last executing test programs: 45.633502974s ago: executing program 3 (id=1185): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 4) 45.360745255s ago: executing program 3 (id=1187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) getresgid(&(0x7f0000003b40), &(0x7f0000003b80), &(0x7f0000003bc0)) 45.305769535s ago: executing program 3 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='signal_generate\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) (fail_nth: 4) 44.781717518s ago: executing program 3 (id=1193): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x16a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x0, @perf_bp={&(0x7f0000000180), 0xb}, 0x110500, 0x32, 0x0, 0xa, 0x4002, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000380)={0x60, 0x1, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2, &(0x7f0000000340)=[{0xfffffffffffffffc, 0x5, 0x2c}], 0x1, 0xac, 0x8, 0x17, 0x11, 0x5}) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x12, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000200f300e6d902000000000000000000000001", [0x0, 0x200]}) r4 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0) fallocate(r4, 0x3, 0x11, 0x2c55) 44.594895359s ago: executing program 3 (id=1200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) getresgid(&(0x7f0000003b40), &(0x7f0000003b80), &(0x7f0000003bc0)) 43.684171033s ago: executing program 3 (id=1218): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) (fail_nth: 3) 43.684035453s ago: executing program 32 (id=1218): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) (fail_nth: 3) 13.367355927s ago: executing program 5 (id=1777): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xc0, 0x19) renameat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000004c0)=r3}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) io_uring_setup(0x67b8, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x2, @local}, 0x10) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="140000000000000001000000", @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f7006d00000024c47f3d0b6ff935"], 0x38}, 0x4001) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYRES8=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000, 0xf1, 0x0, &(0x7f00000005c0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f763f0a1a48278faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f51469d485fc6463d8e51e4727045681ab80e253599429974f66c4cbaa9387f2429f51e160207b6d4a0b419ec1e106fdff3bb97a6a32a2ed21835a1b79fde8926187b586f49b4ab920a9b35d5b925edf43c54f312b752133f463", &(0x7f0000000a00), 0x0, 0x700}, 0x50) sendfile(r5, r5, 0x0, 0xf) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r12) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r4, @ANYBLOB="2e0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000f56200"/28], 0x50) fcntl$notify(r13, 0x402, 0x2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x80000001, 0x11, &(0x7f00000007c0)="fc839d08215139c9834f36a807cc0600de39649555af69546db6ee3c7bd6c3970f8436ac50dbd5549ffa5014c07cf758a0661f719e327feaefb12f0da88779dbb4de01ec21b705769919bab1c5228dde91452107ea7dd7152577480e4eb667eb1000bc0b24a1a7efdfd1cbc94bee17d973286fc19becd8f61ff9bd79792b687e6b63f814e50d2bdecd41d797df775fba407f5ae7b8e75c99761c5452b7583052f729b0094641b38f4630140bfd4c8a3d20c8d1b048"}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 12.959967339s ago: executing program 5 (id=1784): socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd60f7d25500442f000000000000000000000000000000000000000000000000000000ffffac020500080000041b03e80b0100000005000787080022eb0000000124f7d40702000000000000080002101408004a5800000003000000000000000000008c221106b32ebf07fdce7160eccc6f70a7badafcc5da9b1b0216e7ccc25eb5c1d98e283c620a9c354728503bd2bd357bfc542065c6e2932942820b2e173768531d04c061f5d4f2a4862acf7ec6bf09a9689bf82321d28f21"], 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 12.751755909s ago: executing program 5 (id=1790): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x82240, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000020000f0ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3ff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1046, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x3c}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r6, &(0x7f0000001fc0)=""/4086, 0xff6) 12.68874745s ago: executing program 5 (id=1792): capset(&(0x7f0000000140)={0xf1504}, &(0x7f0000000180)={0x81, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x380c8c0, &(0x7f0000000100)={[{@abort}, {@jqfmt_vfsv0}, {@grpquota}]}, 0x0, 0x5f6, &(0x7f0000001440)="$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") recvmsg$unix(r0, 0x0, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970066, &(0x7f0000000000)=ANY=[@ANYBLOB='mode=00']) chdir(&(0x7f0000000000)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 11.957002483s ago: executing program 5 (id=1809): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@usrquota}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x502, &(0x7f0000001180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x1800, r2}) 11.661296705s ago: executing program 5 (id=1815): process_madvise(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) 11.649115645s ago: executing program 33 (id=1815): process_madvise(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) 4.2516421s ago: executing program 1 (id=1967): syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.093154431s ago: executing program 1 (id=1970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x9, 0x4, 0x4b, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8, 0x7, 0x4, 0x6}}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x1b, &(0x7f0000000280)=""/27, 0x41000, 0x8, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0xcfe, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)=[{0x0, 0xa, 0xa, 0x7}, {0x1, 0x2, 0x4, 0x2}, {0x1, 0x1, 0x8, 0x6}, {0x2, 0x5, 0x8, 0xe}, {0x4, 0x3, 0xd}, {0x2, 0x1, 0x5, 0x4}], 0x10, 0x2e, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000040)={[{@abort}, {@norecovery}, {@orlov}, {@nomblk_io_submit}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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") (fail_nth: 15) socket$key(0xf, 0x3, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 3.633023313s ago: executing program 1 (id=1978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) (fail_nth: 10) 3.183650145s ago: executing program 1 (id=1984): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.168450815s ago: executing program 1 (id=1987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) r2 = syz_io_uring_setup(0xf3d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8) name_to_handle_at(r9, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES8=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x80004ac6, 0xa157, 0x0, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 2.779926527s ago: executing program 1 (id=1996): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x0, 0x0, 0x10b8}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lchown(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev, @in=@local}}, {{@in=@dev}, 0x0, @in=@local}}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x303, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2.21502727s ago: executing program 0 (id=2009): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) flock(r2, 0x5) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x18) getpgid(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) removexattr(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x200, 0xfffffffd) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009001fab9d910000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) creat(0x0, 0xd931d3864d39dcca) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x2) 2.047418891s ago: executing program 6 (id=2013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)="c228b42104", &(0x7f00000005c0), 0x9, r0}, 0x38) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 2.03902523s ago: executing program 6 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)="c228b42104", &(0x7f00000005c0), 0x9, r0}, 0x38) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (fail_nth: 1) 1.737760682s ago: executing program 6 (id=2016): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x100000001}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1.467607633s ago: executing program 2 (id=2024): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xdab, 0x321000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000180)={0x5, 0x2}) (async) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r1, 0x0, 0x8, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) (async) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, 0x0, 0x203f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) (async) rt_sigpending(0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r5) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PPPIOCGL2TPSTATS(r7, 0x80047453, &(0x7f0000005280)) (async) ustat(0x70, 0x0) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f005ffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100), 0x9, 0x624, &(0x7f0000000380)="$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") 1.464370253s ago: executing program 2 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000002142894a1f37e7d3991e952ba7083f3f24e1f14077c492114f142f86acf0c25609e852c247c144b9d69b0500d37690dd3dc62ba21574d6f7c21e8757", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x8, 0x6, 0x0, 0x0, 0x1, 0x46031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x1ec41, 0x0, 0x4, 0x8, 0x0, 0xd1, 0xffa7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 1.374871024s ago: executing program 0 (id=2026): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000100)={[{@nouser_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@resuid={'resuid', 0x3d, r1}}, {@grpid}, {@dax_always}]}, 0x1, 0x584, &(0x7f0000009ec0)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0xff, '\x00', r0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x10, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xb2, &(0x7f0000000600)=""/178, 0x40f00, 0x0, '\x00', r0, @fallback=0x3, r3, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x8, 0xfffffff8, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r4, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000001200000a000000d00001800c000280050001000000120014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x8880) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r7, &(0x7f0000000280)='./file1\x00', 0x0) 1.301483284s ago: executing program 0 (id=2027): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000557766b90000000000850000006d00d879b00000180100002020702500000000002020201cac23ee0838"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) open(0x0, 0x81, 0x0) socket(0x10, 0x803, 0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0x1e, 0x4, 0x90, &(0x7f0000000740)}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xb, 0xe, @empty, 0x7fff800}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 898.957196ms ago: executing program 6 (id=2030): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000ef10000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) 767.499716ms ago: executing program 6 (id=2031): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x23f5a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x4c6}]}, 0x40}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r2, 0x20, 0x0, 0x8000) 651.307707ms ago: executing program 6 (id=2035): syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x6ba3, 0x2}, &(0x7f0000000100), &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x5, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x81ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) r7 = getpgid(0x0) syz_clone3(&(0x7f0000000640)={0xcc100a00, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x1e}, &(0x7f0000000580)=""/87, 0x57, &(0x7f0000000cc0)=""/4096, &(0x7f0000000600)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) r9 = gettid() syz_clone3(&(0x7f0000000700)={0x14a00000, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x26}, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=""/198, &(0x7f0000000200)=[r6, r7, r8, 0xffffffffffffffff, r9], 0x5, {r0}}, 0x58) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfffffd9d) sendfile(r10, r11, 0x0, 0x8000002b) 635.757007ms ago: executing program 2 (id=2036): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@mcast2, 0x14, r4}) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="5f4845e454", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="9e1859fe", 0x4}, {&(0x7f0000000280)="ba26d15e554192c83f57a9260fa2fec926891c9385370e653e00cffa3cddec", 0x1f}, {&(0x7f0000000340)="3ebe3cd013bb39d5b8cef7deeac81bddbbb673f5ff370c8190b213bb", 0x1c}], 0x3}}], 0x3, 0xc8000) r5 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x82, 0x10, 0x0, 0x0, 0x20000}) close(r7) recvmmsg(r0, &(0x7f0000007c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 487.198238ms ago: executing program 4 (id=2038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e2a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 486.877448ms ago: executing program 2 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) getresgid(0x0, &(0x7f0000003b80), &(0x7f0000003bc0)) 486.613568ms ago: executing program 4 (id=2040): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x100000001}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 441.444218ms ago: executing program 2 (id=2041): socket$inet6_dccp(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000780), 0x1, 0x54e, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb, 0xb00}}, 0x0) 440.593448ms ago: executing program 4 (id=2042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@null, 0x1, 'gretap0\x00'}) getresuid(&(0x7f00000000c0), &(0x7f0000000200)=0x0, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}, {&(0x7f00000037c0)={0x1204, 0x12, 0x10, 0x70bd27, 0x25dfdbfc, "", [@nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0x113}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x72}]}, @generic="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", @nested={0x4, 0x128}, @generic="d51ef5d86d093b765c3ac103ef63b42b1fd956ab454cd74c1526893f5d848c26986a44c21a4d9c425e3f4c33b696e426982b0438eb66f65af1a768e50c7af5bc62a6d576f0a5a1a622a87730096386d7d197952ec9368350808fcca01bcbad44ce5c747651b299f544ec57481905bd39c3e3428e5f4411f1814d3c298bb345899ad623bc7bb0ea401d4f614a5cddfc282a3354b5ad32ebf6e29271ac32d74fcb43339c8c8e4505f4f3e90c96c9d8", @nested={0x12b, 0x4, 0x0, 0x1, [@nested={0x4, 0x120}, @typed={0xf4, 0x56, 0x0, 0x0, @binary="dde876cececc5f36a26fff7f76ed64d81e1a2d02114f214a3bb8851c2f282152459833e15314342a3c5c69ad24c06893619199c2d0ac147a48a8bef140c71e1f1e5ee8c3192a26bc38a880d8b8e5f68d504a61cb4653b777184fdf42045cf130ba6a05c5bf29411087ed07824583eccf2840fe539d70f55ee363de930f0d09f7985ed007adea803dcdd2469bda2300cde1c5e3435774920be7ad184db3f5c2df235f9c7ea44ddd9794123accea326ed8c6d4c73d5c033562713ed3aa21dbb06f9624e447e82f3d6cbca08d5a2b0dab00a527cdeb0d50f04686f71a03d4337e335887c740edb9c93d7ea0593c03e19fbf"}, @generic="9df46998e630621d125ea95d7a4114fa8a367e7469936e2267251a", @typed={0x8, 0x44, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x6e}, @typed={0x8, 0xe5, 0x0, 0x0, @u32=0x1}]}]}, 0x1204}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) mknodat(0xffffffffffffffff, 0x0, 0x4020, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='YS\x00\x00\x00\x00\x00\x00\x00\bk'], 0x28}}, 0x0) 361.675569ms ago: executing program 0 (id=2043): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) alarm(0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x1000}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x73b, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1fffffffffffff89, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000000}, 0x18) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x6acf, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x169}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001c80)={0x1, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}], 0x0}, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 349.982608ms ago: executing program 0 (id=2044): syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 345.170438ms ago: executing program 4 (id=2045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) modify_ldt$write(0x1, &(0x7f00000012c0)={0x9, 