ 86.606154][ T5600] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.613905][ T5592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.627925][ T5592] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.643967][ T5600] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 86.648731][ T5604] loop4: detected capacity change from 0 to 512 [ 86.656873][ T5600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 86.666778][ T5600] System zones: 1-12 [ 86.670900][ T5600] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.676: corrupted in-inode xattr: e_value size too large [ 86.685584][ T5604] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.692078][ T5600] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.676: couldn't read orphan inode 15 (err -117) [ 86.704338][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.708501][ T5604] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 86.722177][ T5600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.764688][ T5600] netlink: 9 bytes leftover after parsing attributes in process `syz.3.676'. [ 86.797387][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.817693][ T5613] bridge0: port 3(vlan2) entered blocking state [ 86.824014][ T5613] bridge0: port 3(vlan2) entered disabled state [ 86.831867][ T5604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 86.843712][ T5604] System zones: 1-12 [ 86.853856][ T5604] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.678: corrupted in-inode xattr: e_value size too large [ 86.873873][ T5613] vlan2: entered allmulticast mode [ 86.881995][ T5613] vlan2: left allmulticast mode [ 86.889796][ T5604] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.678: couldn't read orphan inode 15 (err -117) [ 86.916714][ T5604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.972213][ T5632] loop0: detected capacity change from 0 to 512 [ 87.011569][ T5604] __nla_validate_parse: 1 callbacks suppressed [ 87.011594][ T5604] netlink: 9 bytes leftover after parsing attributes in process `syz.4.678'. [ 87.062919][ T5641] loop3: detected capacity change from 0 to 512 [ 87.069810][ T5641] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.079667][ T5641] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 87.089097][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.104486][ T5641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 87.112601][ T5641] System zones: 1-12 [ 87.118428][ T5632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.131491][ T5641] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.694: corrupted in-inode xattr: e_value size too large [ 87.146446][ T5632] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.158407][ T5641] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.694: couldn't read orphan inode 15 (err -117) [ 87.182057][ T5641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.194778][ T4854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.218728][ T5653] siw: device registration error -23 [ 87.248206][ T5641] netlink: 9 bytes leftover after parsing attributes in process `syz.3.694'. [ 87.393291][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 87.473709][ T5680] siw: device registration error -23 [ 88.075201][ T5714] program syz.4.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.160145][ T5730] siw: device registration error -23 [ 88.335474][ T5746] program syz.0.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.414363][ T5754] program syz.0.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.688278][ T5764] lo speed is unknown, defaulting to 1000 [ 89.170908][ T5779] program syz.2.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.232193][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 89.302841][ T5787] loop4: detected capacity change from 0 to 128 [ 89.436837][ T5796] siw: device registration error -23 [ 90.084646][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.120149][ T5816] program syz.3.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.361904][ T5825] loop2: detected capacity change from 0 to 512 [ 90.385170][ T5826] lo speed is unknown, defaulting to 1000 [ 90.479432][ T29] kauditd_printk_skb: 757 callbacks suppressed [ 90.479449][ T29] audit: type=1326 audit(1727060409.172:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.549793][ T5825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.649788][ T5825] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.681480][ T29] audit: type=1326 audit(1727060409.212:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.704968][ T29] audit: type=1326 audit(1727060409.212:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.728551][ T29] audit: type=1326 audit(1727060409.212:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.752000][ T29] audit: type=1326 audit(1727060409.212:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.775329][ T29] audit: type=1326 audit(1727060409.212:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.798646][ T29] audit: type=1326 audit(1727060409.212:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.822022][ T29] audit: