last executing test programs: 7.947393503s ago: executing program 4 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001ed11354e9cc27a055c86bebe3a918010000756c6c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 7.896195148s ago: executing program 4 (id=199): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000010000009500000000000000bf91101000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) 7.208744198s ago: executing program 4 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x12, 0x10, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x5a, 0x0, 0x0, 0x1ff}}}, 0xb8}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_io_uring_setup(0x6d09, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000480), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r6, 0x0, 0x5c, &(0x7f00000014c0)=""/4096, &(0x7f0000000180)=0x1000) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000100003050000000000000000000000009211841391a61e3ac91995bd606a8909406d02f7b983ab93b0b791414b7d08627d72c2f1011cb0bffe300f9cc065f64f9fdbce8087f11ff306debc5c4398065c795935af8a58d75a789d2a960fdf8ffc5a6b3af3bc67bfffe269c7974feba6f1bc2775dfe76868b1d6e4977c841ac7445ed9b6c7d496a56756d78f191f0b8f69d6b526c5c192ea6dfe7cf17752dcba595fcb3410dd3ccddf1f", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000080003000000000008000500", @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f030e000300120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000000008000200ac14142f0c00028089c46cbaa08838230800075000000000140005800e0001006674702d3230383030000000a3828a5aa398651ee7b4c10db03b6f"], 0x78}, 0x1, 0x600000000000000}, 0x0) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.825893151s ago: executing program 4 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {0xfe80}}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 6.579621513s ago: executing program 3 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800300, &(0x7f0000000280)={[{@abort}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nobh}, {@nomblk_io_submit}, {@mblk_io_submit}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) 5.9270146s ago: executing program 3 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) 5.433800774s ago: executing program 3 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, 0x0, 0x0, 0x0) 5.383840758s ago: executing program 0 (id=218): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="190000000400b94b8bb3ea0d6800000000000000bb15dfc9f2f3d6816e6fc1b8ef433f674efb07e71463f11defe1939590d795031fc3e21a7bc8182e76c6cb424caa2144050a08d8e0cec6125a9169024db658fdf7489cf05eaf5ca171fb994bc6779f92caec0dcf2428d0ef285ae8d204ec8b7b6803461611658894b0e4ec788bf1fd242e07b5f1361fee8e7696b2b9109fad3aa611291e3a132da9ee651128261731c0d451f028bd97b097ba70e521b00633a769217e908828ad4654eb26f92e3f005c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12032, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x26be, 0x21ab, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 4.512537665s ago: executing program 0 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) 4.078204522s ago: executing program 0 (id=227): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x88}}, 0x0) 3.926527496s ago: executing program 0 (id=228): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x10c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) 3.569016197s ago: executing program 0 (id=230): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = io_uring_setup(0x752d, &(0x7f00000002c0)={0x0, 0x3273, 0x40, 0x0, 0x392}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000040)=""/49, 0x31) setsockopt$sock_timeval(r1, 0x1, 0x48, &(0x7f0000000000)={0x77359400}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000080)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000001c0)={[{@discard}, {@block_validity}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x32, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000a926007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 3.543041779s ago: executing program 2 (id=231): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001f"], 0x60}}, 0x0) 3.433455729s ago: executing program 2 (id=233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003b000900000000000000000001000000180004"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x20, @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, 0x80, 0x8000, 0x7e, 0x6}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@deltclass={0x60, 0x29, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0xffe0, 0xffff}, {0xfff3, 0x817a309807ad50}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xb8}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x5d}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_ingress={0xc}]}, 0x60}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x10c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4004c}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380), &(0x7f0000000880)=ANY=[], 0xff34, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) 3.109579727s ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) 3.053994322s ago: executing program 2 (id=236): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x1}, 0x0) 2.925454983s ago: executing program 2 (id=237): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000010000009500000000000000bf91101000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) 2.555239566s ago: executing program 0 (id=238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0800000004000000080000000100000080000000f28091c597075c404d07b6e42d94bf6ae62712202b13f91f5fb60c7252e8b44ca0a0d3762526bc07792635ca1c5ab7714a988fa3d757aa8f48027b8dea3e6b83390fc9a7989fc36771c818beaacc1b693e3fd1d22790bb3e1da9fdbf1ddd4923b0a46314400af789b199788db2c6f0f95d46e6ef8e10456ec0beeba41013797fbda99c3f529957ac4b2c2ea0d350fe6233d7f1f01d716e5f14158027f7726ecc8a143718ef70a91c35f5357d47ab5005f870f243cf5ea34537787ea5a5", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x8026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000300)={0x200020000, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}, 0x1, 0x0, 0x0, 0x82}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x2, 0x2, 0x4, 0x96, 0x0, 0x100000000, 0x282c0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x9382, 0x59a98c8b}, 0x1001, 0x8, 0xfab, 0x6, 0x2, 0x8000, 0xf538, 0x0, 0x5, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f00000006c0)={&(0x7f0000000780), 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x1c, 0x0, 0x0, 0x70bd2a}, 0x4a}}, 0x0) (fail_nth: 3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=r8, @ANYBLOB="010000000000000000001a00000007002100626200002000228004000080040000800400008004000080040000800400008004000080"], 0x3c}}, 0x0) 2.118998754s ago: executing program 1 (id=241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) 1.862763617s ago: executing program 2 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 1.767567485s ago: executing program 4 (id=209): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f0000000180)) close(r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000000c0)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") io_setup(0x7, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 1.702541541s ago: executing program 1 (id=243): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d800000019008111e0020f060d8107040a60090000bed7f95c0000a12a00120026000699e3ffffff14000500fe8081780c000567b8b7b94002000009080016060000000000000000d67f6f9400f7bfd9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39dd90815cff0a6e65562a0acaa8b62ee5a7cef4090000001fb791643a5e83d42365f0556b45920b03724a237ee4b1160b14d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf635d1f215ce3b89ad809d50b694138ecf1ac76efb42a9ecbee5de6ccd44242f4", 0xd8}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) unshare(0x28000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgsnd(0x0, 0x0, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x800, {{}, {0x0, 0x5}}}, 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000004c0)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000741f29800c964ff300"/23], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1.127368661s ago: executing program 4 (id=244): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180700"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x6ada, 0xa396, 0x4, &(0x7f0000000200)={[0x2]}, 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008042, &(0x7f0000000080)={[{@errors_remount}]}, 0x1, 0x54e, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s1f0bQAKJE/AfcEDigNQTB24ckTggpHJACmCBYiSQFs3s2Nk6a7y117ut9/ORJjPvvZ35vmdn/N6+tecFMLauRsRORExHxBsRMVfkJ8UWr3S27HUPd7cX93a3F5Not1//e5KXZ3nRdU7myeKasxHxja9GfCd5PG5zc+v+Qq1WXS/S5VZ9rdzc3LqxUl9Yri5XVyuV2/O3b75464XKwNp6pf7LB19ZefWbv/n1p9/7/c6Xf5BV62JR1t2OQeo0feogTmYyIl49i2AjMFHsp0dcD04mjYiPRcTn8vt/Liby/50AwHnWbs9Fe647DQCcd2k+B5akpYhI02IQUOrM4T0TF9Jao9m6fq+xsbrUmSu7FFPpvZVa9eblmT9+L3/xVJKl5/OyvDxPVw6lb0XE5Yj40cwTebq02KgtjWbIAwBj78nu/j8i/jWTpqVSX6f2+FQPAPjImB11BQCAodP/A8D40f8DwPjpo/8vPuzfOfO6AADD4f0/AIwf/T8AjB/9PwCMla+/9lq2tfeK518vvbm5cb/x5o2lavN+qb6xWFpsrK+VlhuN5fyZPfXjrldrNNbmn4+Nt8qtarNVbm5u3a03NlZbd/Pnet+tTg2lVQDA/3P5yrt/SCJi56Un8i261nLQV8P5lo66AsDITJzmZAME+EjrtdrXL0ZQD2D4+urC80HC7868LsBo9HyY92zPw/f7yQcI4veM4EPl2if7n/+3xjOcL+b/YXydbP7/5YHXAxi+XvP/wHhot5PDa/5PHxQBAOfSKX6Fr/32oAYhwEgdt5j3QD7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPmYkR8N5K0lK8Fnmb/pqVSxFMRcSmmknsrterNiHg6rkTE1EyWnh91pQGAU0r/mhTrf12be+7i4dLp5N8z+T4ivv/T13/81kKrtT6f5f/jIH9mf/mwyqPzTrGuIAAwYHn/XSn2XW/kH+5uL+5vw6zPgzvx32Ip4sW93e18y/KLvLcjZvOxxIV/JjFZnDMbEc9GxMQA4u+8ExGf6NX+JJ8buVSsfNodP4rYTw01fvq++Gle1tlng6+PD6AuMG7evRMRr/S6/9K4mu973/9Z7uQA4j+407nY/s++va74k0WkiR7xs3v+ar8xnv/t1x7LbM91yt6JeHayV/zkIH5yRPzn+oz/p0995ocvH1HW/lnEtegdvztWuVVfKzc3t26s1BeWq8vV1Url9vztmy/eeqFSzueoy/sz1Y/720vXnz6qbln7L3TF318XP4s627P90wfnfqHP9v/8P298+7OPkjOH43/p872//8/0jN+R9Ylf7DP+woVfHbl8dxZ/6Yiv/3Hf/+t9xn/vL1tLfb4UABiC5ubW/YVarbr+gQ6y3r87J3sXepLrHHuQVbG/F+8PF08X9M9xFq044cHUWX1Vz/xg8mCsONgrfyu74pCbkw68Fac6eDisWKP7mQQMx6ObftQ1AQAAAAAAAAAAAAAAjjKMP10adRsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4v/4XAAD//xnx1GQ=") r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[], 0x74}}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='cdg\x00', 