0x20001000, 0x400, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002440)={@val={0x0, 0x86dd}, @val={0x2, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0xe, 0x6, "af8c49", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x4, 0x0, 0x8, 0x1, 0x0, 0x2, 0x66}, @dstopts={0x33, 0x1ea, '\x00', [@pad1, @ra={0x5, 0x2, 0x6a03}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x3, [0xfffffffffffffff5, 0x8, 0x6]}}, @generic={0xc2, 0xf0e, "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"}, @pad1, @pad1]}, @routing={0x84}], @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x2, 0x2, 0x5, 0x0, 0x2, 0x3, 0x5, 0x2, 0x4, 0x1, 0x2, 0x4e24, 0x4e22}, 0x0, 0x1ff}, 0x0, 0x4}}}}}}}, 0xfce) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 338.894689ms ago: executing program 2 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000002142894a1f37e7d3991e952ba7083f3f24e1f14077c492114f142f86acf0c25609e852c247c144b9d69b0500d37690dd3dc62ba21574d6f7c21e8757", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x8, 0x6, 0x0, 0x0, 0x1, 0x46031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x1ec41, 0x0, 0x4, 0x8, 0x0, 0xd1, 0xffa7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 263.546699ms ago: executing program 0 (id=2047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") (rerun: 64) mprotect(&(0x7f0000237000/0x2000)=nil, 0x2000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 131.128909ms ago: executing program 4 (id=2048): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000580)={'nr0\x00', @ifru_data=0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00004095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioperm(0x0, 0x12e, 0x8000000000008) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000851}, 0x50) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16], 0x1, 0x13d, &(0x7f0000000680)="$eJzs2z9LG2EcB/Bf/rRN2yVz6XDQpVNo+wpaSgqlB4WWDDopRJdEBLOcTnkp+gIFdYrTI3om0RAHh+TAfD7LfeF7B89vuDueg9v5eDDoH472r88uo1WrRf17ZDGpRTvqMTUOAOAlmaQUFyml9GYcb08jpVT1igCAVfP+B4DN839r+8+PPO/+y7JWxPm46BW98lj2v37n3S/Znfb8qqui6DVm/deyzx73r+Ldff9taf86Pn8q+9vu5998oX8f/dWPDwAAABuhk001lu7vO/MTFvoyPfg+sLB/b8aH5trGAACeYXR8MtgdDveOBEEQZqHqJxOwavObvuqVAAAAAAAAAAAAAAAAT1nH70RVzwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5rkJAAD//5o9OsM=") r4 = semget$private(0x0, 0x2, 0x704) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x28e7, 0x7, 0x8, 0x61]) 0s ago: executing program 4 (id=2049): r0 = syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x5, 0x0) (fail_nth: 6) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): r (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1376: invalid indirect mapped block 1819239214 (level 1) [ 119.383545][ T7458] EXT4-fs (loop4): 1 truncate cleaned up [ 119.389874][ T7458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.431322][ T7458] tmpfs: Bad value for 'mpol' [ 119.448259][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.544391][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.696653][ T7508] FAULT_INJECTION: forcing a failure. [ 119.696653][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.709846][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.0.1389 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 119.720291][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 119.730443][ T7508] Call Trace: [ 119.733771][ T7508] [ 119.736735][ T7508] dump_stack_lvl+0xf2/0x150 [ 119.741369][ T7508] dump_stack+0x15/0x20 [ 119.745730][ T7508] should_fail_ex+0x223/0x230 [ 119.750661][ T7508] should_fail+0xb/0x10 [ 119.754927][ T7508] should_fail_usercopy+0x1a/0x20 [ 119.760184][ T7508] _copy_from_user+0x1e/0xb0 [ 119.764815][ T7508] generic_map_update_batch+0x379/0x520 [ 119.770568][ T7508] ? __pfx_generic_map_update_batch+0x10/0x10 [ 119.776694][ T7508] bpf_map_do_batch+0x28c/0x3f0 [ 119.781677][ T7508] __sys_bpf+0x2e5/0x7a0 [ 119.786300][ T7508] __x64_sys_bpf+0x43/0x50 [ 119.790751][ T7508] x64_sys_call+0x2914/0x2dc0 [ 119.795563][ T7508] do_syscall_64+0xc9/0x1c0 [ 119.800130][ T7508] ? clear_bhb_loop+0x55/0xb0 [ 119.804870][ T7508] ? clear_bhb_loop+0x55/0xb0 [ 119.809647][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.815586][ T7508] RIP: 0033:0x7fec6d53e819 [ 119.820026][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.839774][ T7508] RSP: 002b:00007fec6bb75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.848226][ T7508] RAX: ffffffffffffffda RBX: 00007fec6d6f6160 RCX: 00007fec6d53e819 [ 119.856500][ T7508] RDX: 0000000000000038 RSI: 0000000020000240 RDI: 000000000000001a [ 119.864924][ T7508] RBP: 00007fec6bb75090 R08: 0000000000000000 R09: 0000000000000000 [ 119.873048][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.881289][ T7508] R13: 0000000000000000 R14: 00007fec6d6f6160 R15: 00007fffe5292908 [ 119.889427][ T7508] [ 119.986739][ T7512] FAULT_INJECTION: forcing a failure. [ 119.986739][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.000040][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.1.1396 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 120.010405][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.020714][ T7512] Call Trace: [ 120.024063][ T7512] [ 120.027007][ T7512] dump_stack_lvl+0xf2/0x150 [ 120.031725][ T7512] dump_stack+0x15/0x20 [ 120.036025][ T7512] should_fail_ex+0x223/0x230 [ 120.040765][ T7512] should_fail+0xb/0x10 [ 120.044967][ T7512] should_fail_usercopy+0x1a/0x20 [ 120.050030][ T7512] _copy_from_user+0x1e/0xb0 [ 120.054661][ T7512] tipc_setsockopt+0x27b/0x660 [ 120.059579][ T7512] ? __pfx_tipc_setsockopt+0x10/0x10 [ 120.065043][ T7512] __sys_setsockopt+0x187/0x200 [ 120.069931][ T7512] __x64_sys_setsockopt+0x66/0x80 [ 120.074989][ T7512] x64_sys_call+0x282e/0x2dc0 [ 120.079712][ T7512] do_syscall_64+0xc9/0x1c0 [ 120.084251][ T7512] ? clear_bhb_loop+0x55/0xb0 [ 120.089000][ T7512] ? clear_bhb_loop+0x55/0xb0 [ 120.093735][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.099815][ T7512] RIP: 0033:0x7f70e62be819 [ 120.104363][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.124351][ T7512] RSP: 002b:00007f70e4937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.132812][ T7512] RAX: ffffffffffffffda RBX: 00007f70e6475fa0 RCX: 00007f70e62be819 [ 120.140887][ T7512] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 120.148873][ T7512] RBP: 00007f70e4937090 R08: 0000000000000010 R09: 0000000000000000 [ 120.156895][ T7512] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 120.164935][ T7512] R13: 0000000000000000 R14: 00007f70e6475fa0 R15: 00007ffd61b6ddf8 [ 120.172934][ T7512] [ 120.255499][ T7527] FAULT_INJECTION: forcing a failure. [ 120.255499][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.269243][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.0.1401 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 120.279688][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.289807][ T7527] Call Trace: [ 120.293119][ T7527] [ 120.296067][ T7527] dump_stack_lvl+0xf2/0x150 [ 120.300881][ T7527] dump_stack+0x15/0x20 [ 120.305095][ T7527] should_fail_ex+0x223/0x230 [ 120.309852][ T7527] should_fail+0xb/0x10 [ 120.314090][ T7527] should_fail_usercopy+0x1a/0x20 [ 120.319197][ T7527] _copy_to_user+0x20/0xa0 [ 120.323700][ T7527] simple_read_from_buffer+0xa0/0x110 [ 120.329238][ T7527] proc_fail_nth_read+0xf9/0x140 [ 120.334267][ T7527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.339923][ T7527] vfs_read+0x1a2/0x700 [ 120.344115][ T7527] ? __rcu_read_unlock+0x4e/0x70 [ 120.349121][ T7527] ? __fget_files+0x17c/0x1c0 [ 120.353917][ T7527] ksys_read+0xe8/0x1b0 [ 120.358207][ T7527] __x64_sys_read+0x42/0x50 [ 120.362755][ T7527] x64_sys_call+0x2874/0x2dc0 [ 120.367550][ T7527] do_syscall_64+0xc9/0x1c0 [ 120.372175][ T7527] ? clear_bhb_loop+0x55/0xb0 [ 120.376883][ T7527] ? clear_bhb_loop+0x55/0xb0 [ 120.381662][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.387697][ T7527] RIP: 0033:0x7fec6d53d25c [ 120.392122][ T7527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 120.411875][ T7527] RSP: 002b:00007fec6bbb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.420493][ T7527] RAX: ffffffffffffffda RBX: 00007fec6d6f5fa0 RCX: 00007fec6d53d25c [ 120.428500][ T7527] RDX: 000000000000000f RSI: 00007fec6bbb70a0 RDI: 0000000000000006 [ 120.436593][ T7527] RBP: 00007fec6bbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.444583][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.452774][ T7527] R13: 0000000000000000 R14: 00007fec6d6f5fa0 R15: 00007fffe5292908 [ 120.460940][ T7527] [ 120.524502][ T7537] loop0: detected capacity change from 0 to 512 [ 120.531403][ T7537] EXT4-fs: Ignoring removed i_version option [ 120.565852][ T7533] loop2: detected capacity change from 0 to 8192 [ 120.573431][ T7537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 120.586611][ T7537] ext4 filesystem being mounted at /316/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.611208][ T7533] loop2: p2 p3 p4 [ 120.615823][ T7533] loop2: p3 start 1048607 is beyond EOD, truncated [ 120.622677][ T7533] loop2: p4 size 65536 extends beyond EOD, truncated [ 120.631732][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 120.691182][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 120.742576][ T7560] x_tables: duplicate underflow at hook 4 [ 120.758200][ T7564] syz.1.1416[7564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.758346][ T7564] syz.1.1416[7564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.770582][ T7564] syz.1.1416[7564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.804725][ T7568] loop4: detected capacity change from 0 to 512 [ 120.824982][ T7568] journal_path: Lookup failure for './bus' [ 120.830923][ T7568] EXT4-fs: error: could not find journal device path [ 120.866305][ T7564] lo speed is unknown, defaulting to 1000 [ 120.917990][ T7574] loop4: detected capacity change from 0 to 1024 [ 120.968873][ T7574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.087328][ T7592] loop0: detected capacity change from 0 to 164 [ 121.127443][ T7588] No such timeout policy "syz0" [ 121.141139][ T7592] Unable to read rock-ridge attributes [ 121.203165][ T7598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1426'. [ 121.327640][ T7613] loop0: detected capacity change from 0 to 512 [ 121.336850][ T7613] journal_path: Lookup failure for './bus' [ 121.342807][ T7613] EXT4-fs: error: could not find journal device path [ 121.415907][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 121.427229][ T3395] udevd[3395]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.817022][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.959773][ T7645] loop4: detected capacity change from 0 to 512 [ 121.966552][ T7645] journal_path: Lookup failure for './bus' [ 121.972452][ T7645] EXT4-fs: error: could not find journal device path [ 121.988356][ T7319] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.008942][ T7319] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.013711][ T7647] hub 6-0:1.0: USB hub found [ 122.026950][ T7647] hub 6-0:1.0: 8 ports detected [ 122.085140][ T7319] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.098529][ T7319] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.117953][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.127000][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.146468][ T7658] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=7658 comm=syz.5.1449 [ 122.150452][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.194089][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.203188][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.213671][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.284304][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.293570][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'. [ 122.305762][ T7668] nfs4: Unknown parameter '/file0' [ 122.422764][ T7684] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.503526][ T7684] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.554067][ T7684] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.602548][ T7684] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.668540][ T7684] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.688576][ T7684] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.708013][ T7684] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.740287][ T7684] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.764514][ T7691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.795665][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 122.795685][ T29] audit: type=1326 audit(1732238479.823:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 122.826414][ T29] audit: type=1326 audit(1732238479.863:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 122.850391][ T29] audit: type=1400 audit(1732238479.863:5844): avc: denied { ioctl } for pid=7700 comm="syz.4.1463" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.876124][ T29] audit: type=1326 audit(1732238479.883:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 122.877897][ T7691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.900001][ T29] audit: type=1326 audit(1732238479.883:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 122.900042][ T29] audit: type=1326 audit(1732238479.883:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 122.957313][ T29] audit: type=1326 audit(1732238479.883:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 122.982368][ T29] audit: type=1326 audit(1732238479.883:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 123.007175][ T29] audit: type=1326 audit(1732238479.883:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 123.031881][ T29] audit: type=1326 audit(1732238479.883:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7669 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca07c5e819 code=0x7ffc0000 [ 123.098903][ T7691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.129499][ T7691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.192692][ T7719] syz.5.1470[7719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.192792][ T7719] syz.5.1470[7719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.204391][ T7719] syz.5.1470[7719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.243320][ T7721] SELinux: Context Ü is not valid (left unmapped). [ 123.308367][ T7729] FAULT_INJECTION: forcing a failure. [ 123.308367][ T7729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.321692][ T7729] CPU: 0 UID: 0 PID: 7729 Comm: syz.2.1475 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 123.332109][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 123.342279][ T7729] Call Trace: [ 123.345751][ T7729] [ 123.348698][ T7729] dump_stack_lvl+0xf2/0x150 [ 123.353378][ T7729] dump_stack+0x15/0x20 [ 123.357742][ T7729] should_fail_ex+0x223/0x230 [ 123.362535][ T7729] should_fail+0xb/0x10 [ 123.366899][ T7729] should_fail_usercopy+0x1a/0x20 [ 123.372019][ T7729] _copy_from_iter+0xd5/0xd00 [ 123.376727][ T7729] ? kmalloc_reserve+0x16e/0x190 [ 123.381718][ T7729] ? __build_skb_around+0x196/0x1f0 [ 123.387114][ T7729] ? __alloc_skb+0x21f/0x310 [ 123.391731][ T7729] ? __virt_addr_valid+0x1ed/0x250 [ 123.396957][ T7729] ? __check_object_size+0x364/0x520 [ 123.402511][ T7729] netlink_sendmsg+0x460/0x6e0 [ 123.407333][ T7729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.412734][ T7729] __sock_sendmsg+0x140/0x180 [ 123.417491][ T7729] ____sys_sendmsg+0x312/0x410 [ 123.422600][ T7729] __sys_sendmsg+0x19d/0x230 [ 123.427354][ T7729] __x64_sys_sendmsg+0x46/0x50 [ 123.432259][ T7729] x64_sys_call+0x2734/0x2dc0 [ 123.437005][ T7729] do_syscall_64+0xc9/0x1c0 [ 123.441553][ T7729] ? clear_bhb_loop+0x55/0xb0 [ 123.446430][ T7729] ? clear_bhb_loop+0x55/0xb0 [ 123.451172][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.457277][ T7729] RIP: 0033:0x7f971ab6e819 [ 123.461924][ T7729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.482548][ T7729] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.491133][ T7729] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 123.499516][ T7729] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 123.508109][ T7729] RBP: 00007f97191e1090 R08: 0000000000000000 R09: 0000000000000000 [ 123.516805][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.524974][ T7729] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 123.532992][ T7729] [ 123.594823][ T7730] hub 6-0:1.0: USB hub found [ 123.599747][ T7730] hub 