type=1326 audit(1727060409.212:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.846110][ T29] audit: type=1326 audit(1727060409.212:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.870620][ T29] audit: type=1326 audit(1727060409.212:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 90.904312][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.962387][ T5843] loop4: detected capacity change from 0 to 512 [ 90.983798][ T5843] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.983854][ T5846] bpf_get_probe_write_proto: 53 callbacks suppressed [ 90.983867][ T5846] syz.2.765[5846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.006973][ T5843] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 91.053777][ T5846] syz.2.765[5846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.053852][ T5846] syz.2.765[5846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.068797][ T5850] syz.1.769[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.081476][ T5843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 91.101120][ T5850] syz.1.769[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.101151][ T5843] System zones: 1-12 [ 91.101225][ T5850] syz.1.769[5850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.112409][ T5843] [ 91.154164][ T5843] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.768: corrupted in-inode xattr: e_value size too large [ 91.194377][ T5863] syz.1.775[5863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.194442][ T5863] syz.1.775[5863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.199037][ T5843] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.768: couldn't read orphan inode 15 (err -117) [ 91.209530][ T5863] syz.1.775[5863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.219345][ T5843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.326676][ T5843] netlink: 9 bytes leftover after parsing attributes in process `syz.4.768'. [ 91.478017][ T5881] lo speed is unknown, defaulting to 1000 [ 91.583157][ T5883] lo speed is unknown, defaulting to 1000 [ 92.022178][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 92.093366][ T5894] syz.0.783[5894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.106744][ T5891] bridge0: port 3(vlan2) entered blocking state [ 92.124433][ T5891] bridge0: port 3(vlan2) entered disabled state [ 92.141423][ T5891] vlan2: entered allmulticast mode [ 92.148544][ T5891] vlan2: left allmulticast mode [ 92.159959][ T5898] loop0: detected capacity change from 0 to 164 [ 92.167243][ T5898] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 92.176721][ T5898] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 92.318957][ T5915] loop0: detected capacity change from 0 to 512 [ 92.327225][ T5916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=5916 comm=syz.3.793 [ 92.350973][ T5915] EXT4-fs error (device loop0): __ext4_iget:4952: inode #11: block 16: comm syz.0.792: invalid block [ 92.382949][ T5915] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.792: couldn't read orphan inode 11 (err -117) [ 92.398320][ T5915] EXT4-fs (loop0): 1 truncate cleaned up [ 92.409053][ T5915] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 92.490000][ T5926] loop0: detected capacity change from 0 to 2048 [ 92.515094][ T5926] EXT4-fs: Ignoring removed orlov option [ 92.521186][ T5926] EXT4-fs (loop0): can't enable nombcache during remount [ 92.602283][ T5931] bridge0: port 3(vlan2) entered blocking state [ 92.608621][ T5931] bridge0: port 3(vlan2) entered disabled state [ 92.616309][ T5931] vlan2: entered allmulticast mode [ 92.621972][ T5931] vlan2: left allmulticast mode [ 93.127815][ T5944] FAULT_INJECTION: forcing a failure. [ 93.127815][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 93.140631][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.2.802 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 93.150956][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.161058][ T5944] Call Trace: [ 93.164347][ T5944] [ 93.167292][ T5944] dump_stack_lvl+0xf2/0x150 [ 93.171945][ T5944] dump_stack+0x15/0x20 [ 93.176164][ T5944] should_fail_ex+0x223/0x230 [ 93.180936][ T5944] ? skb_clone+0x154/0x1f0 [ 93.185387][ T5944] should_failslab+0x8f/0xb0 [ 93.190042][ T5944] kmem_cache_alloc_noprof+0x4c/0x290 [ 93.195482][ T5944] skb_clone+0x154/0x1f0 [ 93.199846][ T5944] dev_queue_xmit_nit+0x149/0x620 [ 93.204930][ T5944] dev_hard_start_xmit+0xcc/0x3f0 [ 93.210012][ T5944] ? validate_xmit_skb+0x658/0x8d0 [ 93.215418][ T5944] __dev_queue_xmit+0xfe6/0x1fe0 [ 93.220383][ T5944] ? __dev_queue_xmit+0x161/0x1fe0 [ 93.225518][ T5944] ? should_fail_ex+0xd7/0x230 [ 93.230312][ T5944] ? __skb_clone+0x2d0/0x2f0 [ 93.234923][ T5944] __netlink_deliver_tap+0x39f/0x4c0 [ 93.240252][ T5944] netlink_unicast+0x64a/0x670 [ 93.245125][ T5944] netlink_sendmsg+0x5cc/0x6e0 [ 93.249906][ T5944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.255304][ T5944] __sock_sendmsg+0x140/0x180 [ 93.260039][ T5944] ____sys_sendmsg+0x312/0x410 [ 93.264817][ T5944] __sys_sendmsg+0x1dd/0x270 [ 93.269435][ T5944] __x64_sys_sendmsg+0x46/0x50 [ 93.274231][ T5944] x64_sys_call+0x2689/0x2d60 [ 93.278916][ T5944] do_syscall_64+0xc9/0x1c0 [ 93.283446][ T5944] ? clear_bhb_loop+0x55/0xb0 [ 93.288198][ T5944] ? clear_bhb_loop+0x55/0xb0 [ 93.293009][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.299210][ T5944] RIP: 0033:0x7f9167e2def9 [ 93.303886][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.323502][ T5944] RSP: 002b:00007f9166aa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.331926][ T5944] RAX: ffffffffffffffda RBX: 00007f9167fe5f80 RCX: 00007f9167e2def9 [ 93.339966][ T5944] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 93.348049][ T5944] RBP: 00007f9166aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 93.356057][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.364087][ T5944] R13: 0000000000000000 R14: 00007f9167fe5f80 R15: 00007ffcedb08b48 [ 93.372084][ T5944] [ 93.393710][ T5945] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 93.491270][ T5958] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.619609][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 93.666985][ T5967] program syz.1.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.735380][ T5977] loop2: detected capacity change from 0 to 512 [ 93.767803][ T5977] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.802684][ T5982] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.950396][ T5998] FAULT_INJECTION: forcing a failure. [ 93.950396][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.963587][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.1.822 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 93.973860][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.984029][ T5998] Call Trace: [ 93.987326][ T5998] [ 93.990262][ T5998] dump_stack_lvl+0xf2/0x150 [ 93.994940][ T5998] dump_stack+0x15/0x20 [ 93.999188][ T5998] should_fail_ex+0x223/0x230 [ 94.003969][ T5998] should_fail+0xb/0x10 [ 94.008224][ T5998] should_fail_usercopy+0x1a/0x20 [ 94.013294][ T5998] _copy_to_user+0x1e/0xa0 [ 94.017740][ T5998] simple_read_from_buffer+0xa0/0x110 [ 94.023176][ T5998] proc_fail_nth_read+0xf9/0x140 [ 94.028212][ T5998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.033792][ T5998] vfs_read+0x195/0x720 [ 94.038006][ T5998] ? __rcu_read_unlock+0x4e/0x70 [ 94.042982][ T5998] ? __fget_files+0x1d4/0x210 [ 94.047727][ T5998] ksys_read+0xeb/0x1b0 [ 94.051975][ T5998] __x64_sys_read+0x42/0x50 [ 94.056494][ T5998] x64_sys_call+0x27d3/0x2d60 [ 94.061182][ T5998] do_syscall_64+0xc9/0x1c0 [ 94.065790][ T5998] ? clear_bhb_loop+0x55/0xb0 [ 94.070492][ T5998] ? clear_bhb_loop+0x55/0xb0 [ 94.075186][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.081084][ T5998] RIP: 0033:0x7f96509ec93c [ 94.085498][ T5998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 94.105145][ T5998] RSP: 002b:00007f964f661030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.113560][ T5998] RAX: ffffffffffffffda RBX: 00007f9650ba5f80 RCX: 00007f96509ec93c [ 94.121547][ T5998] RDX: 000000000000000f RSI: 00007f964f6610a0 RDI: 0000000000000007 [ 94.129639][ T5998] RBP: 00007f964f661090 R08: 0000000000000000 R09: 0000000000000000 [ 94.137645][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.145625][ T5998] R13: 0000000000000000 R14: 00007f9650ba5f80 R15: 00007ffcf24f3b78 [ 94.153692][ T5998] [ 94.233625][ T6007] loop2: detected capacity change from 0 to 512 [ 94.259900][ T6007] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.302329][ T6023] Dead loop on virtual device ip6_vti0, fix it urgently! [ 94.535685][ T6046] loop4: detected capacity change from 0 to 512 [ 94.543321][ T6046] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.574002][ T6046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 94.590065][ T6046] EXT4-fs (loop4): 1 truncate cleaned up [ 94.749864][ T6061] lo speed is unknown, defaulting to 1000 [ 94.776654][ T6066] loop4: detected capacity change from 0 to 512 [ 94.795677][ T6066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.835648][ T6066] EXT4-fs (loop4): 1 orphan inode deleted [ 94.841493][ T6066] EXT4-fs (loop4): 1 truncate cleaned up [ 94.883276][ T6066] lo speed is unknown, defaulting to 1000 [ 94.934942][ T6072] Dead loop on virtual device ip6_vti0, fix it urgently! [ 94.992344][ T6074] 9pnet_fd: Insufficient options for proto=fd [ 95.138663][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 95.194789][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 95.248853][ T6091] loop2: detected capacity change from 0 to 136 [ 95.280224][ T6102] 9pnet_fd: Insufficient options for proto=fd [ 95.335567][ T6107] Dead loop on virtual device ip6_vti0, fix it urgently! [ 95.340513][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 95.351574][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 95.364871][ T6109] netlink: 'syz.3.860': attribute type 10 has an invalid length. [ 95.377730][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.385465][ T6112] loop4: detected capacity change from 0 to 164 [ 95.399100][ T6112] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 95.408083][ T6112] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 95.424500][ T6114] FAULT_INJECTION: forcing a failure. [ 95.424500][ T6114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.437777][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.2.862 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 95.448166][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 95.458260][ T6114] Call Trace: [ 95.461566][ T6114] [ 95.464551][ T6114] dump_stack_lvl+0xf2/0x150 [ 95.469222][ T6114] dump_stack+0x15/0x20 [ 95.473389][ T6114] should_fail_ex+0x223/0x230 [ 95.478072][ T6114] should_fail+0xb/0x10 [ 95.482289][ T6114] should_fail_usercopy+0x1a/0x20 [ 95.487400][ T6114] _copy_from_user+0x1e/0xd0 [ 95.492083][ T6114] copy_msghdr_from_user+0x54/0x2a0 [ 95.497331][ T6114] __sys_sendmsg+0x171/0x270 [ 95.501997][ T6114] __x64_sys_sendmsg+0x46/0x50 [ 95.506852][ T6114] x64_sys_call+0x2689/0x2d60 [ 95.511535][ T6114] do_syscall_64+0xc9/0x1c0 [ 95.516065][ T6114] ? clear_bhb_loop+0x55/0xb0 [ 95.520854][ T6114] ? clear_bhb_loop+0x55/0xb0 [ 95.525531][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.531461][ T6114] RIP: 0033:0x7f9167e2def9 [ 95.535874][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.555591][ T6114] RSP: 002b:00007f9166aa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.564131][ T6114] RAX: ffffffffffffffda RBX: 00007f9167fe5f80 RCX: 00007f9167e2def9 [ 95.572109][ T6114] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 95.580092][ T6114] RBP: 00007f9166aa1090 R08: 0000000000000000 R09: 0000000000000000 [ 95.588056][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.596070][ T6114] R13: 0000000000000000 R14: 00007f9167fe5f80 R15: 00007ffcedb08b48 [ 95.604607][ T6114] [ 95.712801][ T6130] 9pnet_fd: Insufficient options for proto=fd [ 95.749019][ T6133] Dead loop on virtual device ip6_vti0, fix it urgently! [ 95.757447][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 95.757461][ T29] audit: type=1400 audit(1727060414.452:5409): avc: denied { read } for pid=6134 comm="syz.3.871" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.786902][ T29] audit: type=1400 audit(1727060414.452:5410): avc: denied { open } for pid=6134 comm="syz.3.871" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.789896][ T29] audit: type=1400 audit(1727060414.452:5411): avc: denied { ioctl } for pid=6134 comm="syz.3.871" path="/dev/rtc0" dev="devtmpfs" ino=220 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.829472][ T6138] loop4: detected capacity change from 0 to 136 [ 95.837719][ T29] audit: type=1326 audit(1727060414.532:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 95.865217][ T29] audit: type=1326 audit(1727060414.532:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 95.888807][ T29] audit: type=1326 audit(1727060414.542:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 95.912503][ T29] audit: type=1326 audit(1727060414.542:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 95.936231][ T29] audit: type=1326 audit(1727060414.542:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 95.959653][ T29] audit: type=1326 audit(1727060414.542:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 95.983014][ T29] audit: type=1326 audit(1727060414.542:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 96.072727][ T6140] loop4: detected capacity change from 0 to 2048 [ 96.096313][ T6140] EXT4-fs: Ignoring removed orlov option [ 96.102592][ T6140] EXT4-fs (loop4): can't enable nombcache during remount [ 96.105203][ T6145] FAULT_INJECTION: forcing a failure. [ 96.105203][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.122806][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.1.875 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 96.133070][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 96.143232][ T6145] Call Trace: [ 96.146624][ T6145] [ 96.149556][ T6145] dump_stack_lvl+0xf2/0x150 [ 96.154250][ T6145] dump_stack+0x15/0x20 [ 96.158440][ T6145] should_fail_ex+0x223/0x230 [ 96.162125][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 96.163211][ T6145] should_fail+0xb/0x10 [ 96.176163][ T6145] should_fail_usercopy+0x1a/0x20 [ 96.181516][ T6145] _copy_from_user+0x1e/0xd0 [ 96.186161][ T6145] __sys_bpf+0x14e/0x7a0 [ 96.190479][ T6145] __x64_sys_bpf+0x43/0x50 [ 96.194912][ T6145] x64_sys_call+0x2625/0x2d60 [ 96.199669][ T6145] do_syscall_64+0xc9/0x1c0 [ 96.204242][ T6145] ? clear_bhb_loop+0x55/0xb0 [ 96.208981][ T6145] ? clear_bhb_loop+0x55/0xb0 [ 96.213742][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.219740][ T6145] RIP: 0033:0x7f96509edef9 [ 96.224193][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.243848][ T6145] RSP: 002b:00007f964f661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.252338][ T6145] RAX: ffffffffffffffda RBX: 00007f9650ba5f80 RCX: 00007f96509edef9 [ 96.260313][ T6145] RDX: 0000000000000020 RSI: 0000000020000880 RDI: 0000000000000002 [ 96.268340][ T6145] RBP: 00007f964f661090 R08: 0000000000000000 R09: 0000000000000000 [ 96.276310][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.284279][ T6145] R13: 0000000000000000 R14: 00007f9650ba5f80 R15: 00007ffcf24f3b78 [ 96.292607][ T6145] [ 96.356395][ T6155] loop3: detected capacity change from 0 to 128 [ 96.365758][ T6155] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 96.393648][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 96.402867][ T368] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 96.533091][ T6173] program syz.2.