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82desEeoAKSIFCQFF2400bVb00uYBQVQlRcUAcUmNvLJPdrPGuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IBixQjATSopkdu1t7XW/j9S71fj7SaObN23nf9+LMvJm39rwAxtZzEbETEdMR8UZEzBf7k2KJO50l+9yjve2l/b3tpSTa7df/nuT52b7oOibzZFHmbER846sR30mOx21ubj1YrNWq60W63KqvlZubWzdW64sr1ZXqw0rl9sLtmy/derEysLZerf9y9yurr37zN7/+9Lu/3/nyD7JqzRV53e0YpE7Tpw7jZCYj4tXzCDYCE8V6esT14PGkEfGxiPhcfv7Px0T+vxMAuMja7floz3enAYCLLs3HwJK0VIwFzEWalkqdMbxn4lJaazRb1+83Nh4ud8bKLsdUen+1Vr15ZeaP38vvGKaSLL2Q5+X5ebpyJH0rIq5ExI9nnsjTpaVGbXl0tz0AMNaePNL//2um0//3oce3egDAR8bsqCsAAAyd/h8Axo/+HwDGTx/9f/Fl/8651wUAGA7P/wAwfvT/ADB+9P8AMFa+/tpr2dLeL95/vfzm5saDxps3lqvNB6X6xlJpqbG+VlppNFbyd/bUTyuv1misLbwQG2+VW9Vmq9zc3LpXb2w8bN3L3+t9rzo1lFYBAB/kytV3/pBExM7LT+RLdM3loK+Giy0ddQWAkZkYdQWAkTHbF4yv/p/xf3eu9QBGp+fLvGd7br7fTz9EEL9nBP9Xrn2y//F/czzDxWL8H8bX443/vzLwegDDZ/wfxle7nRyd83/6MAsAuJDO8Dv+7R8O6iYEGKnTJvMeyPf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMHMRcR3I0lLxVzgc5GmpVLEUxFxOaaS+6u16s2IeDquRsTUTJZeGHWlAYAzSv+aFPN/XZt/fu5o7nTy75l8HRHf/9nrP3lrsdVaX8j2/+Nw/8zB9GGV9447w7yCAECfnuvzc3n/XSnWXQ/yj/a2lw6W7s+nA67nUbt347/FVMRL+3vb+dLJmYzJfD2b30tc+mdSpDtzkT4bERMDiL/zdkR8olf7k3xs5HIx82l3/ChiPzXU+On74qd5Xmed3Xx9fAB1gXHzzt2IuNPr/EuLa2rv8382v0Kd3e7dTmEH1779rvgH17+JHvGTD3HN333ht187trM938l7O+LZyV7xk8P4yQnxn+8z/p8+9ZkfvXJCXvvnEdeid/zuWOVWfa3c3Ny6sVpfXKmuVB9WKrcXbt986daLlXI+Rl0+GKk+7m8vX3/6pLpl7b90QvzZnu2fPjz2C322/xf/eePbn/2A+F/6fO+f/zM943dkfeIX+4y/eOlXJ07fncVfPqH9p/38r/cZ/92/bC33+VEAYAiam1sPFmu16vqZNrKn0EGUc2wjq+JACzxl488xyALvnO3wqfP6Vz33jcnDe8XBlvytrMQhNycdeCvOtPGosxHnHmu01yXg/L130o+6JgAAAAAAAAAAAAAAwEmG8adLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9f/AgAA//91qMwl") syz_usb_disconnect(0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="ce5b550b14dd04c2fa638125e6a08c8afc9544e026080580cd85c3eb2f86929b595b54111a0a8cbb8153b116dbc45fd564375e23c77253e437b511198d77aa69b31a693980b2c127a3436d9b55b08171de831554e27f6e7ce17c453bee12d9ad0b358e1f15586bca82f46501b3c5a531a7ab82770e354d8259f25dd23781314174a7cbdcc14506b95aaaa380d307c46ab27a1bc0b8f53339b2abf7600029e3886ccb38733b55d1", 0xa7}, {&(0x7f0000000380)="f7ef0c2e3fa8667b6e", 0x9}, {&(0x7f0000000ac0)="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", 0x23b}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000e80)="123d07a6b372f5b4627e9e1fe5768c1c270741b2df7c0ac305682e1dfbed922365b4598fc6002c978284ff1fdfc796a1cbd333d656e80e4a95f890c9613cda4165701916f2b47f23b0f077efa097d14a0d9b86d9828a39b900f693f85f32a74da721670d652e8d1b7591c64c14ef5778d1eeea0ec407f40ba40c7c172f59f5625e1721620a0f7aced3feb132e242510724cde9bbe7acc59b00ca6792353abc52ff23d385217965a45eae25157b8ea0f3e04cb1f83c773d11e168bc4c387bea47f6b64414000f28a84c6e69efdd0d94d4c5b5b2d04f136b88bb", 0xd9}, {0x0}, {&(0x7f0000001b80)="5e743678aad6aec63a17be4559c4fc8a6e85bd6230031458ccd3043c0547e3e2df57feb8d95659d033491e4a2cb061b5acd7fe86b2dae4edf1505acb650654ef2324cb512101e4ad5adb7a29dc25a0459da4b74ccd0de024e0b487157d23b7474221b1cf01dec06f07e7a3751c040f45305ddfd6f2605c6f220660fd9bf7f12185156d75c2b348cc5f77ce7565eeaebb940cd86dc6fb26a2903eece0e06918592364249dd325f7", 0xa7}], 0x3}}], 0x2, 0x0) 1.070101336s ago: executing program 3 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r3, 0x2ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) 1.017619221s ago: executing program 1 (id=245): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x88}}, 0x0) 961.422065ms ago: executing program 1 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x20008014) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800ec7e00000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000800000001d6000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setrlimit(0x8, &(0x7f0000000080)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r9, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r9, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x36, 0x2, 0x7fff}}}}]}, 0x44}}, 0x4004) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtclass={0x44, 0x28, 0x8, 0xffffd743, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0xffff, 0xfff2}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfb}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x44}}, 0x44010) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$can_raw(r3, &(0x7f0000000440)={0x1d, r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x100}, 0x18) 872.407994ms ago: executing program 1 (id=247): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="190000000400b94b8bb3ea0d6800000000000000bb15dfc9f2f3d6816e6fc1b8ef433f674efb07e71463f11defe1939590d795031fc3e21a7bc8182e76c6cb424caa2144050a08d8e0cec6125a9169024db658fdf7489cf05eaf5ca171fb994bc6779f92caec0dcf2428d0ef285ae8d204ec8b7b6803461611658894b0e4ec788bf1fd242e07b5f1361fee8e7696b2b9109fad3aa611291e3a132da9ee651128261731c0d451f028bd97b097ba70e521b00633a769217e908828ad4654eb26f92e3f005c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12032, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x26be, 0x21ab, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 610.627406ms ago: executing program 3 (id=248): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x213, 0x0) 531.472364ms ago: executing program 3 (id=249): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="190000000400b94b8bb3ea0d6800000000000000bb15dfc9f2f3d6816e6fc1b8ef433f674efb07e71463f11defe1939590d795031fc3e21a7bc8182e76c6cb424caa2144050a08d8e0cec6125a9169024db658fdf7489cf05eaf5ca171fb994bc6779f92caec0dcf2428d0ef285ae8d204ec8b7b6803461611658894b0e4ec788bf1fd242e07b5f1361fee8e7696b2b9109fad3aa611291e3a132da9ee651128261731c0d451f028bd97b097ba70e521b00633a769217e908828ad4654eb26f92e3f005c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x66d) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12032, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x26be, 0x21ab, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 0s ago: executing program 1 (id=250): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6gre0\x00', r5, 0x2f, 0x4, 0x8d, 0x6, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x80, 0x11d, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', r6, 0x20, 0x8, 0x2, 0x7, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, {[@generic={0x89, 0x11, "a826c493f9ba89332c99d798ca9a80"}, @rr={0x7, 0x27, 0xbe, [@rand_addr=0x64010102, @multicast1, @multicast1, @broadcast, @broadcast, @empty, @remote, @local, @broadcast]}, @ssrr={0x89, 0xb, 0xdc, [@multicast2, @multicast1]}, @end]}}}}}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e03ea3207b0500005f0001020301090212922182cb0300090400000093ef1300"], 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="de000004", @ANYRES16, @ANYBLOB="00012abd7000ffdbdf250e0000000800050003000000180001800a0006006c626c637200000008000900300000002400028005000d0001000000060002004e21000006000e004e22000008000900090000004c0001800800050002000000060001000200000008000800060000000800080007000000080005"], 0xbc}, 0x1, 0x0, 0x0, 0x4810}, 0x20004804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000120000240012800b000100677265746170000014000280080004"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): face activated: batadv_slave_0 [ 31.150176][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.158458][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.169089][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.179738][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.201881][ T3262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.210864][ T3262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.219753][ T3262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.228563][ T3262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.244716][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.253512][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.262372][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.271349][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283003][ T3267] veth0_vlan: entered promiscuous mode [ 31.303805][ T3267] veth1_vlan: entered promiscuous mode [ 31.320564][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.320579][ T29] audit: type=1400 audit(1726021961.250:110): avc: denied { mounton } for pid=3262 comm="syz-executor" path="/root/syzkaller.hmBV4B/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.322304][ T3269] veth0_vlan: entered promiscuous mode [ 31.335856][ T29] audit: type=1400 audit(1726021961.260:111): avc: denied { mount } for pid=3262 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.363181][ T3267] veth0_macvtap: entered promiscuous mode [ 31.378655][ T29] audit: type=1400 audit(1726021961.260:112): avc: denied { mounton } for pid=3262 comm="syz-executor" path="/root/syzkaller.hmBV4B/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.409613][ T29] audit: type=1400 audit(1726021961.260:113): avc: denied { mount } for pid=3262 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.431499][ T29] audit: type=1400 audit(1726021961.260:114): avc: denied { unmount } for pid=3262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.452658][ T29] audit: type=1400 audit(1726021961.320:115): avc: denied { mounton } for pid=3262 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.469962][ T3269] veth1_vlan: entered promiscuous mode [ 31.484184][ T3267] veth1_macvtap: entered promiscuous mode [ 31.496593][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.507067][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.516900][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.527406][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.537986][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.553243][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.563891][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.573831][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.584358][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.595967][ T29] audit: type=1400 audit(1726021961.490:116): avc: denied { read write } for pid=3262 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.620119][ T29] audit: type=1400 audit(1726021961.490:117): avc: denied { open } for pid=3262 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.644216][ T29] audit: type=1400 audit(1726021961.490:118): avc: denied { ioctl } for pid=3262 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.669999][ T29] audit: type=1400 audit(1726021961.530:119): avc: denied { prog_load } for pid=3400 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.672711][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.700468][ T3267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.709386][ T3267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.718158][ T3267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726967][ T3267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.742837][ T3272] veth0_vlan: entered promiscuous mode [ 31.766710][ T3269] veth0_macvtap: entered promiscuous mode [ 31.774476][ T3269] veth1_macvtap: entered promiscuous mode [ 31.792625][ T3272] veth1_vlan: entered promiscuous mode [ 31.813071][ T3405] loop1: detected capacity change from 0 to 2048 [ 31.830624][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.841197][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.851180][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.861663][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.871524][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.882022][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.896442][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.906514][ T3405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.941092][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.951684][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.963708][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.974201][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.986444][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.997096][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.013672][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.022460][ T3272] veth0_macvtap: entered promiscuous mode [ 32.030768][ T3272] veth1_macvtap: entered promiscuous mode [ 32.043978][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.054539][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.064459][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.075025][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.084894][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.095404][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.105291][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.115810][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.127372][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.138621][ T3269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.147397][ T3269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156133][ T3269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.164995][ T3269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.177318][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.187965][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.197966][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.208486][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.218368][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.228920][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.238904][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.249351][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.260366][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.279250][ T3272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.288187][ T3272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.296967][ T3272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.305675][ T3272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.364259][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.427792][ T3427] tls_set_device_offload_rx: netdev not found [ 32.453879][ T3430] FAULT_INJECTION: forcing a failure. [ 32.453879][ T3430] name failslab, interval 1, probability 0, space 0, times 1 [ 32.466797][ T3430] CPU: 0 UID: 0 PID: 3430 Comm: syz.2.3 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 32.477412][ T3430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.487501][ T3430] Call Trace: [ 32.490804][ T3430] [ 32.493768][ T3430] dump_stack_lvl+0xf2/0x150 [ 32.498399][ T3430] dump_stack+0x15/0x20 [ 32.502659][ T3430] should_fail_ex+0x229/0x230 [ 32.507370][ T3430] ? __alloc_skb+0x10b/0x310 [ 32.512041][ T3430] should_failslab+0x8f/0xb0 [ 32.516712][ T3430] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 32.522635][ T3430] __alloc_skb+0x10b/0x310 [ 32.527171][ T3430] audit_log_start+0x368/0x6b0 [ 32.531968][ T3430] ? kmem_cache_free+0xd8/0x280 [ 32.536872][ T3430] audit_seccomp+0x4b/0x130 [ 32.541401][ T3430] __seccomp_filter+0x6fa/0x1180 [ 32.546445][ T3430] ? __perf_event_task_sched_out+0x111/0xfe0 [ 32.552737][ T3430] __secure_computing+0x9f/0x1c0 [ 32.557743][ T3430] syscall_trace_enter+0xd1/0x1f0 [ 32.562883][ T3430] do_syscall_64+0xaa/0x1c0 [ 32.567389][ T3430] ? clear_bhb_loop+0x55/0xb0 [ 32.572063][ T3430] ? clear_bhb_loop+0x55/0xb0 [ 32.576788][ T3430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.582808][ T3430] RIP: 0033:0x7fbe28f9c93c [ 32.587219][ T3430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 32.606919][ T3430] RSP: 002b:00007fbe27c17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.615375][ T3430] RAX: ffffffffffffffda RBX: 00007fbe29155f80 RCX: 00007fbe28f9c93c [ 32.623493][ T3430] RDX: 000000000000000f RSI: 00007fbe27c170a0 RDI: 0000000000000003 [ 32.631468][ T3430] RBP: 00007fbe27c17090 R08: 0000000000000000 R09: 0000000000000000 [ 32.639440][ T3430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.647487][ T3430] R13: 0000000000000000 R14: 00007fbe29155f80 R15: 00007ffcd50b2a18 [ 32.655474][ T3430] [ 32.666934][ T3443] FAULT_INJECTION: forcing a failure. [ 32.666934][ T3443] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.680054][ T3443] CPU: 0 UID: 0 PID: 3443 Comm: syz.1.9 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 32.680666][ T3411] syz.0.6 (3411) used greatest stack depth: 10056 bytes left [ 32.690479][ T3443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.690496][ T3443] Call Trace: [ 32.690504][ T3443] [ 32.690512][ T3443] dump_stack_lvl+0xf2/0x150 [ 32.690544][ T3443] dump_stack+0x15/0x20 [ 32.713542][ T3446] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.714178][ T3443] should_fail_ex+0x229/0x230 [ 32.739303][ T3443] should_fail+0xb/0x10 [ 32.743489][ T3443] should_fail_usercopy+0x1a/0x20 [ 32.748584][ T3443] _copy_to_user+0x1e/0xa0 [ 32.753084][ T3443] do_ip6t_get_ctl+0x7d3/0xc00 [ 32.757936][ T3443] ? should_fail_ex+0xd7/0x230 [ 32.762747][ T3443] nf_getsockopt+0x18c/0x1b0 [ 32.767391][ T3443] ipv6_getsockopt+0x189/0x1f0 [ 32.772176][ T3443] udpv6_getsockopt+0x73/0x80 [ 32.776890][ T3443] sock_common_getsockopt+0x5b/0x70 [ 32.782158][ T3443] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 32.788071][ T3443] do_sock_getsockopt+0x1ca/0x260 [ 32.793126][ T3443] __sys_getsockopt+0x19a/0x210 [ 32.797986][ T3443] __x64_sys_getsockopt+0x66/0x80 [ 32.803032][ T3443] x64_sys_call+0x11cd/0x2d60 [ 32.807716][ T3443] do_syscall_64+0xc9/0x1c0 [ 32.812216][ T3443] ? clear_bhb_loop+0x55/0xb0 [ 32.817100][ T3443] ? clear_bhb_loop+0x55/0xb0 [ 32.821795][ T3443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.827726][ T3443] RIP: 0033:0x7f155c92def9 [ 32.832140][ T3443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.851833][ T3443] RSP: 002b:00007f155b586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 32.860253][ T3443] RAX: ffffffffffffffda RBX: 00007f155cae6058 RCX: 00007f155c92def9 [ 32.868278][ T3443] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 32.876262][ T3443] RBP: 00007f155b586090 R08: 0000000020000000 R09: 0000000000000000 [ 32.884235][ T3443] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 32.892246][ T3443] R13: 0000000000000000 R14: 00007f155cae6058 R15: 00007ffc1da72ff8 [ 32.900229][ T3443] [ 32.920138][ T3442] veth0_vlan: entered allmulticast mode [ 32.956248][ T3444] ªªªªªª: renamed from vlan0 [ 33.073534][ T3462] FAULT_INJECTION: forcing a failure. [ 33.073534][ T3462] name failslab, interval 1, probability 0, space 0, times 0 [ 33.086327][ T3462] CPU: 0 UID: 0 PID: 3462 Comm: syz.0.16 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 33.096907][ T3462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 33.106986][ T3462] Call Trace: [ 33.110279][ T3462] [ 33.113227][ T3462] dump_stack_lvl+0xf2/0x150 [ 33.117893][ T3462] dump_stack+0x15/0x20 [ 33.122067][ T3462] should_fail_ex+0x229/0x230 [ 33.126775][ T3462] ? resume_store+0xf1/0x3a0 [ 33.131408][ T3462] should_failslab+0x8f/0xb0 [ 33.136171][ T3462] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 33.142610][ T3462] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 33.148063][ T3462] ? __pfx_resume_store+0x10/0x10 [ 33.150458][ T3467] loop4: detected capacity change from 0 to 2048 [ 33.153114][ T3462] kstrndup+0x3f/0x90 [ 33.153145][ T3462] resume_store+0xf1/0x3a0 [ 33.167934][ T3462] ? _copy_from_iter+0x3ba/0xb00 [ 33.172937][ T3462] kobj_attr_store+0x47/0x70 [ 33.177579][ T3462] ? __pfx_kobj_attr_store+0x10/0x10 [ 33.183014][ T3462] sysfs_kf_write+0xae/0xd0 [ 33.187600][ T3462] ? __pfx_sysfs_kf_write+0x10/0x10 [ 33.192815][ T3462] kernfs_fop_write_iter+0x1ce/0x2c0 [ 33.198171][ T3462] iter_file_splice_write+0x5e6/0x970 [ 33.203578][ T3462] ? __pfx_iter_file_splice_write+0x10/0x10 [ 33.209567][ T3462] direct_splice_actor+0x16c/0x2c0 [ 33.214695][ T3462] splice_direct_to_actor+0x305/0x670 [ 33.220131][ T3462] ? __pfx_direct_splice_actor+0x10/0x10 [ 33.225777][ T3462] do_splice_direct+0xd7/0x150 [ 33.230566][ T3462] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 33.236471][ T3462] do_sendfile+0x3ab/0x950 [ 33.240962][ T3462] __x64_sys_sendfile64+0x110/0x150 [ 33.246205][ T3462] x64_sys_call+0xed5/0x2d60 [ 33.250876][ T3462] do_syscall_64+0xc9/0x1c0 [ 33.255421][ T3462] ? clear_bhb_loop+0x55/0xb0 [ 33.260249][ T3462] ? clear_bhb_loop+0x55/0xb0 [ 33.264953][ T3462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.270872][ T3462] RIP: 0033:0x7f469cdbdef9 [ 33.275369][ T3462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.295053][ T3462] RSP: 002b:00007f469ba31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 33.303483][ T3462] RAX: ffffffffffffffda RBX: 00007f469cf75f80 RCX: 00007f469cdbdef9 [ 33.311459][ T3462] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 33.319481][ T3462] RBP: 00007f469ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 33.327456][ T3462] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 33.335451][ T3462] R13: 0000000000000000 R14: 00007f469cf75f80 R15: 00007ffe6d9c6738 [ 33.343520][ T3462] [ 33.357045][ T3465] pim6reg1: entered promiscuous mode [ 33.362422][ T3465] pim6reg1: entered allmulticast mode [ 33.416886][ T3467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.480942][ C1] hrtimer: interrupt took 68269 ns [ 33.552446][ T3477] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.840132][ T3475] syz.2.22 (3475) used greatest stack depth: 9768 bytes left [ 33.881822][ T3499] loop0: detected capacity change from 0 to 512 [ 33.920328][ T3499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.941554][ T3499] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.989435][ T3504] loop2: detected capacity change from 0 to 1024 [ 34.010710][ T3504] EXT4-fs: Ignoring removed orlov option [ 34.017344][ T3504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.037731][ T3504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e028, mo2=0002] [ 34.051484][ T3504] System zones: 0-1, 3-12 [ 34.066571][ T3504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.100752][ T3501] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 34.114480][ T3501] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.2.28: corrupted in-inode xattr: bad magic number in in-inode xattr [ 34.162891][ T3501] EXT4-fs (loop2): Remounting filesystem read-only [ 