6-0:1.0: 8 ports detected [ 124.104653][ T7769] hub 6-0:1.0: USB hub found [ 124.109868][ T7769] hub 6-0:1.0: 8 ports detected [ 124.946771][ T7808] loop5: detected capacity change from 0 to 2048 [ 124.976892][ T7808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.012638][ T6853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.035123][ T7822] hub 6-0:1.0: USB hub found [ 125.067556][ T7822] hub 6-0:1.0: 8 ports detected [ 125.273448][ T7848] lo speed is unknown, defaulting to 1000 [ 125.391334][ T7867] FAULT_INJECTION: forcing a failure. [ 125.391334][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 125.404303][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.1.1510 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 125.415158][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 125.425288][ T7867] Call Trace: [ 125.428627][ T7867] [ 125.431560][ T7867] dump_stack_lvl+0xf2/0x150 [ 125.436177][ T7867] dump_stack+0x15/0x20 [ 125.440401][ T7867] should_fail_ex+0x223/0x230 [ 125.445133][ T7867] ? __alloc_skb+0x10b/0x310 [ 125.449788][ T7867] should_failslab+0x8f/0xb0 [ 125.454549][ T7867] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 125.459117][ T7870] loop2: detected capacity change from 0 to 512 [ 125.460560][ T7867] __alloc_skb+0x10b/0x310 [ 125.471238][ T7867] audit_log_start+0x368/0x6b0 [ 125.476054][ T7867] ? kmem_cache_free+0xdc/0x2d0 [ 125.480949][ T7867] audit_seccomp+0x4b/0x130 [ 125.485583][ T7867] __seccomp_filter+0x6fa/0x1180 [ 125.490745][ T7867] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 125.496572][ T7867] ? vfs_write+0x596/0x920 [ 125.501027][ T7867] ? up_write+0x30/0xf0 [ 125.505288][ T7867] ? ipcget+0x48d/0x4c0 [ 125.509521][ T7867] __secure_computing+0x9f/0x1c0 [ 125.514545][ T7867] syscall_trace_enter+0xd1/0x1f0 [ 125.519634][ T7867] ? fpregs_assert_state_consistent+0x83/0xa0 [ 125.525844][ T7867] do_syscall_64+0xaa/0x1c0 [ 125.530492][ T7867] ? clear_bhb_loop+0x55/0xb0 [ 125.535199][ T7867] ? clear_bhb_loop+0x55/0xb0 [ 125.540069][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.546003][ T7867] RIP: 0033:0x7f70e62bd25c [ 125.550520][ T7867] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 125.570233][ T7867] RSP: 002b:00007f70e4937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.578815][ T7867] RAX: ffffffffffffffda RBX: 00007f70e6475fa0 RCX: 00007f70e62bd25c [ 125.586917][ T7867] RDX: 000000000000000f RSI: 00007f70e49370a0 RDI: 0000000000000003 [ 125.595029][ T7867] RBP: 00007f70e4937090 R08: 0000000000000000 R09: 0000000000000000 [ 125.603107][ T7867] R10: 0000000020ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 125.611193][ T7867] R13: 0000000000000000 R14: 00007f70e6475fa0 R15: 00007ffd61b6ddf8 [ 125.619343][ T7867] [ 125.652654][ T7870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.665600][ T7870] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.712555][ T7877] FAULT_INJECTION: forcing a failure. [ 125.712555][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.725752][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.1.1513 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 125.736139][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 125.746319][ T7877] Call Trace: [ 125.749623][ T7877] [ 125.752648][ T7877] dump_stack_lvl+0xf2/0x150 [ 125.757329][ T7877] dump_stack+0x15/0x20 [ 125.761916][ T7877] should_fail_ex+0x223/0x230 [ 125.766729][ T7877] should_fail+0xb/0x10 [ 125.770926][ T7877] should_fail_usercopy+0x1a/0x20 [ 125.775993][ T7877] _copy_from_user+0x1e/0xb0 [ 125.780725][ T7877] __se_sys_mount+0x119/0x2d0 [ 125.785498][ T7877] ? ksys_write+0x176/0x1b0 [ 125.790320][ T7877] __x64_sys_mount+0x67/0x80 [ 125.795123][ T7877] x64_sys_call+0x2c84/0x2dc0 [ 125.799887][ T7877] do_syscall_64+0xc9/0x1c0 [ 125.804490][ T7877] ? clear_bhb_loop+0x55/0xb0 [ 125.809245][ T7877] ? clear_bhb_loop+0x55/0xb0 [ 125.814028][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.820472][ T7877] RIP: 0033:0x7f70e62be819 [ 125.825051][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.845445][ T7877] RSP: 002b:00007f70e4937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.853905][ T7877] RAX: ffffffffffffffda RBX: 00007f70e6475fa0 RCX: 00007f70e62be819 [ 125.861989][ T7877] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 125.870003][ T7877] RBP: 00007f70e4937090 R08: 0000000020000a40 R09: 0000000000000000 [ 125.878098][ T7877] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 125.886186][ T7877] R13: 0000000000000000 R14: 00007f70e6475fa0 R15: 00007ffd61b6ddf8 [ 125.894549][ T7877] [ 126.067166][ T7916] hub 6-0:1.0: USB hub found [ 126.072235][ T7916] hub 6-0:1.0: 8 ports detected [ 126.265118][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.283931][ T7927] loop5: detected capacity change from 0 to 8192 [ 126.291661][ T7927] vfat: Unknown parameter '' [ 126.429168][ T7954] FAULT_INJECTION: forcing a failure. [ 126.429168][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 126.441969][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.2.1524 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 126.452464][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 126.462817][ T7954] Call Trace: [ 126.466332][ T7954] [ 126.469293][ T7954] dump_stack_lvl+0xf2/0x150 [ 126.474099][ T7954] dump_stack+0x15/0x20 [ 126.478402][ T7954] should_fail_ex+0x223/0x230 [ 126.483237][ T7954] ? __kvmalloc_node_noprof+0x72/0x170 [ 126.488758][ T7954] should_failslab+0x8f/0xb0 [ 126.493447][ T7954] __kmalloc_node_noprof+0xa8/0x380 [ 126.498772][ T7954] __kvmalloc_node_noprof+0x72/0x170 [ 126.504307][ T7954] rhashtable_init_noprof+0x312/0x450 [ 126.509767][ T7954] br_mdb_hash_init+0x26/0x90 [ 126.514506][ T7954] br_dev_init+0x3f/0xf0 [ 126.518908][ T7954] register_netdevice+0x293/0xe30 [ 126.524082][ T7954] ? alloc_netdev_mqs+0x8c7/0x8e0 [ 126.529297][ T7954] br_add_bridge+0x72/0xc0 [ 126.533761][ T7954] br_ioctl_stub+0x2b9/0x5d0 [ 126.538373][ T7954] ? do_vfs_ioctl+0x96e/0x1530 [ 126.543323][ T7954] ? __pfx_br_ioctl_stub+0x10/0x10 [ 126.548500][ T7954] sock_ioctl+0x433/0x640 [ 126.553126][ T7954] ? __pfx_sock_ioctl+0x10/0x10 [ 126.558403][ T7954] __se_sys_ioctl+0xc9/0x140 [ 126.563032][ T7954] __x64_sys_ioctl+0x43/0x50 [ 126.567672][ T7954] x64_sys_call+0x1690/0x2dc0 [ 126.572417][ T7954] do_syscall_64+0xc9/0x1c0 [ 126.576963][ T7954] ? clear_bhb_loop+0x55/0xb0 [ 126.581760][ T7954] ? clear_bhb_loop+0x55/0xb0 [ 126.586815][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.592762][ T7954] RIP: 0033:0x7f971ab6e819 [ 126.597198][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.617095][ T7954] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.625559][ T7954] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 126.633635][ T7954] RDX: 0000000020000040 RSI: 00000000000089a0 RDI: 0000000000000003 [ 126.641630][ T7954] RBP: 00007f97191e1090 R08: 0000000000000000 R09: 0000000000000000 [ 126.649645][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.657856][ T7954] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 126.665883][ T7954] [ 126.686640][ T7954] loop2: detected capacity change from 0 to 2048 [ 126.713062][ T7954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.737875][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.850547][ T7987] xt_NFQUEUE: number of total queues is 0 [ 126.997747][ T7691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.020008][ T7691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.045567][ T7691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.086411][ T7691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.121850][ T8006] pim6reg: left allmulticast mode [ 127.220471][ T8006] hub 6-0:1.0: USB hub found [ 127.232329][ T8006] hub 6-0:1.0: 8 ports detected [ 127.478693][ T8030] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 127.478693][ T8030] program syz.5.1535 not setting count and/or reply_len properly [ 127.500950][ T8030] FAULT_INJECTION: forcing a failure. [ 127.500950][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 127.514049][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.5.1535 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 127.524438][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 127.534894][ T8030] Call Trace: [ 127.538217][ T8030] [ 127.541186][ T8030] dump_stack_lvl+0xf2/0x150 [ 127.545825][ T8030] dump_stack+0x15/0x20 [ 127.550059][ T8030] should_fail_ex+0x223/0x230 [ 127.554773][ T8030] ? blk_rq_map_user_iov+0xac7/0x1930 [ 127.560250][ T8030] should_failslab+0x8f/0xb0 [ 127.564908][ T8030] __kmalloc_noprof+0xa5/0x370 [ 127.569845][ T8030] blk_rq_map_user_iov+0xac7/0x1930 [ 127.575080][ T8030] ? __pfx___sbitmap_queue_get_batch+0x2/0x10 [ 127.581210][ T8030] ? this_cpu_in_panic+0x2d/0x40 [ 127.586244][ T8030] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 127.592164][ T8030] ? import_ubuf+0xec/0x130 [ 127.596701][ T8030] blk_rq_map_user_io+0x193/0x260 [ 127.601919][ T8030] ? _raw_spin_unlock+0x26/0x50 [ 127.606918][ T8030] ? __schedule+0x6fa/0x930 [ 127.611492][ T8030] ? sg_link_reserve+0x118/0x140 [ 127.616643][ T8030] sg_common_write+0x812/0x8d0 [ 127.621432][ T8030] sg_write+0x698/0x710 [ 127.625634][ T8030] ? __pfx_sg_write+0x10/0x10 [ 127.630325][ T8030] vfs_write+0x281/0x920 [ 127.634684][ T8030] ? __fget_files+0x17c/0x1c0 [ 127.639621][ T8030] ksys_write+0xe8/0x1b0 [ 127.643915][ T8030] __x64_sys_write+0x42/0x50 [ 127.648554][ T8030] x64_sys_call+0x287e/0x2dc0 [ 127.653331][ T8030] do_syscall_64+0xc9/0x1c0 [ 127.657894][ T8030] ? clear_bhb_loop+0x55/0xb0 [ 127.662698][ T8030] ? clear_bhb_loop+0x55/0xb0 [ 127.667509][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.673440][ T8030] RIP: 0033:0x7fca07c5e819 [ 127.677875][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.697503][ T8030] RSP: 002b:00007fca062d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.705995][ T8030] RAX: ffffffffffffffda RBX: 00007fca07e15fa0 RCX: 00007fca07c5e819 [ 127.713976][ T8030] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 0000000000000007 [ 127.721960][ T8030] RBP: 00007fca062d7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.730053][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.738044][ T8030] R13: 0000000000000000 R14: 00007fca07e15fa0 R15: 00007ffd7cd97b98 [ 127.746071][ T8030] [ 127.833437][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 127.833457][ T29] audit: type=1400 audit(1732238484.853:5931): avc: denied { sqpoll } for pid=8038 comm="syz.5.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.887823][ T29] audit: type=1400 audit(1732238484.903:5932): avc: denied { create } for pid=8039 comm="syz.2.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.979621][ T8063] pim6reg: entered allmulticast mode [ 128.009642][ T8063] pim6reg: left allmulticast mode [ 128.837525][ T8108] loop2: detected capacity change from 0 to 512 [ 128.885198][ T8108] journal_path: Lookup failure for './bus' [ 128.891190][ T8108] EXT4-fs: error: could not find journal device path [ 129.021285][ T29] audit: type=1326 audit(1732238486.043:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.211654][ T8137] pim6reg: entered allmulticast mode [ 129.288405][ T8138] lo speed is unknown, defaulting to 1000 [ 129.344698][ T29] audit: type=1326 audit(1732238486.223:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.369081][ T29] audit: type=1326 audit(1732238486.223:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.392589][ T29] audit: type=1326 audit(1732238486.223:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.416061][ T29] audit: type=1326 audit(1732238486.293:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.440079][ T29] audit: type=1326 audit(1732238486.293:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.463611][ T29] audit: type=1326 audit(1732238486.293:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6d53e819 code=0x7ffc0000 [ 129.540877][ T8137] pim6reg: left allmulticast mode [ 129.635314][ T8137] hub 6-0:1.0: USB hub found [ 129.648789][ T8137] hub 6-0:1.0: 8 ports detected [ 129.794891][ T29] audit: type=1326 audit(1732238486.823:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.4.1544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3439f1e819 code=0x7ffc0000 [ 129.969724][ T8162] lo speed is unknown, defaulting to 1000 [ 130.063408][ T8167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.114597][ T8175] hub 6-0:1.0: USB hub found [ 130.120064][ T8175] hub 6-0:1.0: 8 ports detected [ 130.164968][ T8169] pim6reg: entered allmulticast mode [ 130.200148][ T8167] __nla_validate_parse: 4 callbacks suppressed [ 130.200171][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 130.222409][ T8167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8167 comm=syz.0.1565 [ 130.249024][ T8180] syz.4.1570[8180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.249158][ T8180] syz.4.1570[8180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.303945][ T8180] syz.4.1570[8180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.322110][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 130.349789][ T8187] loop0: detected capacity change from 0 to 512 [ 130.357275][ T8185] binfmt_misc: register: failed to install interpreter file ./file0 [ 130.374479][ T8185] loop5: detected capacity change from 0 to 512 [ 130.382507][ T8185] EXT4-fs: test_dummy_encryption option not supported [ 130.392414][ T8185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1574'. [ 130.403307][ T8187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.431966][ T8187] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.501942][ T8187] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #18: comm syz.0.1573: corrupted inode contents [ 130.523360][ T8187] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #18: comm syz.0.1573: mark_inode_dirty error [ 130.551001][ T8187] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #18: comm syz.0.1573: corrupted inode contents [ 130.583749][ T8202] syz.4.1577[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.583827][ T8202] syz.4.1577[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.601633][ T8187] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #18: comm syz.0.1573: mark_inode_dirty error [ 130.622787][ T8202] syz.4.1577[8202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.627465][ T8187] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #18: comm syz.0.1573: mark inode dirty (error -117) [ 130.668148][ T8187] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 130.717544][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.763975][ T8210] pim6reg: left allmulticast mode [ 130.828028][ T8210] hub 6-0:1.0: USB hub found [ 130.832887][ T8210] hub 6-0:1.0: 8 ports detected [ 130.950376][ T8235] syz.4.1589[8235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.950475][ T8235] syz.4.1589[8235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.970396][ T8235] syz.4.1589[8235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.982203][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 131.056025][ T8251] loop0: detected capacity change from 0 to 1764 [ 131.082738][ T8251] iso9660: Unknown parameter '01777777777777777777777ÿÿ01777777777777777777777' [ 131.202948][ T8264] pim6reg: entered allmulticast mode [ 131.211337][ T8268] loop1: detected capacity change from 0 to 256 [ 131.234294][ T8273] pim6reg: left allmulticast mode [ 131.247353][ T8268] FAT-fs (loop1): Directory bread(block 64) failed [ 131.254818][ T8268] FAT-fs (loop1): Directory bread(block 65) failed [ 131.262210][ T8268] FAT-fs (loop1): Directory bread(block 66) failed [ 131.269050][ T8268] FAT-fs (loop1): Directory bread(block 67) failed [ 131.275968][ T8268] FAT-fs (loop1): Directory bread(block 68) failed [ 131.282667][ T8268] FAT-fs (loop1): Directory bread(block 69) failed [ 131.289278][ T8264] hub 6-0:1.0: USB hub found [ 131.289598][ T8268] FAT-fs (loop1): Directory bread(block 70) failed [ 131.295176][ T8264] hub 6-0:1.0: 8 ports detected [ 131.301542][ T8268] FAT-fs (loop1): Directory bread(block 71) failed [ 131.312606][ T8268] FAT-fs (loop1): Directory bread(block 72) failed [ 131.319408][ T8268] FAT-fs (loop1): Directory bread(block 73) failed [ 131.382940][ T8283] loop2: detected capacity change from 0 to 128 [ 131.397577][ T8285] loop5: detected capacity change from 0 to 1024 [ 131.398335][ T8283] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.405122][ T8285] EXT4-fs: Ignoring