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.611872][ T6182] vlan2: entered promiscuous mode [ 96.617062][ T6182] vlan2: entered allmulticast mode [ 96.641520][ T6182] vlan0: entered allmulticast mode [ 96.646799][ T6182] veth0_vlan: entered allmulticast mode [ 96.652437][ T6182] vlan0: entered promiscuous mode [ 96.662380][ T6182] team0: Port device vlan2 added [ 96.668643][ T6186] veth0_vlan: left allmulticast mode [ 96.686589][ T6186] vlan0: left allmulticast mode [ 96.691483][ T6186] vlan0: left promiscuous mode [ 96.698760][ T6185] loop0: detected capacity change from 0 to 2048 [ 96.714780][ T6186] team0: Port device vlan2 removed [ 96.739880][ T6185] EXT4-fs: Ignoring removed orlov option [ 96.746020][ T6185] EXT4-fs (loop0): can't enable nombcache during remount [ 96.790750][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 96.888797][ T6199] loop0: detected capacity change from 0 to 512 [ 96.895710][ T6199] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.902633][ T6199] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 96.912947][ T6199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 96.921120][ T6199] System zones: 1-12 [ 96.926451][ T6199] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.895: corrupted in-inode xattr: e_value size too large [ 96.943055][ T6199] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.895: couldn't read orphan inode 15 (err -117) [ 96.972475][ T6199] EXT4-fs mount: 17 callbacks suppressed [ 96.972489][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.041036][ T6199] netlink: 9 bytes leftover after parsing attributes in process `syz.0.895'. [ 97.068965][ T4854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.167925][ T6209] loop0: detected capacity change from 0 to 164 [ 97.178325][ T6209] Unable to read rock-ridge attributes [ 97.242814][ T6216] loop0: detected capacity change from 0 to 2048 [ 97.296503][ T6216] loop0: p1 < > p4 [ 97.301313][ T6216] loop0: p4 size 8388608 extends beyond EOD, truncated [ 97.386831][ T6221] bpf_get_probe_write_proto: 23 callbacks suppressed [ 97.386852][ T6221] syz.4.901[6221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.392920][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 97.393611][ T6221] syz.4.901[6221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.393679][ T6221] syz.4.901[6221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.407229][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 97.523888][ T6225] syz.4.904[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.524101][ T6225] syz.4.904[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.536620][ T6225] syz.4.904[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.549746][ T6219] af_packet: packet_mmap: vma is busy: 1 [ 97.683040][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 97.717621][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 97.823373][ T6241] lo speed is unknown, defaulting to 1000 [ 97.992108][ T6248] program syz.0.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.326413][ T6269] lo speed is unknown, defaulting to 1000 [ 98.414625][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 98.603875][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 99.028253][ T6319] lo speed is unknown, defaulting to 1000 [ 99.250418][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 99.594135][ T6339] syz.3.940[6339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.594214][ T6339] syz.3.940[6339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.605980][ T6339] syz.3.940[6339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.653275][ T6345] loop3: detected capacity change from 0 to 128 [ 99.753744][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 99.759253][ T6355] syz.4.947[6355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.834427][ T6359] bridge0: port 3(vlan2) entered blocking state [ 99.851984][ T6359] bridge0: port 3(vlan2) entered disabled state [ 99.860862][ T6359] vlan2: entered allmulticast mode [ 99.867166][ T6359] vlan2: left allmulticast mode [ 99.977097][ T6345] syz.3.943: attempt to access beyond end of device [ 99.977097][ T6345] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 100.024790][ T6373] loop4: detected capacity change from 0 to 2048 [ 100.035239][ T6373] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 100.061164][ T11] kworker/u8:0: attempt to access beyond end of device [ 100.061164][ T11] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 100.341545][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 100.426668][ T6400] lo speed is unknown, defaulting to 1000 [ 100.827758][ T6426] loop3: detected capacity change from 0 to 