34.203710][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.225417][ T3509] netlink: 'syz.2.29': attribute type 21 has an invalid length. [ 34.233327][ T3509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29'. [ 34.289662][ T3514] loop2: detected capacity change from 0 to 512 [ 34.308170][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.320882][ T3514] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.333548][ T3514] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 34.340308][ T3514] syzkaller1: entered promiscuous mode [ 34.345907][ T3514] syzkaller1: entered allmulticast mode [ 34.371096][ T3519] loop1: detected capacity change from 0 to 1024 [ 34.389221][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.404208][ T3518] Trying to write to read-only block-device loop1 [ 34.478222][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.514358][ T3526] FAULT_INJECTION: forcing a failure. [ 34.514358][ T3526] name failslab, interval 1, probability 0, space 0, times 0 [ 34.527256][ T3526] CPU: 1 UID: 0 PID: 3526 Comm: syz.1.34 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 34.537797][ T3526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 34.547895][ T3526] Call Trace: [ 34.551173][ T3526] [ 34.554134][ T3526] dump_stack_lvl+0xf2/0x150 [ 34.558741][ T3526] dump_stack+0x15/0x20 [ 34.562983][ T3526] should_fail_ex+0x229/0x230 [ 34.567670][ T3526] ? sidtab_sid2str_get+0xb8/0x140 [ 34.572863][ T3526] should_failslab+0x8f/0xb0 [ 34.577578][ T3526] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 34.583953][ T3526] kmemdup_noprof+0x2a/0x60 [ 34.588501][ T3526] sidtab_sid2str_get+0xb8/0x140 [ 34.593493][ T3526] security_sid_to_context_core+0x1eb/0x2f0 [ 34.599400][ T3526] security_sid_to_context+0x27/0x30 [ 34.604692][ T3526] avc_audit_post_callback+0x9d/0x530 [ 34.610113][ T3526] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 34.616116][ T3526] common_lsm_audit+0x7d3/0xfc0 [ 34.620970][ T3526] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 34.626965][ T3526] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 34.632784][ T3526] slow_avc_audit+0xf9/0x140 [ 34.637392][ T3526] avc_has_extended_perms+0x595/0x820 [ 34.642801][ T3526] ioctl_has_perm+0x28b/0x2e0 [ 34.647582][ T3526] selinux_file_ioctl+0x2f7/0x380 [ 34.652621][ T3526] security_file_ioctl+0x4b/0x80 [ 34.657567][ T3526] __se_sys_ioctl+0x47/0x150 [ 34.662198][ T3526] __x64_sys_ioctl+0x43/0x50 [ 34.666798][ T3526] x64_sys_call+0x15cc/0x2d60 [ 34.671486][ T3526] do_syscall_64+0xc9/0x1c0 [ 34.675996][ T3526] ? clear_bhb_loop+0x55/0xb0 [ 34.680675][ T3526] ? clear_bhb_loop+0x55/0xb0 [ 34.685354][ T3526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.691268][ T3526] RIP: 0033:0x7f155c92def9 [ 34.695707][ T3526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.715367][ T3526] RSP: 002b:00007f155b5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.724007][ T3526] RAX: ffffffffffffffda RBX: 00007f155cae5f80 RCX: 00007f155c92def9 [ 34.731985][ T3526] RDX: 0000000020000240 RSI: 00000000c018937e RDI: 0000000000000006 [ 34.739963][ T3526] RBP: 00007f155b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.748014][ T3526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.756003][ T3526] R13: 0000000000000000 R14: 00007f155cae5f80 R15: 00007ffc1da72ff8 [ 34.764050][ T3526] [ 34.814818][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.821594][ T3530] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 34.859818][ T3533] loop1: detected capacity change from 0 to 2048 [ 34.937567][ T3543] loop0: detected capacity change from 0 to 512 [ 34.958609][ T3543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.972566][ T3543] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.166055][ T3547] EXT4-fs (loop0): shut down requested (0) [ 35.189788][ T3548] netlink: 'syz.1.41': attribute type 4 has an invalid length. [ 35.245618][ T3551] netlink: 76 bytes leftover after parsing attributes in process `syz.1.42'. [ 35.292298][ T3555] loop1: detected capacity change from 0 to 2048 [ 35.356686][ T3559] sg_write: data in/out 2937/14 bytes for SCSI command 0x0-- guessing data in; [ 35.356686][ T3559] program syz.1.46 not setting count and/or reply_len properly [ 35.373621][ T3559] FAULT_INJECTION: forcing a failure. [ 35.373621][ T3559] name failslab, interval 1, probability 0, space 0, times 0 [ 35.386332][ T3559] CPU: 0 UID: 0 PID: 3559 Comm: syz.1.46 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 35.396940][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 35.407069][ T3559] Call Trace: [ 35.410352][ T3559] [ 35.413289][ T3559] dump_stack_lvl+0xf2/0x150 [ 35.417949][ T3559] dump_stack+0x15/0x20 [ 35.422107][ T3559] should_fail_ex+0x229/0x230 [ 35.426862][ T3559] ? bio_kmalloc+0x43/0x50 [ 35.431300][ T3559] should_failslab+0x8f/0xb0 [ 35.435986][ T3559] __kmalloc_noprof+0xa5/0x370 [ 35.440808][ T3559] bio_kmalloc+0x43/0x50 [ 35.445070][ T3559] blk_rq_map_user_iov+0xc39/0x1bc0 [ 35.450395][ T3559] ? __pfx_autoremove_wake_function+0x10/0x10 [ 35.456510][ T3559] ? blk_mq_rq_ctx_init+0x254/0x2f0 [ 35.461739][ T3559] ? __perf_event_task_sched_in+0x7c4/0x7f0 [ 35.467674][ T3559] ? import_ubuf+0xe9/0x120 [ 35.472213][ T3559] blk_rq_map_user_io+0x193/0x260 [ 35.477331][ T3559] ? _raw_spin_unlock+0x26/0x50 [ 35.482203][ T3559] ? __schedule+0x5fa/0x950 [ 35.486716][ T3559] ? sg_link_reserve+0x118/0x140 [ 35.491694][ T3559] sg_common_write+0x812/0x8d0 [ 35.496581][ T3559] sg_write+0x69e/0x710 [ 35.500847][ T3559] ? __pfx_sg_write+0x10/0x10 [ 35.505554][ T3559] vfs_write+0x28b/0x900 [ 35.509838][ T3559] ? __fget_files+0x1da/0x210 [ 35.514592][ T3559] ksys_write+0xeb/0x1b0 [ 35.518840][ T3559] __x64_sys_write+0x42/0x50 [ 35.523560][ T3559] x64_sys_call+0x27dd/0x2d60 [ 35.528325][ T3559] do_syscall_64+0xc9/0x1c0 [ 35.532859][ T3559] ? clear_bhb_loop+0x55/0xb0 [ 35.537529][ T3559] ? clear_bhb_loop+0x55/0xb0 [ 35.542220][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.548123][ T3559] RIP: 0033:0x7f155c92def9 [ 35.552556][ T3559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.572824][ T3559] RSP: 002b:00007f155b5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.581248][ T3559] RAX: ffffffffffffffda RBX: 00007f155cae5f80 RCX: 00007f155c92def9 [ 35.589303][ T3559] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 0000000000000004 [ 35.597304][ T3559] RBP: 00007f155b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.605300][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.613369][ T3559] R13: 0000000000000000 R14: 00007f155cae5f80 R15: 00007ffc1da72ff8 [ 35.621361][ T3559] [ 35.649272][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 35.673947][ T3563] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 35.745270][ T3573] loop1: detected capacity change from 0 to 2048 [ 35.817291][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.849728][ T3576] loop0: detected capacity change from 0 to 512 [ 35.867080][ T3576] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.52: corrupted in-inode xattr: invalid ea_ino [ 35.882764][ T3576] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.52: couldn't read orphan inode 12 (err -117) [ 35.895183][ T3576] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.967918][ T3262] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 36.007105][ T3588] FAULT_INJECTION: forcing a failure. [ 36.007105][ T3588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.012946][ T3586] loop1: detected capacity change from 0 to 2048 [ 36.020207][ T3588] CPU: 1 UID: 0 PID: 3588 Comm: syz.0.54 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 36.037152][ T3588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 36.047401][ T3588] Call Trace: [ 36.050707][ T3588] [ 36.053708][ T3588] dump_stack_lvl+0xf2/0x150 [ 36.058327][ T3588] dump_stack+0x15/0x20 [ 36.062564][ T3588] should_fail_ex+0x229/0x230 [ 36.067271][ T3588] should_fail+0xb/0x10 [ 36.071447][ T3588] should_fail_usercopy+0x1a/0x20 [ 36.076539][ T3588] strncpy_from_user+0x25/0x270 [ 36.081507][ T3588] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 36.087261][ T3588] getname_flags+0xb0/0x3b0 [ 36.091780][ T3588] getname+0x17/0x20 [ 36.095797][ T3588] do_sys_openat2+0x67/0x120 [ 36.100472][ T3588] __x64_sys_openat+0xf3/0x120 [ 36.105233][ T3588] x64_sys_call+0x1025/0x2d60 [ 36.109920][ T3588] do_syscall_64+0xc9/0x1c0 [ 36.114431][ T3588] ? clear_bhb_loop+0x55/0xb0 [ 36.119162][ T3588] ? clear_bhb_loop+0x55/0xb0 [ 36.123978][ T3588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.129943][ T3588] RIP: 0033:0x7f469cdbdef9 [ 36.134403][ T3588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.154201][ T3588] RSP: 002b:00007f469ba31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.162622][ T3588] RAX: ffffffffffffffda RBX: 00007f469cf75f80 RCX: 00007f469cdbdef9 [ 36.170851][ T3588] RDX: 0000000000000041 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 36.178976][ T3588] RBP: 00007f469ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 36.186951][ T3588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.194929][ T3588] R13: 0000000000000000 R14: 00007f469cf75f80 R15: 00007ffe6d9c6738 [ 36.202942][ T3588] [ 36.219125][ T3590] sg_write: data in/out 2937/14 bytes for SCSI command 0x0-- guessing data in; [ 36.219125][ T3590] program syz.1.57 not setting count and/or reply_len properly [ 36.265245][ T3597] capability: warning: `syz.1.59' uses 32-bit capabilities (legacy support in use) [ 36.305730][ T3599] netlink: 76 bytes leftover after parsing attributes in process `syz.0.61'. [ 36.333793][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 36.333807][ T29] audit: type=1400 audit(1726021966.260:384): avc: denied { search } for pid=3601 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.362420][ T29] audit: type=1400 audit(1726021966.260:385): avc: denied { read } for pid=3602 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.385697][ T29] audit: type=1400 audit(1726021966.260:386): avc: denied { open } for pid=3602 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.410674][ T29] audit: type=1400 audit(1726021966.260:387): avc: denied { getattr } for pid=3602 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.438252][ T29] audit: type=1400 audit(1726021966.330:388): avc: denied { write } for pid=3601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.461231][ T29] audit: type=1400 audit(1726021966.330:389): avc: denied { add_name } for pid=3601 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.484250][ T29] audit: type=1400 audit(1726021966.330:390): avc: denied { create } for pid=3601 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.506937][ T29] audit: type=1400 audit(1726021966.330:391): avc: denied { write } for pid=3601 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=760 