removed orlov option [ 131.422009][ T8285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.429681][ T8285] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.435202][ T8283] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.440957][ T8285] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 131.461427][ T8285] EXT4-fs (loop5): invalid journal inode [ 131.467105][ T8285] EXT4-fs (loop5): can't get journal size [ 131.474357][ T8285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.491750][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1604'. [ 131.503586][ T3327] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.522696][ T6853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.523183][ T8289] syz.2.1606[8289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.534236][ T8289] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.613243][ T8291] loop5: detected capacity change from 0 to 1024 [ 131.620092][ T8291] EXT4-fs: dax option not supported [ 131.709378][ T8301] bridge_slave_0: left allmulticast mode [ 131.715247][ T8301] bridge_slave_0: left promiscuous mode [ 131.721056][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.730063][ T8301] bridge_slave_1: left allmulticast mode [ 131.736058][ T8301] bridge_slave_1: left promiscuous mode [ 131.741944][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.756057][ T8301] bond0: (slave bond_slave_0): Releasing backup interface [ 131.767627][ T8301] bond0: (slave bond_slave_1): Releasing backup interface [ 131.782143][ T8301] team0: Port device team_slave_0 removed [ 131.791646][ T8301] team0: Port device team_slave_1 removed [ 131.798517][ T8301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.806303][ T8301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.815356][ T8301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.823148][ T8301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.849420][ T8304] geneve2: entered promiscuous mode [ 131.854716][ T8304] geneve2: entered allmulticast mode [ 131.862554][ T8304] batman_adv: batadv0: Adding interface: geneve2 [ 131.869040][ T8304] batman_adv: batadv0: Interface activated: geneve2 [ 131.918289][ T8313] pim6reg: entered allmulticast mode [ 131.925873][ T8313] pim6reg: left allmulticast mode [ 131.973666][ T8319] FAULT_INJECTION: forcing a failure. [ 131.973666][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 131.986755][ T8319] CPU: 0 UID: 0 PID: 8319 Comm: syz.2.1617 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 131.997277][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 132.007363][ T8319] Call Trace: [ 132.010749][ T8319] [ 132.013722][ T8319] dump_stack_lvl+0xf2/0x150 [ 132.014210][ T8320] hub 6-0:1.0: USB hub found [ 132.018397][ T8319] dump_stack+0x15/0x20 [ 132.018437][ T8319] should_fail_ex+0x223/0x230 [ 132.023888][ T8320] hub 6-0:1.0: 8 ports detected [ 132.027206][ T8319] ? skb_clone+0x154/0x1f0 [ 132.041368][ T8319] should_failslab+0x8f/0xb0 [ 132.045987][ T8319] kmem_cache_alloc_noprof+0x4c/0x290 [ 132.051382][ T8319] skb_clone+0x154/0x1f0 [ 132.055718][ T8319] __netlink_deliver_tap+0x2bd/0x4c0 [ 132.061148][ T8319] netlink_sendskb+0x126/0x150 [ 132.066153][ T8319] netlink_unicast+0x291/0x670 [ 132.070949][ T8319] netlink_ack+0x4c4/0x4f0 [ 132.075419][ T8319] netlink_rcv_skb+0x19c/0x230 [ 132.080211][ T8319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.085781][ T8319] rtnetlink_rcv+0x1c/0x30 [ 132.090226][ T8319] netlink_unicast+0x599/0x670 [ 132.095041][ T8319] netlink_sendmsg+0x5cc/0x6e0 [ 132.099863][ T8319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.105175][ T8319] __sock_sendmsg+0x140/0x180 [ 132.109901][ T8319] ____sys_sendmsg+0x312/0x410 [ 132.114825][ T8319] __sys_sendmsg+0x19d/0x230 [ 132.119476][ T8319] __x64_sys_sendmsg+0x46/0x50 [ 132.124428][ T8319] x64_sys_call+0x2734/0x2dc0 [ 132.129218][ T8319] do_syscall_64+0xc9/0x1c0 [ 132.133749][ T8319] ? clear_bhb_loop+0x55/0xb0 [ 132.138518][ T8319] ? clear_bhb_loop+0x55/0xb0 [ 132.143250][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.149332][ T8319] RIP: 0033:0x7f971ab6e819 [ 132.153835][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.173530][ T8319] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.181963][ T8319] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 132.189945][ T8319] RDX: 000000000004c880 RSI: 0000000020000500 RDI: 0000000000000005 [ 132.198001][ T8319] RBP: 00007f97191e1090 R08: 0000000000000000 R09: 0000000000000000 [ 132.206205][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.214216][ T8319] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 132.222208][ T8319] [ 132.303379][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 132.472000][ T8362] loop4: detected capacity change from 0 to 512 [ 132.483134][ T8361] loop0: detected capacity change from 0 to 256 [ 132.492690][ T8354] loop2: detected capacity change from 0 to 2048 [ 132.533972][ T8361] FAT-fs (loop0): Directory bread(block 64) failed [ 132.542539][ T8362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.544482][ T8361] FAT-fs (loop0): Directory bread(block 65) failed [ 132.562223][ T8361] FAT-fs (loop0): Directory bread(block 66) failed [ 132.562356][ T8354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.568820][ T8361] FAT-fs (loop0): Directory bread(block 67) failed [ 132.587982][ T8361] FAT-fs (loop0): Directory bread(block 68) failed [ 132.590931][ T8362] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.595041][ T8361] FAT-fs (loop0): Directory bread(block 69) failed [ 132.612295][ T8361] FAT-fs (loop0): Directory bread(block 70) failed [ 132.619023][ T8361] FAT-fs (loop0): Directory bread(block 71) failed [ 132.625904][ T8361] FAT-fs (loop0): Directory bread(block 72) failed [ 132.633063][ T8361] FAT-fs (loop0): Directory bread(block 73) failed [ 132.642348][ T8351] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 32: comm syz.4.1624: path /308/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 132.703216][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.233770][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.257539][ T8380] pim6reg: entered allmulticast mode [ 133.267938][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 133.267954][ T29] audit: type=1326 audit(1732238490.293:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.318347][ T29] audit: type=1326 audit(1732238490.333:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.342042][ T29] audit: type=1326 audit(1732238490.333:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.366462][ T29] audit: type=1326 audit(1732238490.333:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.390518][ T29] audit: type=1326 audit(1732238490.333:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.414067][ T29] audit: type=1326 audit(1732238490.333:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.437915][ T29] audit: type=1326 audit(1732238490.333:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 133.444751][ T8380] pim6reg: left allmulticast mode [ 133.461988][ T29] audit: type=1400 audit(1732238490.343:6165): avc: denied { read } for pid=8385 comm="syz.1.1635" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.490432][ T29] audit: type=1400 audit(1732238490.343:6166): avc: denied { open } for pid=8385 comm="syz.1.1635" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.514653][ T29] audit: type=1400 audit(1732238490.343:6167): avc: denied { create } for pid=8385 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.554791][ T8384] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.588311][ T8389] hub 6-0:1.0: USB hub found [ 133.602940][ T8389] hub 6-0:1.0: 8 ports detected [ 133.669192][ T8405] loop2: detected capacity change from 0 to 128 [ 133.670509][ T8407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1643'. [ 133.805246][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 133.871436][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1653'. [ 133.900252][ T8432] loop0: detected capacity change from 0 to 164 [ 133.913650][ T8432] syz.0.1653: attempt to access beyond end of device [ 133.913650][ T8432] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 133.929037][ T8432] syz.0.1653: attempt to access beyond end of device [ 133.929037][ T8432] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.944117][ T8432] syz.0.1653: attempt to access beyond end of device [ 133.944117][ T8432] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.958605][ T8432] syz.0.1653: attempt to access beyond end of device [ 133.958605][ T8432] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.973522][ T8432] syz.0.1653: attempt to access beyond end of device [ 133.973522][ T8432] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.987320][ T8432] syz.0.1653: attempt to access beyond end of device [ 133.987320][ T8432] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.001111][ T8439] syz.0.1653: attempt to access beyond end of device [ 134.001111][ T8439] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.014888][ T8432] syz.0.1653: attempt to access beyond end of device [ 134.014888][ T8432] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.028498][ T8439] syz.0.1653: attempt to access beyond end of device [ 134.028498][ T8439] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.042116][ T8439] syz.0.1653: attempt to access beyond end of device [ 134.042116][ T8439] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.115219][ T8442] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.149777][ T8444] pim6reg: entered allmulticast mode [ 134.170232][ T8444] pim6reg: left allmulticast mode [ 134.256821][ T8444] hub 6-0:1.0: USB hub found [ 134.263692][ T8444] hub 6-0:1.0: 8 ports detected [ 134.305021][ T8459] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1660'. [ 134.474674][ T8462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=8462 comm=syz.1.1660 [ 134.631048][ T8471] usb usb8: usbfs: process 8471 (syz.5.1664) did not claim interface 0 before use [ 134.656761][ T8477] netlink: 'syz.1.1666': attribute type 10 has an invalid length. [ 134.686010][ T8477] hsr_slave_0 (unregistering): left promiscuous mode [ 134.708261][ T8479] loop5: detected capacity change from 0 to 256 [ 134.754739][ T8479] FAT-fs (loop5): Directory bread(block 64) failed [ 134.770002][ T8479] FAT-fs (loop5): Directory bread(block 65) failed [ 134.777186][ T8479] FAT-fs (loop5): Directory bread(block 66) failed [ 134.783913][ T8479] FAT-fs (loop5): Directory bread(block 67) failed [ 134.793114][ T8479] FAT-fs (loop5): Directory bread(block 68) failed [ 134.799820][ T8479] FAT-fs (loop5): Directory bread(block 69) failed [ 134.806936][ T8479] FAT-fs (loop5): Directory bread(block 70) failed [ 134.814542][ T8479] FAT-fs (loop5): Directory bread(block 71) failed [ 134.821766][ T8479] FAT-fs (loop5): Directory bread(block 72) failed [ 134.823111][ T8488] pim6reg: entered allmulticast mode [ 134.828987][ T8479] FAT-fs (loop5): Directory bread(block 73) failed [ 134.854004][ T8488] pim6reg: left allmulticast mode [ 134.933636][ T8497] hub 6-0:1.0: USB hub found [ 134.949395][ T8497] hub 6-0:1.0: 8 ports detected [ 135.479238][ T8516] geneve0: entered allmulticast mode [ 135.541608][ T8522] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1683'. [ 135.813231][ T8527] pim6reg: entered allmulticast mode [ 135.815300][ T8529] bpf_get_probe_write_proto: 11 callbacks suppressed [ 135.815321][ T8529] syz.0.1686[8529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.830280][ T8527] pim6reg: left allmulticast mode [ 135.832070][ T8529] syz.0.1686[8529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.847461][ T8529] syz.0.1686[8529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.866757][ T8529] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.927039][ T8527] hub 6-0:1.0: USB hub found [ 135.937961][ T8527] hub 6-0:1.0: 8 ports detected [ 135.957435][ T8539] loop0: detected capacity change from 0 to 256 [ 135.985561][ T8539] FAT-fs (loop0): Directory bread(block 64) failed [ 136.002806][ T8539] FAT-fs (loop0): Directory bread(block 65) failed [ 136.018116][ T8539] FAT-fs (loop0): Directory bread(block 66) failed [ 136.025699][ T8539] FAT-fs (loop0): Directory bread(block 67) failed [ 136.032788][ T8539] FAT-fs (loop0): Directory bread(block 68) failed [ 136.039439][ T8539] FAT-fs (loop0): Directory bread(block 69) failed [ 136.051265][ T8545] loop1: detected capacity change from 0 to 128 [ 136.061849][ T8539] FAT-fs (loop0): Directory bread(block 70) failed [ 136.069869][ T8539] FAT-fs (loop0): Directory bread(block 71) failed [ 136.076887][ T8545] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4626: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 136.090933][ T8539] FAT-fs (loop0): Directory bread(block 72) failed [ 136.097691][ T8539] FAT-fs (loop0): Directory bread(block 73) failed [ 136.111018][ T8545] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 136.131392][ T8545] 9pnet_virtio: no channels available for device syz [ 136.540471][ T8566] syz.5.1700[8566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.540668][ T8566] syz.5.1700[8566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.573272][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 136.632022][ T8566] syz.5.1700[8566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.737698][ T8571] pim6reg: entered allmulticast mode [ 136.755977][ T8571] pim6reg: left allmulticast mode [ 136.839682][ T8572] loop2: detected capacity change from 0 to 2048 [ 136.852208][ T8572] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.864152][ T8571] hub 6-0:1.0: USB hub found [ 136.872078][ T8571] hub 6-0:1.0: 8 ports detected [ 136.891457][ T8572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.981201][ T8572] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1701: bg 0: block 234: padding at end of block bitmap is not set [ 137.002509][ T8572] EXT4-fs (loop2): Remounting filesystem read-only [ 137.153952][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.158149][ T8601] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 137.236001][ T8607] pim6reg: entered allmulticast mode [ 137.268495][ T8607] pim6reg: left allmulticast mode [ 137.334143][ T8607] hub 6-0:1.0: USB hub found [ 137.351768][ T8607] hub 6-0:1.0: 8 ports detected [ 137.503890][ T8631] loop5: detected capacity change from 0 to 256 [ 137.517912][ T8631] FAT-fs (loop5): Directory bread(block 64) failed [ 137.524799][ T8631] FAT-fs (loop5): Directory bread(block 65) failed [ 137.531620][ T8631] FAT-fs (loop5): Directory bread(block 66) failed [ 137.538294][ T8631] FAT-fs (loop5): Directory bread(block 67) failed [ 137.545193][ T8631] FAT-fs (loop5): Directory bread(block 68) failed [ 137.552005][ T8631] FAT-fs (loop5): Directory bread(block 69) failed [ 137.558756][ T8631] FAT-fs (loop5): Directory bread(block 70) failed [ 137.565611][ T8631] FAT-fs (loop5): Directory bread(block 71) failed [ 137.572293][ T8631] FAT-fs (loop5): Directory bread(block 72) failed [ 137.578872][ T8631] FAT-fs (loop5): Directory bread(block 73) failed [ 137.681582][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1728'. [ 137.816678][ T8643] loop0: detected capacity change from 0 to 8192 [ 137.821904][ T8645] loop5: detected capacity change from 0 to 512 [ 137.842591][ T8645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.855402][ T8645] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.924432][ T8649] 9pnet_fd: Insufficient options for proto=fd [ 137.974177][ T8653] pim6reg: entered allmulticast mode [ 137.981583][ T8653] pim6reg: left allmulticast mode [ 138.068927][ T8653] hub 6-0:1.0: USB hub found [ 138.074155][ T8653] hub 6-0:1.0: 8 ports detected [ 138.110067][ T8657] syz.0.1736[8657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.110146][ T8657] syz.0.1736[8657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.122693][ T8657] syz.0.1736[8657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.242912][ T8664] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 138.271869][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 138.271890][ T29] audit: type=1400 audit(1732238495.293:6490): avc: denied { relabelto } for pid=8663 comm="syz.2.1740" name="bus" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 138.304547][ T29] audit: type=1400 audit(1732238495.293:6491): avc: denied { associate } for pid=8663 comm="syz.2.1740" name="bus" dev="tmpfs" ino=1973 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mnt_t:s0" [ 138.377738][ T29] audit: type=1400 audit(1732238495.403:6492): avc: denied { unlink } for pid=3327 comm="syz-executor" name="bus" dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 138.407332][ T8674] loop0: detected capacity change from 0 to 512 [ 138.423594][ T29] audit: type=1326 audit(1732238495.453:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 138.447919][ T29] audit: type=1326 audit(1732238495.453:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 138.471666][ T29] audit: type=1326 audit(1732238495.453:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 138.495307][ T29] audit: type=1326 audit(1732238495.453:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 138.519064][ T29] audit: type=1326 audit(1732238495.453:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 138.543307][ T29] audit: type=1326 audit(1732238495.453:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.1.