2048 [ 100.841763][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.850425][ T6426] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 100.930744][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 100.930761][ T29] audit: type=1326 audit(1727060419.622:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 100.977358][ T29] audit: type=1326 audit(1727060419.622:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.000856][ T29] audit: type=1326 audit(1727060419.622:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.024184][ T29] audit: type=1326 audit(1727060419.622:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.047600][ T29] audit: type=1326 audit(1727060419.622:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.071069][ T29] audit: type=1326 audit(1727060419.622:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.094475][ T29] audit: type=1326 audit(1727060419.622:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.117860][ T29] audit: type=1326 audit(1727060419.622:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.141289][ T29] audit: type=1326 audit(1727060419.622:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.164714][ T29] audit: type=1326 audit(1727060419.622:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7ff1be6cdef9 code=0x7ffc0000 [ 101.271956][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 101.277302][ T6439] loop4: detected capacity change from 0 to 2048 [ 101.307950][ T6449] program syz.3.981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.345484][ T6439] loop4: p1 < > p4 [ 101.356167][ T6439] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.400033][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 101.412592][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 101.421661][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 101.442664][ T6469] loop2: detected capacity change from 0 to 1024 [ 101.454410][ T6466] Dead loop on virtual device ip6_vti0, fix it urgently! [ 101.460047][ T6464] loop4: detected capacity change from 0 to 2048 [ 101.468927][ T6464] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 101.486431][ T6469] EXT4-fs: Ignoring removed oldalloc option [ 101.558954][ T6469] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 101.648020][ T6491] program syz.0.996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.666984][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.798540][ T6503] loop3: detected capacity change from 0 to 128 [ 101.905643][ T6500] 9pnet_fd: Insufficient options for proto=fd [ 101.953398][ T6512] loop4: detected capacity change from 0 to 2048 [ 101.969163][ T6514] loop0: detected capacity change from 0 to 164 [ 101.986611][ T6514] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 101.996628][ T6514] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.030428][ T6512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.074199][ T6512] EXT4-fs: Ignoring removed orlov option [ 102.098623][ T6522] program syz.0.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.114596][ T6512] EXT4-fs (loop4): can't enable nombcache during remount [ 102.177969][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.275293][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.297610][ T6530] bridge0: port 3(vlan2) entered blocking state [ 102.303911][ T6530] bridge0: port 3(vlan2) entered disabled state [ 102.310970][ T6530] vlan2: entered allmulticast mode [ 102.322847][ T6530] vlan2: left allmulticast mode [ 102.357955][ T6531] loop4: detected capacity change from 0 to 164 [ 102.378114][ T6531] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.394022][ T6531] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.403731][ T6535] bpf_get_probe_write_proto: 14 callbacks suppressed [ 102.403744][ T6535] syz.0.1013[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.429431][ T6533] netlink: 'syz.2.1012': attribute type 4 has an invalid length. [ 102.432995][ T6535] syz.0.1013[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.525264][ T6535] syz.0.1013[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.548792][ T6549] __nla_validate_parse: 2 callbacks suppressed [ 102.548831][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 102.550759][ T6548] program syz.2.1019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.649899][ T6551] loop2: detected capacity change from 0 to 2048 [ 102.662584][ T6556] loop0: detected capacity change from 0 to 1024 [ 102.673800][ T6556] EXT4-fs: Ignoring removed oldalloc option [ 102.680342][ T6556] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.716678][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.730122][ T6551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.769524][ T4854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.773254][ T6551] EXT4-fs: Ignoring removed orlov option [ 102.797227][ T6551] EXT4-fs (loop2): can't enable nombcache during remount [ 102.810844][ T6567] loop4: detected capacity change from 0 to 164 [ 102.819361][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.851323][ T6567] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.860841][ T6567] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 102.905100][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 102.914112][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1029'. [ 102.928666][ T6577] siw: device registration error -23 [ 102.975870][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 103.046588][ T6591] loop4: detected capacity change from 0 to 128 [ 103.077312][ T6591] syz.4.1036: attempt to access beyond end of device [ 103.077312][ T6591] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 103.101607][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.101607][ T50] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 103.139291][ T6600] loop4: detected capacity change from 0 to 2048 [ 103.178811][ T6600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.195299][ T6600] EXT4-fs: Ignoring removed orlov option [ 103.201315][ T6600] EXT4-fs (loop4): can't enable nombcache during remount [ 103.216905][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.277606][ T6607] loop4: detected capacity change from 0 to 136 [ 103.363995][ T6614] loop4: detected capacity change from 0 to 136 [ 103.480393][ T6626] loop4: detected capacity change from 0 to 2048 [ 103.486210][ T6623] loop3: detected capacity change from 0 to 2048 [ 103.493564][ T6623] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 103.515320][ T6626] loop4: p1 < > p4 [ 103.520196][ T6626] loop4: p4 size 8388608 extends beyond EOD, truncated [ 103.532950][ T2966] loop4: p1 < > p4 [ 103.540086][ T2966] loop4: p4 size 8388608 extends beyond EOD, truncated [ 103.562065][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.570345][ T6628] loop4: detected capacity change from 0 to 128 [ 103.579463][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.617022][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.617252][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.660311][ T6628] syz.4.1051: attempt to access beyond end of device [ 103.660311][ T6628] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 103.690896][ T50] kworker/u8:3: attempt to access beyond end of device [ 103.690896][ T50] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 103.742155][ T6637] Dead loop on virtual device ip6_vti0, fix it urgently! [ 103.781335][ T6640] loop0: detected capacity change from 0 to 136 [ 103.970093][ T6653] siw: device registration error -23 [ 104.088823][ T6669] Dead loop on virtual device ip6_vti0, fix it urgently! [ 105.001294][ T6700] siw: device registration error -23 [ 105.194998][ T6704] lo speed is unknown, defaulting to 1000 [ 105.901606][ T6712] loop3: detected capacity change from 0 to 164 [ 105.928388][ T6712] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 105.944903][ T6712] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 106.075072][ T6718] Dead loop on virtual device ip6_vti0, fix it urgently! [ 106.119369][ T6717] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1082'. [ 106.133408][ T6720] FAULT_INJECTION: forcing a failure. [ 106.133408][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 106.146195][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.3.1083 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 106.156580][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.166651][ T6720] Call Trace: [ 106.170026][ T6720] [ 106.172997][ T6720] dump_stack_lvl+0xf2/0x150 [ 106.177712][ T6720] dump_stack+0x15/0x20 [ 106.181905][ T6720] should_fail_ex+0x223/0x230 [ 106.186613][ T6720] ? alloc_pipe_info+0x1cb/0x360 [ 106.191604][ T6720] should_failslab+0x8f/0xb0 [ 106.196212][ T6720] __kmalloc_noprof+0xa5/0x370 [ 106.201042][ T6720] alloc_pipe_info+0x1cb/0x360 [ 106.205818][ T6720] create_pipe_files+0x67/0x3b0 [ 106.210721][ T6720] ? bpf_trace_run2+0x123/0x1d0 [ 106.215614][ T6720] __do_pipe_flags+0x46/0x190 [ 106.220344][ T6720] do_pipe2+0x64/0x130 [ 106.224504][ T6720] ? __bpf_trace_sys_enter+0x9/0x10 [ 106.229892][ T6720] __x64_sys_pipe+0x21/0x30 [ 106.234478][ T6720] x64_sys_call+0xd0/0x2d60 [ 106.239038][ T6720] do_syscall_64+0xc9/0x1c0 [ 106.243570][ T6720] ? clear_bhb_loop+0x55/0xb0 [ 106.248278][ T6720] ? clear_bhb_loop+0x55/0xb0 [ 106.252980][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.258979][ T6720] RIP: 0033:0x7f580e4ddef9 [ 106.263604][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.283240][ T6720] RSP: 002b:00007f580d157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 106.291772][ T6720] RAX: ffffffffffffffda RBX: 00007f580e695f80 RCX: 00007f580e4ddef9 [ 106.299756][ T6720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 106.307822][ T6720] RBP: 00007f580d157090 R08: 0000000000000000 R09: 0000000000000000 [ 106.315935][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.323926][ T6720] R13: 0000000000000000 R14: 00007f580e695f80 R15: 00007fffbf8c5d58 [ 106.331981][ T6720] [ 106.416889][ T6734] loop3: detected capacity change from 0 to 128 [ 106.457342][ T6739] loop2: detected capacity change from 0 to 136 [ 106.467287][ T6734] syz.3.1088: attempt to access beyond end