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.533911][ T29] audit: type=1400 audit(1726021966.330:392): avc: denied { read } for pid=3596 comm="syz.1.59" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.557397][ T29] audit: type=1400 audit(1726021966.330:393): avc: denied { open } for pid=3596 comm="syz.1.59" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.608568][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 36.633937][ T3634] syz.0.64[3634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.634014][ T3634] syz.0.64[3634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.707755][ T3269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.732634][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.951747][ T3656] chnl_net:caif_netlink_parms(): no params data found [ 36.993555][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.001349][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.008707][ T3656] bridge_slave_0: entered allmulticast mode [ 37.015249][ T3656] bridge_slave_0: entered promiscuous mode [ 37.022603][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.029793][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.037261][ T3656] bridge_slave_1: entered allmulticast mode [ 37.043797][ T3656] bridge_slave_1: entered promiscuous mode [ 37.052990][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.076518][ T3656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.088744][ T3656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.132067][ T3656] team0: Port device team_slave_0 added [ 37.138921][ T3656] team0: Port device team_slave_1 added [ 37.149835][ T3693] loop1: detected capacity change from 0 to 2048 [ 37.175334][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.211697][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.218744][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.246367][ T3656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.261421][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.268447][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.294400][ T3656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.317453][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.339634][ T3709] loop0: detected capacity change from 0 to 256 [ 37.346795][ T3706] FAULT_INJECTION: forcing a failure. [ 37.346795][ T3706] name failslab, interval 1, probability 0, space 0, times 0 [ 37.348143][ T3709] msdos: Unknown parameter '' [ 37.359489][ T3706] CPU: 1 UID: 0 PID: 3706 Comm: syz.1.70 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 37.374763][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 37.384860][ T3706] Call Trace: [ 37.388232][ T3706] [ 37.391170][ T3706] dump_stack_lvl+0xf2/0x150 [ 37.395887][ T3706] dump_stack+0x15/0x20 [ 37.400085][ T3706] should_fail_ex+0x229/0x230 [ 37.404772][ T3706] ? __alloc_skb+0x10b/0x310 [ 37.409366][ T3706] should_failslab+0x8f/0xb0 [ 37.414049][ T3706] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 37.420011][ T3706] __alloc_skb+0x10b/0x310 [ 37.424435][ T3706] inet_netconf_notify_devconf+0x15a/0x210 [ 37.430254][ T3706] inetdev_event+0x63d/0xb10 [ 37.434858][ T3706] ? cfg802154_netdev_notifier_call+0x4c2/0x560 [ 37.441113][ T3706] ? __pfx_arp_netdev_event+0x10/0x10 [ 37.446501][ T3706] ? __pfx_inetdev_event+0x10/0x10 [ 37.451674][ T3706] raw_notifier_call_chain+0x6f/0x1d0 [ 37.457055][ T3706] call_netdevice_notifiers_info+0xae/0x100 [ 37.463037][ T3706] __dev_change_net_namespace+0x532/0xe80 [ 37.468773][ T3706] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 37.475057][ T3706] ? __fget_files+0x1da/0x210 [ 37.479768][ T3706] cfg802154_switch_netns+0x90/0x2b0 [ 37.485207][ T3706] nl802154_wpan_phy_netns+0xc9/0x150 [ 37.490597][ T3706] genl_rcv_msg+0x61b/0x6c0 [ 37.495215][ T3706] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 37.500688][ T3706] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 37.506741][ T3706] ? __pfx_nl802154_post_doit+0x10/0x10 [ 37.512304][ T3706] ? __rcu_read_unlock+0x4e/0x70 [ 37.517295][ T3706] netlink_rcv_skb+0x12c/0x230 [ 37.522132][ T3706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 37.527204][ T3706] genl_rcv+0x28/0x40 [ 37.531205][ T3706] netlink_unicast+0x599/0x670 [ 37.536015][ T3706] netlink_sendmsg+0x5cc/0x6e0 [ 37.540866][ T3706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.546244][ T3706] __sock_sendmsg+0x140/0x180 [ 37.550989][ T3706] ____sys_sendmsg+0x312/0x410 [ 37.555853][ T3706] __sys_sendmsg+0x1e9/0x280 [ 37.560534][ T3706] __x64_sys_sendmsg+0x46/0x50 [ 37.565343][ T3706] x64_sys_call+0x2689/0x2d60 [ 37.570036][ T3706] do_syscall_64+0xc9/0x1c0 [ 37.574547][ T3706] ? clear_bhb_loop+0x55/0xb0 [ 37.579304][ T3706] ? clear_bhb_loop+0x55/0xb0 [ 37.583984][ T3706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.589968][ T3706] RIP: 0033:0x7f155c92def9 [ 37.594392][ T3706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.614027][ T3706] RSP: 002b:00007f155b5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.622457][ T3706] RAX: ffffffffffffffda RBX: 00007f155cae5f80 RCX: 00007f155c92def9 [ 37.630430][ T3706] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000005 [ 37.638405][ T3706] RBP: 00007f155b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.646381][ T3706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.654356][ T3706] R13: 0000000000000000 R14: 00007f155cae5f80 R15: 00007ffc1da72ff8 [ 37.662340][ T3706] [ 37.690316][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.767600][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 37.776356][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 37.801596][ T3656] hsr_slave_0: entered promiscuous mode [ 37.822147][ T3656] hsr_slave_1: entered promiscuous mode [ 37.836838][ T3656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.844433][ T3656] Cannot create hsr debugfs directory [ 37.854531][ T3738] process 'syz.0.76' launched './file1' with NULL argv: empty string added [ 37.878559][ T11] bridge_slave_1: left allmulticast mode [ 37.884261][ T11] bridge_slave_1: left promiscuous mode [ 37.890068][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.905574][ T3745] FAULT_INJECTION: forcing a failure. [ 37.905574][ T3745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.918895][ T3745] CPU: 0 UID: 0 PID: 3745 Comm: syz.2.77 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 37.929427][ T3745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 37.939512][ T3745] Call Trace: [ 37.942800][ T3745] [ 37.945763][ T3745] dump_stack_lvl+0xf2/0x150 [ 37.950381][ T3745] dump_stack+0x15/0x20 [ 37.954623][ T3745] should_fail_ex+0x229/0x230 [ 37.959458][ T3745] should_fail+0xb/0x10 [ 37.963696][ T3745] should_fail_usercopy+0x1a/0x20 [ 37.968830][ T3745] strncpy_from_user+0x25/0x270 [ 37.973779][ T3745] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 37.979514][ T3745] getname_flags+0xb0/0x3b0 [ 37.984061][ T3745] getname_uflags+0x24/0x30 [ 37.988621][ T3745] __x64_sys_execveat+0x5e/0x90 [ 37.993515][ T3745] x64_sys_call+0x8ae/0x2d60 [ 37.998146][ T3745] do_syscall_64+0xc9/0x1c0 [ 38.002749][ T3745] ? clear_bhb_loop+0x55/0xb0 [ 38.007514][ T3745] ? clear_bhb_loop+0x55/0xb0 [ 38.012224][ T3745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.018250][ T3745] RIP: 0033:0x7fbe28f9def9 [ 38.022685][ T3745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.042320][ T3745] RSP: 002b:00007fbe27c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 38.050770][ T3745] RAX: ffffffffffffffda RBX: 00007fbe29155f80 RCX: 00007fbe28f9def9 [ 38.058786][ T3745] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 38.066813][ T3745] RBP: 00007fbe27c17090 R08: 0000000000000000 R09: 0000000000000000 [ 38.074816][ T3745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.082808][ T3745] R13: 0000000000000000 R14: 00007fbe29155f80 R15: 00007ffcd50b2a18 [ 38.090967][ T3745] [ 38.096141][ T11] bridge_slave_0: left allmulticast mode [ 38.101965][ T11] bridge_slave_0: left promiscuous mode [ 38.107719][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.132676][ T3769] loop2: detected capacity change from 0 to 512 [ 38.149258][ T3769] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.80: Failed to acquire dquot type 1 [ 38.164768][ T3769] EXT4-fs (loop2): 1 truncate cleaned up [ 38.172655][ T3769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.185766][ T3769] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.197398][ T3769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.218840][ T3769] loop2: detected capacity change from 0 to 1024 [ 38.232525][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.243213][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.247036][ T3769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.267445][ T11] bond0 (unregistering): Released all slaves [ 38.282656][ T3752] pim6reg: entered allmulticast mode [ 38.288138][ T3766] pim6reg: left allmulticast mode [ 38.321382][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 38.330335][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 38.344336][ T3769] dummy0: entered promiscuous mode [ 38.352684][ T3769] batadv_slave_1: entered promiscuous mode [ 38.407969][ T11] hsr_slave_0: left promiscuous mode [ 38.420097][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.434092][ T11] hsr_slave_1: left promiscuous mode [ 38.451713][ T3788] loop0: detected capacity change from 0 to 512 [ 38.465121][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.472690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.483518][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.491055][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.508540][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.543632][ T11] veth1_macvtap: left promiscuous mode [ 38.549218][ T11] veth0_macvtap: left promiscuous mode [ 38.554756][ T11] veth1_vlan: left promiscuous mode [ 38.561749][ T3788] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.756157][ T11] team0 (unregistering): Port device team_slave_1 removed [ 38.773258][ T11] team0 (unregistering): Port device team_slave_0 removed [ 38.791226][ T3811] EXT4-fs (loop0): shut down requested (0) [ 38.861695][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.874200][ T3806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 38.883209][ T3806] tipc: Started in network mode [ 38.888153][ T3806] tipc: Node identity , cluster identity 4711 [ 38.894236][ T3806] tipc: Failed to set node id, please configure manually [ 38.901303][ T3806] tipc: Enabling of bearer rejected, failed to enable media [ 38.911346][ T3810] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.012390][ T3821] loop0: detected capacity change from 0 to 1024 [ 39.033124][ T3821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.079637][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.124479][ T3825] loop2: detected capacity change from 0 to 2048 [ 39.154889][ T3825] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 39.348928][ T3847] loop2: detected capacity change from 0 to 512 [ 39.369622][ T3847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.386021][ T3847] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.408825][ T3849] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.416687][ T3849] FAULT_INJECTION: forcing a failure. [ 39.416687][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 39.429396][ T3849] CPU: 0 UID: 0 PID: 3849 Comm: syz.1.96 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 39.439999][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.450077][ T3849] Call Trace: [ 39.453435][ T3849] [ 39.456378][ T3849] dump_stack_lvl+0xf2/0x150 [ 39.461013][ T3849] dump_stack+0x15/0x20 [ 39.465192][ T3849] should_fail_ex+0x229/0x230 [ 39.469892][ T3849] ? fib6_new_table+0x9c/0x1b0 [ 39.474741][ T3849] should_failslab+0x8f/0xb0 [ 39.479413][ T3849] __kmalloc_cache_noprof+0x4b/0x2a0 [ 39.484767][ T3849] fib6_new_table+0x9c/0x1b0 [ 39.489373][ T3849] ip6_route_info_create+0x322/0xba0 [ 39.494710][ T3849] ip6_route_add+0x26/0x120 [ 39.499242][ T3849] inet6_rtm_newroute+0x174/0x11c0 [ 39.504390][ T3849] ? __rcu_read_unlock+0x4e/0x70 [ 39.509436][ T3849] ? __perf_event_task_sched_in+0x7c4/0x7f0 [ 39.515346][ T3849] ? xfd_validate_state+0x46/0xf0 [ 39.520449][ T3849] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 39.525306][ T3847] EXT4-fs (loop2): shut down requested (0) [ 39.526744][ T3849] ? _raw_spin_unlock+0x26/0x50 [ 39.526783][ T3849] ? __mutex_lock+0x221/0x8e0 [ 39.542156][ T3849] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 39.547780][ T3849] rtnetlink_rcv_msg+0x6aa/0x710 [ 39.552815][ T3849] ? ref_tracker_free+0x3a5/0x410 [ 39.557911][ T3849] ? __dev_queue_xmit+0x161/0x1fe0 [ 39.563071][ T3849] netlink_rcv_skb+0x12c/0x230 [ 39.567848][ T3849] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 39.573336][ T3849] rtnetlink_rcv+0x1c/0x30 [ 39.577791][ T3849] netlink_unicast+0x599/0x670 [ 39.582607][ T3849] netlink_sendmsg+0x5cc/0x6e0 [ 39.587385][ T3849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.592691][ T3849] __sock_sendmsg+0x140/0x180 [ 39.597458][ T3849] ____sys_sendmsg+0x312/0x410 [ 39.602253][ T3849] __sys_sendmsg+0x1e9/0x280 [ 39.606933][ T3849] __x64_sys_sendmsg+0x46/0x50 [ 39.611745][ T3849] x64_sys_call+0x2689/0x2d60 [ 39.616489][ T3849] do_syscall_64+0xc9/0x1c0 [ 39.621011][ T3849] ? clear_bhb_loop+0x55/0xb0 [ 39.625731][ T3849] ? clear_bhb_loop+0x55/0xb0 [ 39.630426][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.636344][ T3849] RIP: 0033:0x7f155c92def9 [ 39.640848][ T3849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.660474][ T3849] RSP: 002b:00007f155b5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.668959][ T3849] RAX: ffffffffffffffda RBX: 00007f155cae5f80 RCX: 00007f155c92def9 [ 39.676937][ T3849] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 39.684960][ T3849] RBP: 00007f155b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.692958][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.700989][ T3849] R13: 0000000000000000 R14: 00007f155cae5f80 R15: 00007ffc1da72ff8 [ 39.709043][ T3849] [ 39.831976][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.863821][ T3866] FAULT_INJECTION: forcing a failure. [ 39.863821][ T3866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.877153][ T3866] CPU: 0 UID: 0 PID: 3866 Comm: syz.2.100 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 39.887821][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.897985][ T3866] Call Trace: [ 39.901288][ T3866] [ 39.904239][ T3866] dump_stack_lvl+0xf2/0x150 [ 39.908939][ T3866] dump_stack+0x15/0x20 [ 39.913119][ T3866] should_fail_ex+0x229/0x230 [ 39.917849][ T3866] should_fail+0xb/0x10 [ 39.922081][ T3866] should_fail_usercopy+0x1a/0x20 [ 39.927138][ T3866] _copy_from_user+0x1e/0xd0 [ 39.931850][ T3866] get_timespec64+0x49/0x140 [ 39.936558][ T3866] __se_sys_nanosleep+0x46/0x2e0 [ 39.941600][ T3866] ? __secure_computing+0x9f/0x1c0 [ 39.946831][ T3866] __x64_sys_nanosleep+0x31/0x40 [ 39.951839][ T3866] x64_sys_call+0x1e18/0x2d60 [ 39.956629][ T3866] do_syscall_64+0xc9/0x1c0 [ 39.961165][ T3866] ? clear_bhb_loop+0x55/0xb0 [ 39.965938][ T3866] ? clear_bhb_loop+0x55/0xb0 [ 39.970706][ T3866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.976683][ T3866] RIP: 0033:0x7fbe28f9def9 [ 39.981110][ T3866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.000882][ T3866] RSP: 002b:00007fbe27c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 40.009240][ T3868] loop0: detected capacity change from 0 to 1024 [ 40.009314][ T3866] RAX: ffffffffffffffda RBX: 00007fbe29155f80 RCX: 00007fbe28f9def9 [ 40.023674][ T3866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.031661][ T3866] RBP: 00007fbe27c17090 R08: 0000000000000000 R09: 0000000000000000 [ 40.039655][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.047649][ T3866] R13: 0000000000000000 R14: 00007fbe29155f80 R15: 00007ffcd50b2a18 [ 40.055819][ T3866] [ 40.074739][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.137596][ T3868] FAULT_INJECTION: forcing a failure. [ 40.137596][ T3868] name failslab, interval 1, probability 0, space 0, times 0 [ 40.150276][ T3868] CPU: 1 UID: 0 PID: 3868 Comm: syz.0.101 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 40.160926][ T3868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.171042][ T3868] Call Trace: [ 40.174358][ T3868] [ 40.177310][ T3868] dump_stack_lvl+0xf2/0x150 [ 40.181927][ T3868] dump_stack+0x15/0x20 [ 40.186158][ T3868] should_fail_ex+0x229/0x230 [ 40.190921][ T3868] ? ext4_find_extent+0x216/0x860 [ 40.196068][ T3868] should_failslab+0x8f/0xb0 [ 40.200814][ T3868] __kmalloc_noprof+0xa5/0x370 [ 40.205615][ T3868] ext4_find_extent+0x216/0x860 [ 40.210542][ T3868] ? vsnprintf+0xdd8/0xe30 [ 40.215005][ T3868] ? _prb_read_valid+0xb3d/0xba0 [ 40.219959][ T3868] ext4_ext_map_blocks+0x114/0x33b0 [ 40.225258][ T3868] ? xas_load+0x3ae/0x3d0 [ 40.229624][ T3868] ? xas_load+0x3ae/0x3d0 [ 40.234019][ T3868] ? __rcu_read_unlock+0x4e/0x70 [ 40.238987][ T3868] ? xa_load+0xb9/0xe0 [ 40.243231][ T3868] ? ext4_es_lookup_extent+0x35b/0x520 [ 40.248727][ T3868] ext4_map_blocks+0x2b1/0xf50 [ 40.253658][ T3868] ext4_getblk+0x112/0x500 [ 40.258177][ T3868] ext4_bread_batch+0x5b/0x360 [ 40.263053][ T3868] __ext4_find_entry+0x9d3/0x10a0 [ 40.268199][ T3868] ? kmem_cache_alloc_lru_noprof+0x1ae/0x2a0 [ 40.274237][ T3868] ? __d_lookup_rcu+0x25b/0x2a0 [ 40.279102][ T3868] ? d_alloc_parallel+0xbfe/0xc80 [ 40.284135][ T3868] ? selinux_inode_permission+0x337/0x400 [ 40.289867][ T3868] ext4_lookup+0xba/0x390 [ 40.294239][ T3868] __lookup_slow+0x184/0x250 [ 40.298864][ T3868] lookup_slow+0x3c/0x60 [ 40.303140][ T3868] walk_component+0x1f5/0x230 [ 40.307852][ T3868] ? path_lookupat+0xfd/0x2b0 [ 40.312569][ T3868] path_lookupat+0x10a/0x2b0 [ 40.317205][ T3868] filename_lookup+0x127/0x300 [ 40.322015][ T3868] user_path_at+0x3c/0x110 [ 40.326438][ T3868] __x64_sys_listxattr+0x76/0x130 [ 40.331536][ T3868] x64_sys_call+0x1fbc/0x2d60 [ 40.336234][ T3868] do_syscall_64+0xc9/0x1c0 [ 40.340756][ T3868] ? clear_bhb_loop+0x55/0xb0 [ 40.345437][ T3868] ? clear_bhb_loop+0x55/0xb0 [ 40.350118][ T3868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.356106][ T3868] RIP: 0033:0x7f469cdbdef9 [ 40.360580][ T3868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.380195][ T3868] RSP: 002b:00007f469ba31038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 40.388612][ T3868] RAX: ffffffffffffffda RBX: 00007f469cf75f80 RCX: 00007f469cdbdef9 [ 40.396589][ T3868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000a00 [ 40.404649][ T3868] RBP: 00007f469ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 40.412623][ T3868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.420596][ T3868] R13: 0000000000000000 R14: 00007f469cf75f80 R15: 00007ffe6d9c6738 [ 40.428633][ T3868] [ 40.473332][ T3656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.526174][ T3656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.539480][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.556705][ T3656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.575835][ T3656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.610790][ T3873] netlink: 3 bytes leftover after parsing attributes in process `syz.1.102'. [ 40.690021][ T3656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.734845][ T3656] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.745164][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.752425][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.812497][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.819752][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.883654][ T3913] loop3: detected capacity change from 0 to 512 [ 40.950268][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 40.958104][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 40.965759][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 40.973600][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 40.981350][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 40.989284][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 40.997080][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.004732][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.012523][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.020201][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.027865][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.035519][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.043472][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.051174][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.058896][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.066817][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.074579][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.082465][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.090150][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.097812][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.105540][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.113313][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.121019][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.128700][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.136374][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.144141][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.151831][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.159711][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.167372][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.334719][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.355760][ T3913] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.417963][ T3656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.445456][ T35] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 41.526850][ T3933] can0: slcan on pts0. [ 41.686058][ T3938] can0 (unregistered): slcan off pts0. [ 41.734178][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 41.734300][ T29] audit: type=1400 audit(1726021971.660:457): avc: denied { write } for pid=3958 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.794775][ T29] audit: type=1400 audit(1726021971.700:458): avc: denied { write } for pid=3958 comm="syz.0.115" path="socket:[4764]" dev="sockfs" ino=4764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.818081][ T29] audit: type=1400 audit(1726021971.700:459): avc: denied { ioctl } for pid=3958 comm="syz.0.115" path="socket:[4764]" dev="sockfs" ino=4764 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.842611][ T29] audit: type=1400 audit(1726021971.700:460): avc: denied { ioctl } for pid=3958 comm="syz.0.115" path="socket:[4760]" dev="sockfs" ino=4760 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.860798][ T3656] veth0_vlan: entered promiscuous mode [ 41.866972][ T29] audit: type=1400 audit(1726021971.700:461): avc: denied { map } for pid=3958 comm="syz.0.115" path="pipe:[4763]" dev="pipefs" ino=4763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 41.874496][ T3966] EXT4-fs (loop3): shut down requested (0) [ 41.895130][ T29] audit: type=1400 audit(1726021971.700:462): avc: denied { execute } for pid=3958 comm="syz.0.115" path="pipe:[4763]" dev="pipefs" ino=4763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 41.947204][ T3656] veth1_vlan: entered promiscuous mode [ 41.985055][ T3656] veth0_macvtap: entered promiscuous mode [ 42.017001][ T3656] veth1_macvtap: entered promiscuous mode [ 42.060246][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.070872][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.080795][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.091525][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.101681][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.112138][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.121978][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.132614][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.154691][ T3978] FAULT_INJECTION: forcing a failure. [ 42.154691][ T3978] name failslab, interval 1, probability 0, space 0, times 0 [ 42.167421][ T3978] CPU: 1 UID: 0 PID: 3978 Comm: syz.1.117 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 42.178232][ T3978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.188391][ T3978] Call Trace: [ 42.191675][ T3978] [ 42.194656][ T3978] dump_stack_lvl+0xf2/0x150 [ 42.199332][ T3978] dump_stack+0x15/0x20 [ 42.203506][ T3978] should_fail_ex+0x229/0x230 [ 42.208208][ T3978] ? skb_clone+0x154/0x1f0 [ 42.212740][ T3978] should_failslab+0x8f/0xb0 [ 42.217466][ T3978] kmem_cache_alloc_noprof+0x4c/0x290 [ 42.222905][ T3978] skb_clone+0x154/0x1f0 [ 42.227222][ T3978] ip6_finish_output2+0x1f8/0xd20 [ 42.232309][ T3978] ip6_finish_output+0x438/0x540 [ 42.237322][ T3978] ip6_output+0xf5/0x230 [ 42.241626][ T3978] ? __pfx_ip6_finish_output+0x10/0x10 [ 42.247156][ T3978] ? __pfx_ip6_output+0x10/0x10 [ 42.252036][ T3978] ip6_local_out+0x76/0xd0 [ 42.256563][ T3978] ip6_send_skb+0x5a/0x120 [ 42.258077][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.260994][ T3978] udp_v6_send_skb+0x760/0xbf0 [ 42.273012][ T3978] udpv6_sendmsg+0x14de/0x1590 [ 42.277852][ T3978] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 42.283500][ T3978] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 42.288828][ T3978] inet6_sendmsg+0xaf/0xd0 [ 42.293311][ T3978] __sock_sendmsg+0x8b/0x180 [ 42.297994][ T3978] sock_write_iter+0x164/0x1b0 [ 42.302800][ T3978] vfs_write+0x78f/0x900 [ 42.307058][ T3978] ? __pfx_sock_write_iter+0x10/0x10 [ 42.312385][ T3978] ksys_write+0xeb/0x1b0 [ 42.316725][ T3978] __x64_sys_write+0x42/0x50 [ 42.321336][ T3978] x64_sys_call+0x27dd/0x2d60 [ 42.326200][ T3978] do_syscall_64+0xc9/0x1c0 [ 42.330726][ T3978] ? clear_bhb_loop+0x55/0xb0 [ 42.335420][ T3978] ? clear_bhb_loop+0x55/0xb0 [ 42.340167][ T3978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.346103][ T3978] RIP: 0033:0x7f155c92def9 [ 42.350538][ T3978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.351084][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.370150][ T3978] RSP: 002b:00007f155b5a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.370175][ T3978] RAX: ffffffffffffffda RBX: 00007f155cae5f80 RCX: 00007f155c92def9 [ 42.370190][ T3978] RDX: 0000000000001fc0 RSI: 0000000020000200 RDI: 0000000000000003 [ 42.380690][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.389036][ T3978] RBP: 00007f155b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.389053][ T3978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.397035][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.404981][ T3978] R13: 0000000000000000 R14: 00007f155cae5f80 R15: 00007ffc1da72ff8 [ 42.414779][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.422724][ T3978] [ 42.462239][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.472732][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.482592][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.493056][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.538647][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.588411][ T3656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.597600][ T3656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.606515][ T3656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.615488][ T3656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.628407][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.776448][ T29] audit: type=1107 audit(1726021972.660:463): pid=3992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='3' [ 42.789745][ T29] audit: type=1326 audit(1726021972.680:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02677def9 code=0x7ffc0000 [ 42.813370][ T29] audit: type=1326 audit(1726021972.680:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02677def9 code=0x7ffc0000 [ 42.836674][ T29] audit: type=1326 audit(1726021972.680:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa02677def9 code=0x7ffc0000 [ 42.872937][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 43.079682][ T4019] FAULT_INJECTION: forcing a failure. [ 43.079682][ T4019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.092887][ T4019] CPU: 0 UID: 0 PID: 4019 Comm: +}[@ Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 43.103068][ T4019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.113140][ T4019] Call Trace: [ 43.116436][ T4019] [ 43.119384][ T4019] dump_stack_lvl+0xf2/0x150 [ 43.124010][ T4019] dump_stack+0x15/0x20 [ 43.128192][ T4019] should_fail_ex+0x229/0x230 [ 43.132891][ T4019] should_fail+0xb/0x10 [ 43.137058][ T4019] should_fail_usercopy+0x1a/0x20 [ 43.142098][ T4019] _copy_to_user+0x1e/0xa0 [ 43.146533][ T4019] simple_read_from_buffer+0xa0/0x110 [ 43.151915][ T4019] proc_fail_nth_read+0xff/0x140 [ 43.156860][ T4019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.162415][ T4019] vfs_read+0x1a2/0x6e0 [ 43.166584][ T4019] ? __rcu_read_unlock+0x4e/0x70 [ 43.171543][ T4019] ? __fget_files+0x1da/0x210 [ 43.176240][ T4019] ksys_read+0xeb/0x1b0 [ 43.180409][ T4019] __x64_sys_read+0x42/0x50 [ 43.184944][ T4019] x64_sys_call+0x27d3/0x2d60 [ 43.189640][ T4019] do_syscall_64+0xc9/0x1c0 [ 43.194156][ T4019] ? clear_bhb_loop+0x55/0xb0 [ 43.198838][ T4019] ? clear_bhb_loop+0x55/0xb0 [ 43.203521][ T4019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.209432][ T4019] RIP: 0033:0x7f155c92c93c [ 43.213845][ T4019] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 43.233456][ T4019] RSP: 002b:00007f155b5a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.241875][ T4019] RAX: ffffffffffffffda RBX: 00007f155cae5f80 RCX: 00007f155c92c93c [ 43.249848][ T4019] RDX: 000000000000000f RSI: 00007f155b5a70a0 RDI: 0000000000000006 [ 43.257822][ T4019] RBP: 00007f155b5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.265799][ T4019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.273769][ T4019] R13: 0000000000000000 R14: 00007f155cae5f80 R15: 00007ffc1da72ff8 [ 43.281750][ T4019] [ 43.292366][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 43.301348][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 43.311675][ T4018] loop2: detected capacity change from 0 to 512 [ 43.345436][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.363691][ T4018] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.525746][ T4018] EXT4-fs (loop2): shut down requested (0) [ 43.684746][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.959494][ T4049] loop0: detected capacity change from 0 to 512 [ 43.966186][ T4049] ======================================================= [ 43.966186][ T4049] WARNING: The mand mount option has been deprecated and [ 43.966186][ T4049] and is ignored by this kernel. Remove the mand [ 43.966186][ T4049] option from the mount to silence this warning. [ 43.966186][ T4049] ======================================================= [ 44.221312][ T4049] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 44.289967][ T4070] FAULT_INJECTION: forcing a failure. [ 44.289967][ T4070] name failslab, interval 1, probability 0, space 0, times 0 [ 44.302787][ T4070] CPU: 0 UID: 0 PID: 4070 Comm: syz.4.145 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 44.313399][ T4070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 44.323474][ T4070] Call Trace: [ 44.326826][ T4070] [ 44.329795][ T4070] dump_stack_lvl+0xf2/0x150 [ 44.334419][ T4070] dump_stack+0x15/0x20 [ 44.338644][ T4070] should_fail_ex+0x229/0x230 [ 44.343354][ T4070] ? mas_alloc_nodes+0x1d3/0x4a0 [ 44.348404][ T4070] should_failslab+0x8f/0xb0 [ 44.353116][ T4070] kmem_cache_alloc_noprof+0x4c/0x290 [ 44.358595][ T4070] mas_alloc_nodes+0x1d3/0x4a0 [ 44.363402][ T4070] mas_preallocate+0x773/0xc30 [ 44.368256][ T4070] __split_vma+0x244/0x690 [ 44.372763][ T4070] do_vmi_align_munmap+0x227/0xa60 [ 44.377925][ T4070] do_vmi_munmap+0x1fb/0x250 [ 44.382562][ T4070] __vm_munmap+0xec/0x210 [ 44.387017][ T4070] __x64_sys_munmap+0x36/0x40 [ 44.391821][ T4070] x64_sys_call+0xd32/0x2d60 [ 44.396489][ T4070] do_syscall_64+0xc9/0x1c0 [ 44.401068][ T4070] ? clear_bhb_loop+0x55/0xb0 [ 44.405771][ T4070] ? clear_bhb_loop+0x55/0xb0 [ 44.410520][ T4070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.416553][ T4070] RIP: 0033:0x7f461019def9 [ 44.421050][ T4070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.440677][ T4070] RSP: 002b:00007f460ee11038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 44.449238][ T4070] RAX: ffffffffffffffda RBX: 