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e62be819 code=0x7ffc0000 [ 138.566885][ T29] audit: type=1400 audit(1732238495.473:6499): avc: denied { mounton } for pid=8665 comm="syz.0.1739" path="/374/bus" dev="tmpfs" ino=1996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.601963][ T8674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.616603][ T6853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.626102][ T8674] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.734975][ T8688] pim6reg: entered allmulticast mode [ 138.745183][ T8688] pim6reg: left allmulticast mode [ 138.755129][ T8690] syz.1.1748[8690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.759839][ T8690] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.802765][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.844178][ T8688] hub 6-0:1.0: USB hub found [ 138.864931][ T8688] hub 6-0:1.0: 8 ports detected [ 138.997195][ T8711] loop4: detected capacity change from 0 to 256 [ 138.997369][ T8713] loop1: detected capacity change from 0 to 256 [ 139.019126][ T8713] FAT-fs (loop1): Directory bread(block 64) failed [ 139.024420][ T8711] FAT-fs (loop4): Directory bread(block 64) failed [ 139.026295][ T8713] FAT-fs (loop1): Directory bread(block 65) failed [ 139.032688][ T8711] FAT-fs (loop4): Directory bread(block 65) failed [ 139.039041][ T8713] FAT-fs (loop1): Directory bread(block 66) failed [ 139.046514][ T8711] FAT-fs (loop4): Directory bread(block 66) failed [ 139.052355][ T8713] FAT-fs (loop1): Directory bread(block 67) failed [ 139.065839][ T8713] FAT-fs (loop1): Directory bread(block 68) failed [ 139.073797][ T8713] FAT-fs (loop1): Directory bread(block 69) failed [ 139.080651][ T8713] FAT-fs (loop1): Directory bread(block 70) failed [ 139.087526][ T8713] FAT-fs (loop1): Directory bread(block 71) failed [ 139.094848][ T8713] FAT-fs (loop1): Directory bread(block 72) failed [ 139.103219][ T8714] ip6t_rpfilter: unknown options [ 139.120242][ T8711] FAT-fs (loop4): Directory bread(block 67) failed [ 139.128475][ T8711] FAT-fs (loop4): Directory bread(block 68) failed [ 139.135930][ T8711] FAT-fs (loop4): Directory bread(block 69) failed [ 139.143257][ T8713] FAT-fs (loop1): Directory bread(block 73) failed [ 139.150080][ T8711] FAT-fs (loop4): Directory bread(block 70) failed [ 139.176069][ T8711] FAT-fs (loop4): Directory bread(block 71) failed [ 139.198854][ T8711] FAT-fs (loop4): Directory bread(block 72) failed [ 139.218470][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 139.236037][ T8711] FAT-fs (loop4): Directory bread(block 73) failed [ 139.468153][ T8719] FAULT_INJECTION: forcing a failure. [ 139.468153][ T8719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.481367][ T8719] CPU: 1 UID: 0 PID: 8719 Comm: syz.4.1759 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 139.491749][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.501886][ T8719] Call Trace: [ 139.505186][ T8719] [ 139.508118][ T8719] dump_stack_lvl+0xf2/0x150 [ 139.512792][ T8719] dump_stack+0x15/0x20 [ 139.516966][ T8719] should_fail_ex+0x223/0x230 [ 139.521664][ T8719] should_fail+0xb/0x10 [ 139.525888][ T8719] should_fail_usercopy+0x1a/0x20 [ 139.530944][ T8719] _copy_to_user+0x20/0xa0 [ 139.535391][ T8719] simple_read_from_buffer+0xa0/0x110 [ 139.540820][ T8719] proc_fail_nth_read+0xf9/0x140 [ 139.545809][ T8719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.551416][ T8719] vfs_read+0x1a2/0x700 [ 139.555619][ T8719] ? __rcu_read_unlock+0x4e/0x70 [ 139.560603][ T8719] ? __fget_files+0x17c/0x1c0 [ 139.565321][ T8719] ksys_read+0xe8/0x1b0 [ 139.569586][ T8719] __x64_sys_read+0x42/0x50 [ 139.574140][ T8719] x64_sys_call+0x2874/0x2dc0 [ 139.578877][ T8719] do_syscall_64+0xc9/0x1c0 [ 139.583435][ T8719] ? clear_bhb_loop+0x55/0xb0 [ 139.588226][ T8719] ? clear_bhb_loop+0x55/0xb0 [ 139.593073][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.599006][ T8719] RIP: 0033:0x7f3439f1d25c [ 139.603436][ T8719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 139.623072][ T8719] RSP: 002b:00007f3438591030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.631664][ T8719] RAX: ffffffffffffffda RBX: 00007f343a0d5fa0 RCX: 00007f3439f1d25c [ 139.640096][ T8719] RDX: 000000000000000f RSI: 00007f34385910a0 RDI: 0000000000000005 [ 139.648102][ T8719] RBP: 00007f3438591090 R08: 0000000000000000 R09: 0000000000000000 [ 139.656152][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.664216][ T8719] R13: 0000000000000000 R14: 00007f343a0d5fa0 R15: 00007ffdf01a0ac8 [ 139.672223][ T8719] [ 139.750819][ T8723] loop4: detected capacity change from 0 to 8192 [ 139.820164][ T8727] pim6reg: entered allmulticast mode [ 139.851068][ T8727] pim6reg: left allmulticast mode [ 139.928991][ T8727] hub 6-0:1.0: USB hub found [ 139.939655][ T8727] hub 6-0:1.0: 8 ports detected [ 140.188183][ T8767] ip6t_rpfilter: unknown options [ 140.556731][ T8782] pim6reg: entered allmulticast mode [ 140.564343][ T8782] pim6reg: left allmulticast mode [ 140.648359][ T8782] hub 6-0:1.0: USB hub found [ 140.653397][ T8782] hub 6-0:1.0: 8 ports detected [ 140.771667][ T8800] loop5: detected capacity change from 0 to 512 [ 140.784226][ T8800] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.831738][ T8800] loop5: detected capacity change from 0 to 1024 [ 140.839768][ T8800] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 140.849646][ T8800] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 140.878235][ T8800] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 140.892336][ T8806] bpf_get_probe_write_proto: 8 callbacks suppressed [ 140.892358][ T8806] syz.0.1795[8806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.899613][ T8806] syz.0.1795[8806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.917739][ T8800] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #5: comm syz.5.1792: unexpected bad inode w/o EXT4_IGET_BAD [ 140.944614][ T8806] syz.0.1795[8806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.981565][ T8800] EXT4-fs (loop5): no journal found [ 140.998565][ T8800] EXT4-fs (loop5): can't get journal size [ 141.024577][ T8800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.039572][ T8818] syz.2.1799[8818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.039640][ T8818] syz.2.1799[8818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.051401][ T8818] syz.2.1799[8818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.173093][ T8824] pim6reg: entered allmulticast mode [ 141.262556][ T8824] pim6reg: left allmulticast mode [ 141.368075][ T8824] hub 6-0:1.0: USB hub found [ 141.373281][ T8824] hub 6-0:1.0: 8 ports detected [ 141.389109][ T8840] xt_ecn: cannot match TCP bits for non-tcp packets [ 141.483737][ T6853] EXT4-fs error (device loop5): __ext4_iget:4984: inode #15: block 1803188595: comm syz-executor: invalid block [ 141.502681][ T6853] EXT4-fs error (device loop5): __ext4_iget:4984: inode #15: block 1803188595: comm syz-executor: invalid block [ 141.644882][ T8857] loop0: detected capacity change from 0 to 512 [ 141.681506][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.710496][ T8857] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.722463][ T6853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.733818][ T330] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.828131][ T8868] tipc: Enabling of bearer rejected, failed to enable media [ 141.847708][ T330] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.908629][ T330] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.923948][ T8883] pim6reg: entered allmulticast mode [ 141.932072][ T8883] pim6reg: left allmulticast mode [ 141.972719][ T330] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.994797][ T8877] lo speed is unknown, defaulting to 1000 [ 142.014508][ T8883] hub 6-0:1.0: USB hub found [ 142.019306][ T8883] hub 6-0:1.0: 8 ports detected [ 142.089917][ T330] batman_adv: batadv0: Interface deactivated: geneve2 [ 142.220176][ T330] batman_adv: batadv0: Removing interface: geneve2 [ 142.222542][ T8922] loop2: detected capacity change from 0 to 2048 [ 142.261707][ T8922] loop2: p1 < > p4 < > [ 142.302695][ T330] bond0 (unregistering): Released all slaves [ 142.317715][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 142.369499][ T330] hsr_slave_0: left promiscuous mode [ 142.381750][ T330] hsr_slave_1: left promiscuous mode [ 142.392744][ T330] veth1_macvtap: left promiscuous mode [ 142.398370][ T330] veth0_macvtap: left promiscuous mode [ 142.404272][ T330] veth1_vlan: left promiscuous mode [ 142.409826][ T330] veth0_vlan: left promiscuous mode [ 142.664308][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.671530][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.679613][ T8877] bridge_slave_0: entered allmulticast mode [ 142.686227][ T8877] bridge_slave_0: entered promiscuous mode [ 142.695365][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.703015][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.716712][ T8877] bridge_slave_1: entered allmulticast mode [ 142.723569][ T8877] bridge_slave_1: entered promiscuous mode [ 142.758960][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.775490][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.801080][ T8877] team0: Port device team_slave_0 added [ 142.820363][ T8877] team0: Port device team_slave_1 added [ 142.829229][ T8967] pim6reg: entered allmulticast mode [ 142.854859][ T8967] pim6reg: left allmulticast mode [ 142.868684][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.875746][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.902185][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.956147][ T8967] hub 6-0:1.0: USB hub found [ 142.974530][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.975371][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.987193][ T8967] hub 6-0:1.0: 8 ports detected [ 142.990999][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.007601][ T8984] loop4: detected capacity change from 0 to 1024 [ 143.021576][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.059974][ T8984] EXT4-fs: Ignoring removed orlov option [ 143.065888][ T8984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.125626][ T8994] loop0: detected capacity change from 0 to 512 [ 143.132414][ T8984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.135064][ T8994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.168493][ T8877] hsr_slave_0: entered promiscuous mode [ 143.176142][ T8994] EXT4-fs (loop0): 1 truncate cleaned up [ 143.182357][ T8877] hsr_slave_1: entered promiscuous mode [ 143.188450][ T8994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.201994][ T8877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.209825][ T8877] Cannot create hsr debugfs directory [ 143.215923][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1837'. [ 143.299084][ T8984] netlink: 'syz.4.1837': attribute type 3 has an invalid length. [ 143.309173][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.318886][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 143.318900][ T29] audit: type=1326 audit(1732238500.343:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3439f157e7 code=0x7ffc0000 [ 143.348125][ T29] audit: type=1326 audit(1732238500.343:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3439eba1a9 code=0x7ffc0000 [ 143.371008][ T29] audit: type=1326 audit(1732238500.343:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3439f1e819 code=0x7ffc0000 [ 143.443510][ T29] audit: type=1326 audit(1732238500.353:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="syz.4.1837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3439f1e819 code=0x0 [ 143.466607][ T29] audit: type=1326 audit(1732238500.403:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3439f157e7 code=0x7ffc0000 [ 143.489478][ T29] audit: type=1326 audit(1732238500.403:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3439eba1a9 code=0x7ffc0000 [ 143.512329][ T29] audit: type=1326 audit(1732238500.403:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3439f1e819 code=0x7ffc0000 [ 143.535341][ T29] audit: type=1326 audit(1732238500.453:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3439f157e7 code=0x7ffc0000 [ 143.558731][ T29] audit: type=1326 audit(1732238500.453:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3439eba1a9 code=0x7ffc0000 [ 143.575367][ T8877] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.582273][ T29] audit: type=1326 audit(1732238500.453:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3439f1e819 code=0x7ffc0000 [ 143.633293][ T8877] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.717115][ T8877] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.729922][ T8877] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.744905][ T9038] pim6reg: entered allmulticast mode [ 143.753512][ T9038] pim6reg: left allmulticast mode [ 143.815068][ T9041] ip6t_rpfilter: unknown options [ 143.926213][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.967540][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.984255][ T9038] hub 6-0:1.0: USB hub found [ 144.005544][ T9038] hub 6-0:1.0: 8 ports detected [ 144.026686][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.042537][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.049733][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.109269][ T8877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.119732][ T8877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.192733][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.199874][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.257506][ T9051] loop1: detected capacity change from 0 to 1024 [ 144.269325][ T9051] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 144.269325][ T9051] [ 144.279666][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.280435][ T9051] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 144.533133][ T9094] FAULT_INJECTION: forcing a failure. [ 144.533133][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 144.546031][ T9094] CPU: 0 UID: 0 PID: 9094 Comm: syz.2.1859 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 144.556483][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 144.566729][ T9094] Call Trace: [ 144.570078][ T9094] [ 144.573087][ T9094] dump_stack_lvl+0xf2/0x150 [ 144.577776][ T9094] dump_stack+0x15/0x20 [ 144.581989][ T9094] should_fail_ex+0x223/0x230 [ 144.586712][ T9094] ? skb_clone+0x154/0x1f0 [ 144.591179][ T9094] should_failslab+0x8f/0xb0 [ 144.595910][ T9094] kmem_cache_alloc_noprof+0x4c/0x290 [ 144.601356][ T9094] skb_clone+0x154/0x1f0 [ 144.605672][ T9094] __netlink_deliver_tap+0x2bd/0x4c0 [ 144.611017][ T9094] netlink_dump+0x723/0x760 [ 144.615602][ T9094] netlink_recvmsg+0x427/0x780 [ 144.620452][ T9094] ? __pfx_netlink_recvmsg+0x10/0x10 [ 144.625809][ T9094] sock_recvmsg+0x13f/0x170 [ 144.630435][ T9094] ____sys_recvmsg+0xf9/0x280 [ 144.635244][ T9094] __sys_recvmsg+0x1c0/0x260 [ 144.639884][ T9094] __x64_sys_recvmsg+0x46/0x50 [ 144.644696][ T9094] x64_sys_call+0xc64/0x2dc0 [ 144.649326][ T9094] do_syscall_64+0xc9/0x1c0 [ 144.653867][ T9094] ? clear_bhb_loop+0x55/0xb0 [ 144.658745][ T9094] ? clear_bhb_loop+0x55/0xb0 [ 144.663617][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.669638][ T9094] RIP: 0033:0x7f971ab6e819 [ 144.674080][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.693762][ T9094] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 144.702327][ T9094] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 