of device [ 106.467287][ T6734] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 106.482900][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 106.482913][ T29] audit: type=1326 audit(1727060425.172:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.513160][ T29] audit: type=1326 audit(1727060425.192:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.538952][ T29] audit: type=1326 audit(1727060425.232:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.539862][ T368] kworker/u8:6: attempt to access beyond end of device [ 106.539862][ T368] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 106.562416][ T29] audit: type=1326 audit(1727060425.232:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.600557][ T29] audit: type=1326 audit(1727060425.272:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.624316][ T29] audit: type=1326 audit(1727060425.272:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.647854][ T29] audit: type=1326 audit(1727060425.272:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.671309][ T29] audit: type=1326 audit(1727060425.272:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.694751][ T29] audit: type=1326 audit(1727060425.272:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.718221][ T29] audit: type=1326 audit(1727060425.272:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6738 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9167e2def9 code=0x7ffc0000 [ 106.809828][ T6753] bridge0: port 3(vlan0) entered blocking state [ 106.816313][ T6753] bridge0: port 3(vlan0) entered disabled state [ 106.822901][ T6753] vlan0: entered allmulticast mode [ 106.828670][ T6753] vlan0: left allmulticast mode [ 106.869892][ T6757] siw: device registration error -23 [ 106.912685][ T6759] loop2: detected capacity change from 0 to 2048 [ 106.921984][ T6759] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 107.316573][ T6775] loop4: detected capacity change from 0 to 136 [ 107.349323][ T6779] loop0: detected capacity change from 0 to 136 [ 107.464842][ T6781] syz.0.1107[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.465559][ T6781] syz.0.1107[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.481091][ T6781] syz.0.1107[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.514059][ T6783] program syz.4.1108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.587790][ T6785] syz.0.1109[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.587854][ T6785] syz.0.1109[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.600697][ T6785] syz.0.1109[6785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.649992][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 107.918411][ T6808] loop0: detected capacity change from 0 to 164 [ 107.929410][ T6808] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 107.938903][ T6808] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 107.977286][ T6810] loop0: detected capacity change from 0 to 136 [ 108.651450][ T6821] loop4: detected capacity change from 0 to 512 [ 108.677290][ T3257] ================================================================== [ 108.685406][ T3257] BUG: KCSAN: data-race in generic_fillattr / shmem_symlink [ 108.692717][ T3257] [ 108.695131][ T3257] write to 0xffff888104a249ac of 4 bytes by task 3436 on cpu 0: [ 108.702775][ T3257] shmem_symlink+0x349/0x3a0 [ 108.707385][ T3257] vfs_symlink+0xca/0x1d0 [ 108.711745][ T3257] do_symlinkat+0xe3/0x350 [ 108.716192][ T3257] __x64_sys_symlink+0x50/0x60 [ 108.720978][ T3257] x64_sys_call+0x2819/0x2d60 [ 108.725667][ T3257] do_syscall_64+0xc9/0x1c0 [ 108.729253][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 108.730183][ T3257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.744924][ T3257] [ 108.747266][ T3257] read to 0xffff888104a249ac of 4 bytes by task 3257 on cpu 1: [ 108.754817][ T3257] generic_fillattr+0x1a6/0x2f0 [ 108.759672][ T3257] shmem_getattr+0x17b/0x200 [ 108.760155][ T6821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.764254][ T3257] vfs_getattr+0x19b/0x1e0 [ 108.776818][ T6821] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.781039][ T3257] vfs_statx+0x134/0x2f0 [ 108.781068][ T3257] vfs_fstatat+0xec/0x110 [ 108.800065][ T3257] __se_sys_newfstatat+0x58/0x260 [ 108.805191][ T3257] __x64_sys_newfstatat+0x55/0x70 [ 108.810219][ T3257] x64_sys_call+0x141f/0x2d60 [ 108.814905][ T3257] do_syscall_64+0xc9/0x1c0 [ 108.819433][ T3257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.825355][ T3257] [ 108.827670][ T3257] value changed: 0x159b9bb6 -> 0x16343236 [ 108.833379][ T3257] [ 108.835716][ T3257] Reported by Kernel Concurrency Sanitizer on: [ 108.841853][ T3257] CPU: 1 UID: 0 PID: 3257 Comm: udevd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 108.851742][ T3257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 108.861798][ T3257] ================================================================== [ 108.873760][ T6821] hsr_slave_0: left promiscuous mode [ 108.879673][ T6821] hsr_slave_1: left promiscuous mode [ 108.929136][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.