144.710380][ T9094] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 144.718470][ T9094] RBP: 00007f97191e1090 R08: 0000000000000000 R09: 0000000000000000 [ 144.726488][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.734486][ T9094] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 144.742517][ T9094] [ 144.801710][ T9107] pim6reg: entered allmulticast mode [ 144.825394][ T8877] veth0_vlan: entered promiscuous mode [ 144.840483][ T9107] pim6reg: left allmulticast mode [ 144.870950][ T8877] veth1_vlan: entered promiscuous mode [ 144.905908][ T8877] veth0_macvtap: entered promiscuous mode [ 144.927360][ T9107] hub 6-0:1.0: USB hub found [ 144.936596][ T9107] hub 6-0:1.0: 8 ports detected [ 144.943429][ T8877] veth1_macvtap: entered promiscuous mode [ 144.949862][ T9126] FAULT_INJECTION: forcing a failure. [ 144.949862][ T9126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.963265][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.0.1865 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 144.973642][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 144.983765][ T9126] Call Trace: [ 144.987135][ T9126] [ 144.990096][ T9126] dump_stack_lvl+0xf2/0x150 [ 144.994753][ T9126] dump_stack+0x15/0x20 [ 144.999001][ T9126] should_fail_ex+0x223/0x230 [ 145.003795][ T9126] should_fail+0xb/0x10 [ 145.008107][ T9126] should_fail_usercopy+0x1a/0x20 [ 145.013172][ T9126] _copy_from_user+0x1e/0xb0 [ 145.017809][ T9126] move_addr_to_kernel+0x82/0x120 [ 145.022982][ T9126] __sys_sendto+0x12e/0x230 [ 145.027647][ T9126] __x64_sys_sendto+0x78/0x90 [ 145.032443][ T9126] x64_sys_call+0x29fa/0x2dc0 [ 145.037179][ T9126] do_syscall_64+0xc9/0x1c0 [ 145.041868][ T9126] ? clear_bhb_loop+0x55/0xb0 [ 145.046626][ T9126] ? clear_bhb_loop+0x55/0xb0 [ 145.051458][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.057498][ T9126] RIP: 0033:0x7fec6d53e819 [ 145.062058][ T9126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.081800][ T9126] RSP: 002b:00007fec6bbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 145.090315][ T9126] RAX: ffffffffffffffda RBX: 00007fec6d6f5fa0 RCX: 00007fec6d53e819 [ 145.098375][ T9126] RDX: 000000000000fce0 RSI: 00000000200002c0 RDI: 0000000000000005 [ 145.106376][ T9126] RBP: 00007fec6bbb7090 R08: 0000000020000140 R09: 0000000000000014 [ 145.114380][ T9126] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 145.122454][ T9126] R13: 0000000000000000 R14: 00007fec6d6f5fa0 R15: 00007fffe5292908 [ 145.130547][ T9126] [ 145.151513][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.161075][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.169825][ T8877] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.178839][ T8877] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.187644][ T8877] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.196373][ T8877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.434431][ T9173] loop4: detected capacity change from 0 to 2048 [ 145.460819][ T9181] pim6reg: entered allmulticast mode [ 145.481011][ T9181] pim6reg: left allmulticast mode [ 145.563437][ T9181] hub 6-0:1.0: USB hub found [ 145.568813][ T9181] hub 6-0:1.0: 8 ports detected [ 145.687962][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1884'. [ 145.794924][ T9214] loop0: detected capacity change from 0 to 2048 [ 145.823191][ T9214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.897785][ T9233] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1894'. [ 145.907473][ T9233] FAULT_INJECTION: forcing a failure. [ 145.907473][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 145.920285][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.6.1894 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 145.930933][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 145.942055][ T9233] Call Trace: [ 145.945380][ T9233] [ 145.948374][ T9233] dump_stack_lvl+0xf2/0x150 [ 145.953133][ T9233] dump_stack+0x15/0x20 [ 145.957370][ T9233] should_fail_ex+0x223/0x230 [ 145.962162][ T9233] ? __alloc_skb+0x10b/0x310 [ 145.966821][ T9233] should_failslab+0x8f/0xb0 [ 145.971440][ T9233] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 145.977286][ T9233] __alloc_skb+0x10b/0x310 [ 145.981754][ T9233] netlink_ack+0xef/0x4f0 [ 145.986106][ T9233] netlink_rcv_skb+0x19c/0x230 [ 145.990937][ T9233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.995995][ T9233] genl_rcv+0x28/0x40 [ 146.000083][ T9233] netlink_unicast+0x599/0x670 [ 146.005025][ T9233] netlink_sendmsg+0x5cc/0x6e0 [ 146.009835][ T9233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.015232][ T9233] __sock_sendmsg+0x140/0x180 [ 146.019996][ T9233] ____sys_sendmsg+0x312/0x410 [ 146.024780][ T9233] __sys_sendmsg+0x19d/0x230 [ 146.029434][ T9233] __x64_sys_sendmsg+0x46/0x50 [ 146.034311][ T9233] x64_sys_call+0x2734/0x2dc0 [ 146.039103][ T9233] do_syscall_64+0xc9/0x1c0 [ 146.043674][ T9233] ? clear_bhb_loop+0x55/0xb0 [ 146.048408][ T9233] ? clear_bhb_loop+0x55/0xb0 [ 146.053104][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.059015][ T9233] RIP: 0033:0x7f79737ee819 [ 146.063435][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.083088][ T9233] RSP: 002b:00007f7971e67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.091632][ T9233] RAX: ffffffffffffffda RBX: 00007f79739a5fa0 RCX: 00007f79737ee819 [ 146.099660][ T9233] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 146.107676][ T9233] RBP: 00007f7971e67090 R08: 0000000000000000 R09: 0000000000000000 [ 146.115660][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.123694][ T9233] R13: 0000000000000000 R14: 00007f79739a5fa0 R15: 00007ffca12dfb68 [ 146.131692][ T9233] [ 146.163827][ T9237] pim6reg: entered allmulticast mode [ 146.171738][ T9237] pim6reg: left allmulticast mode [ 146.254581][ T9237] hub 6-0:1.0: USB hub found [ 146.259389][ T9237] hub 6-0:1.0: 8 ports detected [ 146.489292][ T9268] pim6reg: entered allmulticast mode [ 146.497389][ T9268] pim6reg: left allmulticast mode [ 146.578803][ T9268] hub 6-0:1.0: USB hub found [ 146.588401][ T9268] hub 6-0:1.0: 8 ports detected [ 146.637807][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.753704][ T9292] FAULT_INJECTION: forcing a failure. [ 146.753704][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.767053][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.6.1918 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 146.777473][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 146.787729][ T9292] Call Trace: [ 146.791014][ T9292] [ 146.794048][ T9292] dump_stack_lvl+0xf2/0x150 [ 146.798758][ T9292] dump_stack+0x15/0x20 [ 146.802979][ T9292] should_fail_ex+0x223/0x230 [ 146.807689][ T9292] should_fail+0xb/0x10 [ 146.811926][ T9292] should_fail_usercopy+0x1a/0x20 [ 146.817075][ T9292] _copy_from_iter+0xd5/0xd00 [ 146.821816][ T9292] ? kmalloc_reserve+0x16e/0x190 [ 146.826792][ T9292] ? __build_skb_around+0x196/0x1f0 [ 146.832086][ T9292] ? __alloc_skb+0x21f/0x310 [ 146.836782][ T9292] ? __virt_addr_valid+0x1ed/0x250 [ 146.841907][ T9292] ? __check_object_size+0x364/0x520 [ 146.847278][ T9292] netlink_sendmsg+0x460/0x6e0 [ 146.852189][ T9292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.857523][ T9292] __sock_sendmsg+0x140/0x180 [ 146.862245][ T9292] ____sys_sendmsg+0x312/0x410 [ 146.867132][ T9292] __sys_sendmmsg+0x227/0x4b0 [ 146.871899][ T9292] __x64_sys_sendmmsg+0x57/0x70 [ 146.876840][ T9292] x64_sys_call+0x29aa/0x2dc0 [ 146.881557][ T9292] do_syscall_64+0xc9/0x1c0 [ 146.886181][ T9292] ? clear_bhb_loop+0x55/0xb0 [ 146.890901][ T9292] ? clear_bhb_loop+0x55/0xb0 [ 146.895614][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.901544][ T9292] RIP: 0033:0x7f79737ee819 [ 146.906047][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.926007][ T9292] RSP: 002b:00007f7971e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.934498][ T9292] RAX: ffffffffffffffda RBX: 00007f79739a5fa0 RCX: 00007f79737ee819 [ 146.942846][ T9292] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 146.950830][ T9292] RBP: 00007f7971e67090 R08: 0000000000000000 R09: 0000000000000000 [ 146.958832][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.966867][ T9292] R13: 0000000000000000 R14: 00007f79739a5fa0 R15: 00007ffca12dfb68 [ 146.974870][ T9292] [ 147.005660][ T9294] loop1: detected capacity change from 0 to 512 [ 147.012366][ T9294] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 147.089444][ T9304] pim6reg: entered allmulticast mode [ 147.124352][ T9304] pim6reg: left allmulticast mode [ 147.180168][ T9315] loop2: detected capacity change from 0 to 512 [ 147.186938][ T9315] EXT4-fs: Invalid want_extra_isize 7 [ 147.206064][ T9304] hub 6-0:1.0: USB hub found [ 147.216748][ T9304] hub 6-0:1.0: 8 ports detected [ 147.295790][ T9331] loop2: detected capacity change from 0 to 512 [ 147.310976][ T9336] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 147.320657][ T9331] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1934: attempt to clear invalid blocks 1 len 1 [ 147.337222][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.342195][ T9331] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1934: bg 0: block 343: padding at end of block bitmap is not set [ 147.346806][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.364857][ T9334] delete_channel: no stack [ 147.373491][ T9331] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 147.385962][ T9338] IPv4: Oversized IP packet from 127.202.26.0 [ 147.393103][ T9331] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1934: invalid indirect mapped block 1819239214 (level 0) [ 147.408292][ T9331] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1934: invalid indirect mapped block 1819239214 (level 1) [ 147.423347][ T9331] EXT4-fs (loop2): 1 truncate cleaned up [ 147.429277][ T9331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.442054][ T9331] FAULT_INJECTION: forcing a failure. [ 147.442054][ T9331] name failslab, interval 1, probability 0, space 0, times 0 [ 147.454850][ T9331] CPU: 1 UID: 0 PID: 9331 Comm: syz.2.1934 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 147.465295][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 147.475610][ T9331] Call Trace: [ 147.478899][ T9331] [ 147.482011][ T9331] dump_stack_lvl+0xf2/0x150 [ 147.486755][ T9331] dump_stack+0x15/0x20 [ 147.490939][ T9331] should_fail_ex+0x223/0x230 [ 147.495736][ T9331] ? __d_alloc+0x3d/0x340 [ 147.500152][ T9331] should_failslab+0x8f/0xb0 [ 147.504760][ T9331] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 147.510664][ T9331] ? avc_has_perm+0xd4/0x160 [ 147.515450][ T9331] __d_alloc+0x3d/0x340 [ 147.519812][ T9331] d_alloc_parallel+0x54/0xc60 [ 147.524641][ T9331] ? selinux_inode_permission+0x341/0x410 [ 147.530468][ T9331] ? lockref_get_not_dead+0x118/0x1b0 [ 147.535859][ T9331] ? down_read+0x171/0x4b0 [ 147.540333][ T9331] __lookup_slow+0x8d/0x250 [ 147.544903][ T9331] lookup_slow+0x3c/0x60 [ 147.549202][ T9331] walk_component+0x1f5/0x230 [ 147.553948][ T9331] ? path_lookupat+0xfd/0x2b0 [ 147.558686][ T9331] path_lookupat+0x10a/0x2b0 [ 147.563656][ T9331] filename_lookup+0x150/0x340 [ 147.568501][ T9331] user_path_at+0x3c/0x120 [ 147.572958][ T9331] __se_sys_mount+0x248/0x2d0 [ 147.577661][ T9331] __x64_sys_mount+0x67/0x80 [ 147.582314][ T9331] x64_sys_call+0x2c84/0x2dc0 [ 147.587054][ T9331] do_syscall_64+0xc9/0x1c0 [ 147.591618][ T9331] ? clear_bhb_loop+0x55/0xb0 [ 147.596432][ T9331] ? clear_bhb_loop+0x55/0xb0 [ 147.601152][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.607155][ T9331] RIP: 0033:0x7f971ab6e819 [ 147.611595][ T9331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.631353][ T9331] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.639973][ T9331] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 147.648276][ T9331] RDX: 0000000020000180 RSI: 0000000020000040 RDI: 0000000000000000 [ 147.656268][ T9331] RBP: 00007f97191e1090 R08: 0000000020000100 R09: 0000000000000000 [ 147.664392][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.672585][ T9331] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 147.680776][ T9331] [ 147.700103][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.743940][ T9346] mmap: syz.2.1940 (9346): VmData 112943104 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 147.878033][ T9358] FAULT_INJECTION: forcing a failure. [ 147.878033][ T9358] name failslab, interval 1, probability 0, space 0, times 0 [ 147.890886][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1946 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 147.901257][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 147.911406][ T9358] Call Trace: [ 147.914716][ T9358] [ 147.917671][ T9358] dump_stack_lvl+0xf2/0x150 [ 147.922346][ T9358] dump_stack+0x15/0x20 [ 147.926671][ T9358] should_fail_ex+0x223/0x230 [ 147.931523][ T9358] ? __alloc_skb+0x10b/0x310 [ 147.936271][ T9358] should_failslab+0x8f/0xb0 [ 147.941216][ T9358] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 147.947086][ T9358] ? __rtnl_unlock+0x99/0xb0 [ 147.951716][ T9358] __alloc_skb+0x10b/0x310 [ 147.956200][ T9358] netlink_ack+0xef/0x4f0 [ 147.960647][ T9358] ? __dev_queue_xmit+0x161/0x2040 [ 147.965804][ T9358] ? ref_tracker_alloc+0x1f5/0x2f0 [ 147.970946][ T9358] netlink_rcv_skb+0x19c/0x230 [ 147.975776][ T9358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.981276][ T9358] rtnetlink_rcv+0x1c/0x30 [ 147.985801][ T9358] netlink_unicast+0x599/0x670 [ 147.990583][ T9358] netlink_sendmsg+0x5cc/0x6e0 [ 147.995640][ T9358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.000955][ T9358] __sock_sendmsg+0x140/0x180 [ 148.005708][ T9358] ____sys_sendmsg+0x312/0x410 [ 148.010625][ T9358] __sys_sendmsg+0x19d/0x230 [ 148.015257][ T9358] __x64_sys_sendmsg+0x46/0x50 [ 148.020123][ T9358] x64_sys_call+0x2734/0x2dc0 [ 148.024870][ T9358] do_syscall_64+0xc9/0x1c0 [ 148.029408][ T9358] ? clear_bhb_loop+0x55/0xb0 [ 148.034137][ T9358] ? clear_bhb_loop+0x55/0xb0 [ 148.038899][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.044842][ T9358] RIP: 0033:0x7f971ab6e819 [ 148.049371][ T9358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.069001][ T9358] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.077474][ T9358] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 148.085494][ T9358] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 148.093507][ T9358] RBP: 00007f97191e1090 R08: 0000000000000000 R09: 0000000000000000 [ 148.101490][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.109514][ T9358] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 148.117544][ T9358] [ 148.273755][ T9379] loop4: detected capacity change from 0 to 256 [ 148.295990][ T9379] FAT-fs (loop4): Directory bread(block 64) failed [ 148.311285][ T9379] FAT-fs (loop4): Directory bread(block 65) failed [ 148.325774][ T9379] FAT-fs (loop4): Directory bread(block 66) failed [ 148.339084][ T9379] FAT-fs (loop4): Directory bread(block 67) failed [ 148.355332][ T9379] FAT-fs (loop4): Directory bread(block 68) failed [ 148.369091][ T9379] FAT-fs (loop4): Directory bread(block 69) failed [ 148.383527][ T9379] FAT-fs (loop4): Directory bread(block 70) failed [ 148.397974][ T9379] FAT-fs (loop4): Directory bread(block 71) failed [ 148.411415][ T9379] FAT-fs (loop4): Directory bread(block 72) failed [ 148.434869][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 148.435914][ T9379] FAT-fs (loop4): Directory bread(block 73) failed [ 148.463147][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 148.463166][ T29] audit: type=1400 audit(1732238505.483:7574): avc: denied { bind } for pid=9387 comm="syz.6.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.496990][ T9379] bio_check_eod: 19448 callbacks suppressed [ 148.497012][ T9379] syz.4.1955: attempt to access beyond end of device [ 148.497012][ T9379] loop4: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 148.526440][ T29] audit: type=1326 audit(1732238505.553:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971ab6e819 code=0x7ffc0000 [ 148.542798][ T9379] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 326) [ 148.558389][ T9379] FAT-fs (loop4): Filesystem has been set read-only [ 148.567607][ T9389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.586646][ T9379] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 326) [ 148.597424][ T29] audit: type=1326 audit(1732238505.583:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971ab6e819 code=0x7ffc0000 [ 148.621283][ T29] audit: type=1326 audit(1732238505.583:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971ab6e819 code=0x7ffc0000 [ 148.644867][ T29] audit: type=1326 audit(1732238505.583:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971ab6e819 code=0x7ffc0000 [ 148.668624][ T29] audit: type=1326 audit(1732238505.583:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971ab6e819 code=0x7ffc0000 [ 148.680114][ T9396] loop2: detected capacity change from 0 to 1024 [ 148.692101][ T29] audit: type=1326 audit(1732238505.583:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971ab6d1b0 code=0x7ffc0000 [ 148.721905][ T29] audit: type=1326 audit(1732238505.583:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f971ab6d2ff code=0x7ffc0000 [ 148.745201][ T29] audit: type=1326 audit(1732238505.583:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971ab6e819 code=0x7ffc0000 [ 148.768689][ T29] audit: type=1326 audit(1732238505.583:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f971ab6d25c code=0x7ffc0000 [ 148.815330][ T9396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.830638][ T9401] loop4: detected capacity change from 0 to 128 [ 148.840622][ T9389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.855685][ T9401] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.863692][ T9401] FAT-fs (loop4): Filesystem has been set read-only [ 148.881139][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.892217][ T9401] syz.4.1962: attempt to access beyond end of device [ 148.892217][ T9401] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 148.906734][ T9401] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.914712][ T9401] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 148.932089][ T9401] syz.4.1962: attempt to access beyond end of device [ 148.932089][ T9401] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.949555][ T9401] syz.4.1962: attempt to access beyond end of device [ 148.949555][ T9401] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.977623][ T9401] syz.4.1962: attempt to access beyond end of device [ 148.977623][ T9401] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.995895][ T9389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.053044][ T9408] loop2: detected capacity change from 0 to 128 [ 149.055234][ T9403] IPVS: persistence engine module ip_vs_pe_@ not found [ 149.076265][ T9389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.087736][ T9408] FAULT_INJECTION: forcing a failure. [ 149.087736][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 149.100546][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.2.1963 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 149.110916][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 149.121036][ T9408] Call Trace: [ 149.124400][ T9408] [ 149.127354][ T9408] dump_stack_lvl+0xf2/0x150 [ 149.132000][ T9408] dump_stack+0x15/0x20 [ 149.136201][ T9408] should_fail_ex+0x223/0x230 [ 149.140936][ T9408] ? alloc_pipe_info+0xb0/0x360 [ 149.145883][ T9408] should_failslab+0x8f/0xb0 [ 149.150545][ T9408] __kmalloc_cache_noprof+0x4b/0x2a0 [ 149.155882][ T9408] alloc_pipe_info+0xb0/0x360 [ 149.160632][ T9408] splice_direct_to_actor+0x60f/0x670 [ 149.166070][ T9408] ? __pfx_direct_splice_actor+0x10/0x10 [ 149.171775][ T9408] ? 0xffffffff81000000 [ 149.176035][ T9408] ? selinux_file_permission+0x22a/0x360 [ 149.181746][ T9408] ? __rcu_read_unlock+0x4e/0x70 [ 149.186763][ T9408] ? avc_policy_seqno+0x15/0x20 [ 149.191639][ T9408] ? selinux_file_permission+0x22a/0x360 [ 149.197435][ T9408] do_splice_direct+0xd7/0x150 [ 149.202253][ T9408] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 149.208172][ T9408] do_sendfile+0x398/0x660 [ 149.212624][ T9408] __x64_sys_sendfile64+0x110/0x150 [ 149.218049][ T9408] x64_sys_call+0xfbd/0x2dc0 [ 149.222682][ T9408] do_syscall_64+0xc9/0x1c0 [ 149.227269][ T9408] ? clear_bhb_loop+0x55/0xb0 [ 149.232047][ T9408] ? clear_bhb_loop+0x55/0xb0 [ 149.236753][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.242671][ T9408] RIP: 0033:0x7f971ab6e819 [ 149.247125][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.266889][ T9408] RSP: 002b:00007f97191e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.275733][ T9408] RAX: ffffffffffffffda RBX: 00007f971ad25fa0 RCX: 00007f971ab6e819 [ 149.283718][ T9408] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 149.291765][ T9408] RBP: 00007f97191e1090 R08: 0000000000000000 R09: 0000000000000000 [ 149.299751][ T9408] R10: 0000000000007f06 R11: 0000000000000246 R12: 0000000000000001 [ 149.307743][ T9408] R13: 0000000000000000 R14: 00007f971ad25fa0 R15: 00007ffcf01b0ee8 [ 149.315926][ T9408] [ 149.362773][ T9421] FAULT_INJECTION: forcing a failure. [ 149.362773][ T9421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.376223][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.1.1970 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 149.386676][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 149.396887][ T9421] Call Trace: [ 149.400292][ T9421] [ 149.403366][ T9421] dump_stack_lvl+0xf2/0x150 [ 149.408085][ T9421] dump_stack+0x15/0x20 [ 149.412280][ T9421] should_fail_ex+0x223/0x230 [ 149.416997][ T9421] should_fail_alloc_page+0xfd/0x110 [ 149.422387][ T9421] __alloc_pages_noprof+0x109/0x340 [ 149.427618][ T9421] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 149.433073][ T9421] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 149.438497][ T9421] handle_mm_fault+0xdbe/0x2aa0 [ 149.443409][ T9421] exc_page_fault+0x3b9/0x650 [ 149.448196][ T9421] asm_exc_page_fault+0x26/0x30 [ 149.453228][ T9421] RIP: 0033:0x7f70e6181900 [ 149.457669][ T9421] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 149.477489][ T9421] RSP: 002b:00007f70e49364a0 EFLAGS: 00010286 [ 149.483613][ T9421] RAX: 0000000000001000 RBX: 00007f70e4936540 RCX: 0000000000000001 [ 149.491603][ T9421] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f70e49365e0 [ 149.499612][ T9421] RBP: 00000000000000f7 R08: 00007f70dc517000 R09: 00000000000000ff [ 149.507595][ T9421] R10: 0000000000000000 R11: 00007f70e4936550 R12: 0000000000000001 [ 149.515597][ T9421] R13: 00007f70e6345fa0 R14: 0000000000000000 R15: 00007f70e49365e0 [ 149.523613][ T9421] [ 149.527124][ T9421] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 149.578052][ T9421] loop1: detected capacity change from 0 to 1024 [ 149.591636][ T9421] EXT4-fs: Ignoring removed orlov option [ 149.597638][ T9421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.600228][ T9389] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.615910][ T9421] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.627696][ T9421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 149.637894][ T9421] EXT4-fs (loop1): invalid journal inode [ 149.641919][ T9389] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.643677][ T9421] EXT4-fs (loop1): can't get journal size [ 149.659750][ T9421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.673015][ T9389] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.684752][ T9389] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.686666][ T9425] loop2: detected capacity change from 0 to 512 [ 149.717145][ T9425] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1971: corrupted in-inode xattr: invalid ea_ino [ 149.751444][ T9425] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1971: couldn't read orphan inode 15 (err -117) [ 149.764774][ T9425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.797069][ T3326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.813768][ T9438] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1977'. [ 149.822825][ T9438] 0ªX¹¦À: renamed from caif0 [ 149.837246][ T9442] FAULT_INJECTION: forcing a failure. [ 149.837246][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 149.848864][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.849965][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.1.1978 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 149.869196][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 149.879271][ T9442] Call Trace: [ 149.882593][ T9442] [ 149.885547][ T9442] dump_stack_lvl+0xf2/0x150 [ 149.890194][ T9442] dump_stack+0x15/0x20 [ 149.894393][ T9442] should_fail_ex+0x223/0x230 [ 149.899172][ T9442] ? __proc_create+0x254/0x4a0 [ 149.904040][ T9442] should_failslab+0x8f/0xb0 [ 149.908683][ T9442] kmem_cache_alloc_noprof+0x4c/0x290 [ 149.914095][ T9442] __proc_create+0x254/0x4a0 [ 149.918711][ T9442] _proc_mkdir+0x5f/0x100 [ 149.923063][ T9442] netfilter_net_init+0x1e4/0x240 [ 149.928126][ T9442] ops_init+0x1c9/0x260 [ 149.932303][ T9442] setup_net+0x14d/0x600 [ 149.936590][ T9442] copy_net_ns+0x290/0x430 [ 149.941076][ T9442] create_new_namespaces+0x228/0x430 [ 149.946428][ T9442] unshare_nsproxy_namespaces+0xe6/0x120 [ 149.952134][ T9442] ksys_unshare+0x3c9/0x6e0 [ 149.956670][ T9442] __x64_sys_unshare+0x1f/0x30 [ 149.961463][ T9442] x64_sys_call+0x1a3e/0x2dc0 [ 149.966161][ T9442] do_syscall_64+0xc9/0x1c0 [ 149.970734][ T9442] ? clear_bhb_loop+0x55/0xb0 [ 149.975527][ T9442] ? clear_bhb_loop+0x55/0xb0 [ 149.980232][ T9442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.986159][ T9442] RIP: 0033:0x7f70e62be819 [ 149.990600][ T9442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.010331][ T9442] RSP: 002b:00007f70e4937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.018866][ T9442] RAX: ffffffffffffffda RBX: 00007f70e6475fa0 RCX: 00007f70e62be819 [ 150.026881][ T9442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 150.034990][ T9442] RBP: 00007f70e4937090 R08: 0000000000000000 R09: 0000000000000000 [ 150.042989][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.051057][ T9442] R13: 0000000000000000 R14: 00007f70e6475fa0 R15: 00007ffd61b6ddf8 [ 150.059057][ T9442] [ 150.062211][ T9442] cannot create netfilter proc entry [ 150.083418][ T9438] 0ªX¹¦À: entered allmulticast mode [ 150.088715][ T9438] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 150.114839][ T9440] pim6reg: entered allmulticast mode [ 150.117060][ T9448] loop2: detected capacity change from 0 to 1024 [ 150.127765][ T9448] EXT4-fs: Ignoring removed oldalloc option [ 150.134362][ T9448] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.146415][ T9443] pim6reg: left allmulticast mode [ 150.157361][ T9448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.177710][ T9440] hub 6-0:1.0: USB hub found [ 150.184000][ T9440] hub 6-0:1.0: 8 ports detected [ 150.212643][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.294421][ T9464] FAULT_INJECTION: forcing a failure. [ 150.294421][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 150.307182][ T9464] CPU: 0 UID: 0 PID: 9464 Comm: syz.0.1986 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 150.317618][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.327701][ T9464] Call Trace: [ 150.331079][ T9464] [ 150.334048][ T9464] dump_stack_lvl+0xf2/0x150 [ 150.338680][ T9464] dump_stack+0x15/0x20 [ 150.342920][ T9464] should_fail_ex+0x223/0x230 [ 150.347735][ T9464] ? radix_tree_node_alloc+0x8b/0x1e0 [ 150.353201][ T9464] should_failslab+0x8f/0xb0 [ 150.357814][ T9464] kmem_cache_alloc_noprof+0x4c/0x290 [ 150.363229][ T9464] radix_tree_node_alloc+0x8b/0x1e0 [ 150.368641][ T9464] ? __rcu_read_unlock+0x4e/0x70 [ 150.374020][ T9464] idr_get_free+0x1f5/0x550 [ 150.378600][ T9464] idr_alloc_u32+0xcb/0x180 [ 150.383113][ T9464] idr_alloc_cyclic+0x85/0x140 [ 150.387926][ T9464] bpf_link_prime+0x6d/0x1e0 [ 150.392605][ T9464] bpf_xdp_link_attach+0x11d/0x370 [ 150.397742][ T9464] link_create+0x3d0/0x650 [ 150.402200][ T9464] __sys_bpf+0x430/0x7a0 [ 150.406483][ T9464] __x64_sys_bpf+0x43/0x50 [ 150.410917][ T9464] x64_sys_call+0x2914/0x2dc0 [ 150.415664][ T9464] do_syscall_64+0xc9/0x1c0 [ 150.420270][ T9464] ? clear_bhb_loop+0x55/0xb0 [ 150.425146][ T9464] ? clear_bhb_loop+0x55/0xb0 [ 150.430012][ T9464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.435929][ T9464] RIP: 0033:0x7fec6d53e819 [ 150.440460][ T9464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.460201][ T9464] RSP: 002b:00007fec6bbb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.468721][ T9464] RAX: ffffffffffffffda RBX: 00007fec6d6f5fa0 RCX: 00007fec6d53e819 [ 150.476891][ T9464] RDX: 0000000000000040 RSI: 0000000020000240 RDI: 000000000000001c [ 150.484878][ T9464] RBP: 00007fec6bbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.492858][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.500909][ T9464] R13: 0000000000000000 R14: 00007fec6d6f5fa0 R15: 00007fffe5292908 [ 150.509031][ T9464] [ 150.613142][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1990'. [ 150.627780][ T9468] bridge0: port 3(vlan3) entered blocking state [ 150.634254][ T9468] bridge0: port 3(vlan3) entered disabled state [ 150.641360][ T9468] vlan3: entered allmulticast mode [ 150.651037][ T9468] vlan3: left allmulticast mode [ 150.675531][ T9491] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.685543][ T9491] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.746762][ T9502] loop6: detected capacity change from 0 to 512 [ 150.764053][ T9491] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.774199][ T9491] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.784799][ T9502] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 150.793925][ T9502] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 150.797892][ T9508] loop2: detected capacity change from 0 to 128 [ 150.804862][ T9502] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 150.821797][ T9502] EXT4-fs (loop6): 1 truncate cleaned up [ 150.827959][ T9502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.872883][ T9491] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.882833][ T9491] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.898482][ T8877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.942729][ T9491] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.952771][ T9491] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.004739][ T9520] syz.0.2006[9520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.004808][ T9520] syz.0.2006[9520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.026316][ T9520] syz.0.2006[9520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.057034][ T9520] loop0: detected capacity change from 0 to 164 [ 151.061138][ T9491] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.071800][ T9491] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.072729][ T9520] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 151.099070][ T9522] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2007'. [ 151.102587][ T9520] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 151.109567][ T9491] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.121200][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 151.124766][ T9491] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.157510][ T9491] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.165871][ T9491] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.184323][ T9491] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.192684][ T9491] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.202838][ T9526] netlink: 'syz.6.2008': attribute type 10 has an invalid length. [ 151.226545][ T9526] lo: entered promiscuous mode [ 151.233773][ T9526] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.248813][ T9498] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.258797][ T9498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.313324][ T9498] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.323235][ T9498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.394535][ T9498] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.404502][ T9498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.416338][ T9541] FAULT_INJECTION: forcing a failure. [ 151.416338][ T9541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.429524][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.6.2014 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 151.439863][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.450009][ T9541] Call Trace: [ 151.453313][ T9541] [ 151.456387][ T9541] dump_stack_lvl+0xf2/0x150 [ 151.461623][ T9541] dump_stack+0x15/0x20 [ 151.465819][ T9541] should_fail_ex+0x223/0x230 [ 151.470509][ T9541] should_fail+0xb/0x10 [ 151.474695][ T9541] should_fail_usercopy+0x1a/0x20 [ 151.479817][ T9541] _copy_to_user+0x20/0xa0 [ 151.484355][ T9541] simple_read_from_buffer+0xa0/0x110 [ 151.489769][ T9541] proc_fail_nth_read+0xf9/0x140 [ 151.494884][ T9541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.500515][ T9541] vfs_read+0x1a2/0x700 [ 151.504698][ T9541] ? __rcu_read_unlock+0x4e/0x70 [ 151.509711][ T9541] ? __fget_files+0x17c/0x1c0 [ 151.514599][ T9541] ksys_read+0xe8/0x1b0 [ 151.518810][ T9541] __x64_sys_read+0x42/0x50 [ 151.523553][ T9541] x64_sys_call+0x2874/0x2dc0 [ 151.528383][ T9541] do_syscall_64+0xc9/0x1c0 [ 151.533004][ T9541] ? clear_bhb_loop+0x55/0xb0 [ 151.537815][ T9541] ? clear_bhb_loop+0x55/0xb0 [ 151.542623][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.548750][ T9541] RIP: 0033:0x7f79737ed25c [ 151.553227][ T9541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 151.573092][ T9541] RSP: 002b:00007f7971e67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.581540][ T9541] RAX: ffffffffffffffda RBX: 00007f79739a5fa0 RCX: 00007f79737ed25c [ 151.589521][ T9541] RDX: 000000000000000f RSI: 00007f7971e670a0 RDI: 0000000000000006 [ 151.597536][ T9541] RBP: 00007f7971e67090 R08: 0000000000000000 R09: 0000000000000000 [ 151.605521][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.613726][ T9541] R13: 0000000000000000 R14: 00007f79739a5fa0 R15: 00007ffca12dfb68 [ 151.621817][ T9541] [ 151.682448][ T9498] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.692454][ T9498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.744242][ T9553] loop2: detected capacity change from 0 to 1024 [ 151.762634][ T9553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.777879][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 151.798806][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.867540][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2021'. [ 151.938236][ T9568] loop2: detected capacity change from 0 to 128 [ 152.077992][ T9575] loop0: detected capacity change from 0 to 1024 [ 152.084869][ T9575] ext4: Unknown parameter 'nouser_xattr' [ 152.093107][ T9575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2026'. [ 152.102291][ T9575] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2026'. [ 152.111390][ T9575] netlink: 'syz.0.2026': attribute type 5 has an invalid length. [ 152.119208][ T9575] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2026'. [ 152.437692][ T9581] netlink: 'syz.4.2028': attribute type 3 has an invalid length. [ 152.445927][ T9581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62770 sclass=netlink_route_socket pid=9581 comm=syz.4.2028 [ 152.469367][ T9581] atomic_op ffff88811ada8528 conn xmit_atomic 0000000000000000 [ 152.477610][ T9581] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.510626][ T9584] tipc: Started in network mode [ 152.515735][ T9584] tipc: Node identity e2d8f288efff, cluster identity 4711 [ 152.523227][ T9584] tipc: Enabled bearer , priority 0 [ 152.559260][ T9584] tipc: Resetting bearer [ 152.567882][ T9586] lo speed is unknown, defaulting to 1000 [ 152.574062][ T9583] tipc: Resetting bearer [ 152.590941][ T9583] tipc: Disabling bearer [ 152.642639][ T9589] loop6: detected capacity change from 0 to 1024 [ 152.650561][ T9589] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 152.681970][ T9589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.698488][ T9589] ipip0: entered promiscuous mode [ 152.703790][ T9589] ipip0: entered allmulticast mode [ 152.712803][ T9589] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.6.2031: corrupted in-inode xattr: bad magic number in in-inode xattr [ 152.747999][ T8877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.832020][ T9604] loop6: detected capacity change from 0 to 128 [ 152.989040][ T9617] loop2: detected capacity change from 0 to 512 [ 153.018694][ T9617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.052597][ T9619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=9619 comm=syz.4.2042 [ 153.053122][ T9617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.105216][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.152845][ T9630] loop0: detected capacity change from 0 to 256 [ 153.162815][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.168988][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.187272][ T9630] loop0: detected capacity change from 0 to 256 [ 153.216929][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.223468][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.233439][ T9630] loop0: detected capacity change from 0 to 256 [ 153.245240][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.251720][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.265441][ T9630] loop0: detected capacity change from 0 to 256 [ 153.273056][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.279170][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.295059][ T9630] loop0: detected capacity change from 0 to 256 [ 153.303219][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.309603][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.332632][ T9630] loop0: detected capacity change from 0 to 256 [ 153.339474][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.345789][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.364432][ T9630] loop0: detected capacity change from 0 to 256 [ 153.371999][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.378211][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.379368][ T9636] loop4: detected capacity change from 0 to 128 [ 153.394468][ T9630] loop0: detected capacity change from 0 to 256 [ 153.403088][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.409387][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.430114][ T9630] loop0: detected capacity change from 0 to 256 [ 153.437556][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.443739][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.458002][ T9640] FAULT_INJECTION: forcing a failure. [ 153.458002][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 153.460073][ T9630] loop0: detected capacity change from 0 to 256 [ 153.470771][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.4.2049 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 153.479708][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.487290][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 153.487308][ T9640] Call Trace: [ 153.487316][ T9640] [ 153.487326][ T9640] dump_stack_lvl+0xf2/0x150 [ 153.493500][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.521224][ T9640] dump_stack+0x15/0x20 [ 153.524187][ T9630] loop0: detected capacity change from 0 to 256 [ 153.525576][ T9640] should_fail_ex+0x223/0x230 [ 153.536778][ T9640] ? alloc_pipe_info+0x1cb/0x360 [ 153.541782][ T9640] should_failslab+0x8f/0xb0 [ 153.546517][ T9640] __kmalloc_noprof+0xa5/0x370 [ 153.549621][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.551315][ T9640] alloc_pipe_info+0x1cb/0x360 [ 153.557427][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.562186][ T9640] fifo_open+0xb9/0x5d0 [ 153.573046][ T9640] ? __pfx_fifo_open+0x10/0x10 [ 153.578056][ T9640] do_dentry_open+0x621/0xa20 [ 153.582862][ T9640] vfs_open+0x38/0x1f0 [ 153.587035][ T9640] path_openat+0x1ac2/0x1fa0 [ 153.591762][ T9640] ? kstrtoull+0x110/0x140 [ 153.595059][ T9630] loop0: detected capacity change from 0 to 256 [ 153.596209][ T9640] ? kstrtouint_from_user+0xb0/0xe0 [ 153.607680][ T9640] do_filp_open+0x107/0x230 [ 153.612289][ T9640] do_sys_openat2+0xab/0x120 [ 153.616960][ T9640] __x64_sys_open+0xe6/0x110 [ 153.621627][ T9640] x64_sys_call+0x13e1/0x2dc0 [ 153.626377][ T9640] do_syscall_64+0xc9/0x1c0 [ 153.630912][ T9640] ? clear_bhb_loop+0x55/0xb0 [ 153.635667][ T9640] ? clear_bhb_loop+0x55/0xb0 [ 153.640480][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.646403][ T9640] RIP: 0033:0x7f3439f1e819 [ 153.650858][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.670784][ T9640] RSP: 002b:00007f3438591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 153.679269][ T9640] RAX: ffffffffffffffda RBX: 00007f343a0d5fa0 RCX: 00007f3439f1e819 [ 153.687299][ T9640] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000020000100 [ 153.695293][ T9640] RBP: 00007f3438591090 R08: 0000000000000000 R09: 0000000000000000 [ 153.703465][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.711611][ T9640] R13: 0000000000000000 R14: 00007f343a0d5fa0 R15: 00007ffdf01a0ac8 [ 153.719606][ T9640] [ 153.723511][ T9] ================================================================== [ 153.731657][ T9] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 153.740407][ T9] [ 153.742737][ T9] read-write to 0xffff8881004cdcf0 of 8 bytes by task 9630 on cpu 1: [ 153.750814][ T9] delete_from_page_cache_batch+0x4f3/0x700 [ 153.756750][ T9] truncate_inode_pages_range+0x1c5/0x6b0 [ 153.763053][ T9] truncate_inode_pages+0x24/0x30 [ 153.768413][ T9] set_blocksize+0x258/0x270 [ 153.773116][ T9] sb_min_blocksize+0x63/0xe0 [ 153.777861][ T9] fat_fill_super+0x33a/0x1bf0 [ 153.782769][ T9] vfat_fill_super+0x24/0x30 [ 153.787372][ T9] get_tree_bdev_flags+0x29f/0x310 [ 153.792595][ T9] get_tree_bdev+0x1f/0x30 [ 153.797041][ T9] vfat_get_tree+0x1c/0x30 [ 153.801488][ T9] vfs_get_tree+0x56/0x1e0 [ 153.805917][ T9] do_new_mount+0x227/0x690 [ 153.810438][ T9] path_mount+0x49b/0xb30 [ 153.814816][ T9] __se_sys_mount+0x27c/0x2d0 [ 153.819511][ T9] __x64_sys_mount+0x67/0x80 [ 153.824153][ T9] x64_sys_call+0x2c84/0x2dc0 [ 153.828867][ T9] do_syscall_64+0xc9/0x1c0 [ 153.833415][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.839330][ T9] [ 153.841662][ T9] read to 0xffff8881004cdcf0 of 8 bytes by task 9 on cpu 0: [ 153.848947][ T9] nr_blockdev_pages+0x7c/0xd0 [ 153.853746][ T9] si_meminfo+0x87/0xd0 [ 153.857942][ T9] update_defense_level+0x49/0x5b0 [ 153.863069][ T9] defense_work_handler+0x1f/0x80 [ 153.868152][ T9] process_scheduled_works+0x483/0x9a0 [ 153.873619][ T9] worker_thread+0x51d/0x6f0 [ 153.878246][ T9] kthread+0x1d1/0x210 [ 153.882327][ T9] ret_from_fork+0x4b/0x60 [ 153.886780][ T9] ret_from_fork_asm+0x1a/0x30 [ 153.891562][ T9] [ 153.893900][ T9] value changed: 0x0000000000000009 -> 0x0000000000000000 [ 153.901015][ T9] [ 153.903353][ T9] Reported by Kernel Concurrency Sanitizer on: [ 153.909544][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 153.919787][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 153.930020][ T9] Workqueue: events_long defense_work_handler [ 153.936210][ T9] ================================================================== [ 153.949636][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 153.955803][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 153.995990][ T9630] loop0: detected capacity change from 0 to 256 [ 154.007181][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.013368][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.039998][ T9630] loop0: detected capacity change from 0 to 256 [ 154.050985][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.057277][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.067687][ T9630] loop0: detected capacity change from 0 to 256 [ 154.078235][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.084418][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.094490][ T9630] loop0: detected capacity change from 0 to 256 [ 154.101613][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.107812][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.122217][ T9630] loop0: detected capacity change from 0 to 256 [ 154.128983][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.135213][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.145024][ T9630] loop0: detected capacity change from 0 to 256 [ 154.152165][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.158298][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.171394][ T9630] loop0: detected capacity change from 0 to 256 [ 154.179297][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.185817][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.200105][ T9630] loop0: detected capacity change from 0 to 256 [ 154.207072][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.213338][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.227097][ T9630] loop0: detected capacity change from 0 to 256 [ 154.235964][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.242224][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.255964][ T9630] loop0: detected capacity change from 0 to 256 [ 154.262790][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.268997][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.278911][ T9630] loop0: detected capacity change from 0 to 256 [ 154.286455][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.292616][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.308761][ T9630] loop0: detected capacity change from 0 to 256 [ 154.318856][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.325160][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.339547][ T9630] loop0: detected capacity change from 0 to 256 [ 154.347338][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.353524][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.363553][ T9630] loop0: detected capacity change from 0 to 256 [ 154.371625][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.377728][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.389888][ T9630] loop0: detected capacity change from 0 to 256 [ 154.397095][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.403386][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.412994][ T9630] loop0: detected capacity change from 0 to 256 [ 154.421038][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.427194][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.443779][ T9630] loop0: detected capacity change from 0 to 256 [ 154.450469][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.456730][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.470465][ T9630] loop0: detected capacity change from 0 to 256 [ 154.478737][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.484983][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.495742][ T9630] loop0: detected capacity change from 0 to 256 [ 154.503272][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.509474][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.519473][ T9630] loop0: detected capacity change from 0 to 256 [ 154.526416][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.532663][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.543069][ T9630] loop0: detected capacity change from 0 to 256 [ 154.549938][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.556138][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.566838][ T9630] loop0: detected capacity change from 0 to 256 [ 154.578051][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.584322][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.595227][ T9630] loop0: detected capacity change from 0 to 256 [ 154.603189][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.609422][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.620929][ T9630] loop0: detected capacity change from 0 to 256 [ 154.628147][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.634332][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.651286][ T9630] loop0: detected capacity change from 0 to 256 [ 154.676227][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.682542][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.704286][ T9630] loop0: detected capacity change from 0 to 256 [ 154.715116][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.721339][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.735949][ T9630] loop0: detected capacity change from 0 to 256 [ 154.750293][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.756508][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 154.773621][ T9630] loop0: detected capacity change from 0 to 256 [ 154.781830][ T9630] FAT-fs (loop0): bogus number of FAT sectors [ 154.787955][ T9630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 155.056050][ T9498] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.064314][ T9498] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.075247][ T9498] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.083553][ T9498] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.095138][ T9498] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.103413][ T9498] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.114560][ T9498] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.122807][ T9498] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0