00007f4610355f80 RCX: 00007f461019def9 [ 44.457302][ T4070] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffb000 [ 44.465324][ T4070] RBP: 00007f460ee11090 R08: 0000000000000000 R09: 0000000000000000 [ 44.473399][ T4070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.481392][ T4070] R13: 0000000000000000 R14: 00007f4610355f80 R15: 00007ffc83397708 [ 44.489393][ T4070] [ 44.508156][ T4077] FAULT_INJECTION: forcing a failure. [ 44.508156][ T4077] name failslab, interval 1, probability 0, space 0, times 0 [ 44.520859][ T4077] CPU: 0 UID: 0 PID: 4077 Comm: syz.0.146 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 44.531457][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 44.541777][ T4077] Call Trace: [ 44.545065][ T4077] [ 44.548068][ T4077] dump_stack_lvl+0xf2/0x150 [ 44.552680][ T4077] dump_stack+0x15/0x20 [ 44.556923][ T4077] should_fail_ex+0x229/0x230 [ 44.561688][ T4077] ? __nf_conntrack_alloc+0xcd/0x280 [ 44.566995][ T4077] should_failslab+0x8f/0xb0 [ 44.571672][ T4077] kmem_cache_alloc_noprof+0x4c/0x290 [ 44.577123][ T4077] __nf_conntrack_alloc+0xcd/0x280 [ 44.582262][ T4077] init_conntrack+0x191/0x970 [ 44.586970][ T4077] nf_conntrack_in+0x89c/0xf20 [ 44.591790][ T4077] ipv4_conntrack_local+0xce/0x160 [ 44.597013][ T4077] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 44.602949][ T4077] nf_hook_slow+0x86/0x1b0 [ 44.607408][ T4077] __ip_local_out+0x2d6/0x300 [ 44.612156][ T4077] ? __pfx_dst_output+0x10/0x10 [ 44.617097][ T4077] ip_send_skb+0x30/0x140 [ 44.621446][ T4077] udp_send_skb+0x680/0x9d0 [ 44.626072][ T4077] udp_sendmsg+0x1257/0x12f0 [ 44.630712][ T4077] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 44.636298][ T4077] udpv6_sendmsg+0x774/0x1590 [ 44.641004][ T4077] ? perf_callchain_user+0x72b/0x750 [ 44.646320][ T4077] ? avc_has_perm_noaudit+0x1cc/0x210 [ 44.648636][ T4081] netlink: 256 bytes leftover after parsing attributes in process `syz.3.144'. [ 44.651860][ T4077] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 44.665931][ T4077] inet6_sendmsg+0xaf/0xd0 [ 44.670411][ T4077] __sock_sendmsg+0x8b/0x180 [ 44.675216][ T4077] sock_write_iter+0x164/0x1b0 [ 44.680022][ T4077] vfs_write+0x78f/0x900 [ 44.684339][ T4077] ? __pfx_sock_write_iter+0x10/0x10 [ 44.689676][ T4077] ksys_write+0xeb/0x1b0 [ 44.694010][ T4077] __x64_sys_write+0x42/0x50 [ 44.698674][ T4077] x64_sys_call+0x27dd/0x2d60 [ 44.703412][ T4077] do_syscall_64+0xc9/0x1c0 [ 44.707968][ T4077] ? clear_bhb_loop+0x55/0xb0 [ 44.712671][ T4077] ? clear_bhb_loop+0x55/0xb0 [ 44.717471][ T4077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.723501][ T4077] RIP: 0033:0x7f469cdbdef9 [ 44.727944][ T4077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.747772][ T4077] RSP: 002b:00007f469ba31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.756220][ T4077] RAX: ffffffffffffffda RBX: 00007f469cf75f80 RCX: 00007f469cdbdef9 [ 44.764225][ T4077] RDX: 0000000000001fc0 RSI: 0000000020000200 RDI: 0000000000000004 [ 44.772261][ T4077] RBP: 00007f469ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 44.780257][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.788424][ T4077] R13: 0000000000000000 R14: 00007f469cf75f80 R15: 00007ffe6d9c6738 [ 44.796476][ T4077] [ 44.829867][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 44.838772][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 44.860736][ T4083] loop4: detected capacity change from 0 to 512 [ 44.907335][ T4097] loop1: detected capacity change from 0 to 2048 [ 44.920144][ T4083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.995941][ T4083] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.101685][ T4108] loop1: detected capacity change from 0 to 1024 [ 45.105920][ T4087] EXT4-fs (loop4): shut down requested (0) [ 45.116562][ T4097] serio: Serial port ttyS3 [ 45.386830][ T3656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.396466][ T4115] loop2: detected capacity change from 0 to 1024 [ 45.416312][ T4115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.458212][ T4115] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.493755][ T4119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4119 comm=syz.4.158 [ 45.527921][ T4115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.570730][ T4115] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 45.812054][ T4126] loop4: detected capacity change from 0 to 2048 [ 45.827470][ T4126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.841314][ T4126] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.161: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 45.858104][ T4126] EXT4-fs (loop4): Remounting filesystem read-only [ 45.885222][ T3656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.914513][ T4144] FAULT_INJECTION: forcing a failure. [ 45.914513][ T4144] name failslab, interval 1, probability 0, space 0, times 0 [ 45.927205][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.3.167 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 45.937823][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 45.947884][ T4144] Call Trace: [ 45.951169][ T4144] [ 45.954174][ T4144] dump_stack_lvl+0xf2/0x150 [ 45.958782][ T4144] dump_stack+0x15/0x20 [ 45.962965][ T4144] should_fail_ex+0x229/0x230 [ 45.967652][ T4144] ? __get_vm_area_node+0xf7/0x1b0 [ 45.973244][ T4144] should_failslab+0x8f/0xb0 [ 45.977852][ T4144] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 45.983662][ T4144] __get_vm_area_node+0xf7/0x1b0 [ 45.988692][ T4144] __vmalloc_node_range_noprof+0x2e1/0xec0 [ 45.994508][ T4144] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 46.000128][ T4144] ? __rcu_read_unlock+0x4e/0x70 [ 46.005237][ T4144] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 46.010816][ T4144] __vmalloc_noprof+0x5e/0x70 [ 46.015493][ T4144] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 46.021039][ T4144] bpf_prog_alloc_no_stats+0x49/0x360 [ 46.026420][ T4144] ? bpf_prog_alloc+0x28/0x150 [ 46.031185][ T4144] bpf_prog_alloc+0x3a/0x150 [ 46.035848][ T4144] bpf_prog_create+0x69/0x120 [ 46.040562][ T4144] ppp_get_filter+0x114/0x160 [ 46.045318][ T4144] ppp_ioctl+0xbe3/0x11b0 [ 46.049656][ T4144] ? __pfx_ppp_ioctl+0x10/0x10 [ 46.054454][ T4144] __se_sys_ioctl+0xd3/0x150 [ 46.059134][ T4144] __x64_sys_ioctl+0x43/0x50 [ 46.063815][ T4144] x64_sys_call+0x15cc/0x2d60 [ 46.068641][ T4144] do_syscall_64+0xc9/0x1c0 [ 46.073203][ T4144] ? clear_bhb_loop+0x55/0xb0 [ 46.077883][ T4144] ? clear_bhb_loop+0x55/0xb0 [ 46.082733][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.088725][ T4144] RIP: 0033:0x7fa02677def9 [ 46.093202][ T4144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.112811][ T4144] RSP: 002b:00007fa0253f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.121221][ T4144] RAX: ffffffffffffffda RBX: 00007fa026935f80 RCX: 00007fa02677def9 [ 46.129282][ T4144] RDX: 0000000020000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 46.137257][ T4144] RBP: 00007fa0253f7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.145227][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.153200][ T4144] R13: 0000000000000000 R14: 00007fa026935f80 R15: 00007ffee69948a8 [ 46.161185][ T4144] [ 46.164317][ T4144] syz.3.167: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 46.180318][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.3.167 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 46.181262][ T4124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.190946][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.190962][ T4144] Call Trace: [ 46.190970][ T4144] [ 46.190978][ T4144] dump_stack_lvl+0xf2/0x150 [ 46.191009][ T4144] dump_stack+0x15/0x20 [ 46.225294][ T4144] warn_alloc+0x145/0x1b0 [ 46.229739][ T4144] __vmalloc_node_range_noprof+0x306/0xec0 [ 46.235625][ T4144] ? __rcu_read_unlock+0x4e/0x70 [ 46.240599][ T4144] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 46.246208][ T4144] __vmalloc_noprof+0x5e/0x70 [ 46.251003][ T4144] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 46.256652][ T4144] bpf_prog_alloc_no_stats+0x49/0x360 [ 46.262109][ T4144] ? bpf_prog_alloc+0x28/0x150 [ 46.266875][ T4144] bpf_prog_alloc+0x3a/0x150 [ 46.271477][ T4144] bpf_prog_create+0x69/0x120 [ 46.276224][ T4144] ppp_get_filter+0x114/0x160 [ 46.280914][ T4144] ppp_ioctl+0xbe3/0x11b0 [ 46.285248][ T4144] ? __pfx_ppp_ioctl+0x10/0x10 [ 46.290105][ T4144] __se_sys_ioctl+0xd3/0x150 [ 46.294775][ T4144] __x64_sys_ioctl+0x43/0x50 [ 46.299401][ T4144] x64_sys_call+0x15cc/0x2d60 [ 46.304090][ T4144] do_syscall_64+0xc9/0x1c0 [ 46.308606][ T4144] ? clear_bhb_loop+0x55/0xb0 [ 46.313289][ T4144] ? clear_bhb_loop+0x55/0xb0 [ 46.317992][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.323953][ T4144] RIP: 0033:0x7fa02677def9 [ 46.328370][ T4144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.348043][ T4144] RSP: 002b:00007fa0253f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.356460][ T4144] RAX: ffffffffffffffda RBX: 00007fa026935f80 RCX: 00007fa02677def9 [ 46.364454][ T4144] RDX: 0000000020000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 46.372455][ T4144] RBP: 00007fa0253f7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.380436][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.388476][ T4144] R13: 0000000000000000 R14: 00007fa026935f80 R15: 00007ffee69948a8 [ 46.396502][ T4144] [ 46.400272][ T4144] Mem-Info: [ 46.403807][ T4144] active_anon:4223 inactive_anon:0 isolated_anon:0 [ 46.403807][ T4144] active_file:17621 inactive_file:1939 isolated_file:0 [ 46.403807][ T4144] unevictable:0 dirty:1352 writeback:0 [ 46.403807][ T4144] slab_reclaimable:2559 slab_unreclaimable:13682 [ 46.403807][ T4144] mapped:20759 shmem:622 pagetables:645 [ 46.403807][ T4144] sec_pagetables:0 bounce:0 [ 46.403807][ T4144] kernel_misc_reclaimable:0 [ 46.403807][ T4144] free:1906621 free_pcp:6910 free_cma:0 [ 46.448949][ T4144] Node 0 active_anon:16892kB inactive_anon:0kB active_file:70484kB inactive_file:7756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:83036kB dirty:5408kB writeback:0kB shmem:2488kB writeback_tmp:0kB kernel_stack:2912kB pagetables:2580kB sec_pagetables:0kB all_unreclaimable? no [ 46.477167][ T4144] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.504029][ T4144] lowmem_reserve[]: 0 2866 7844 0 [ 46.509196][ T4144] Node 0 DMA32 free:2950436kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953968kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 46.537729][ T4144] lowmem_reserve[]: 0 0 4978 0 [ 46.542585][ T4144] Node 0 Normal free:4660708kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:16908kB inactive_anon:0kB active_file:70544kB inactive_file:7768kB unevictable:0kB writepending:5460kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:24100kB local_pcp:22436kB free_cma:0kB [ 46.572930][ T4144] lowmem_reserve[]: 0 0 0 0 [ 46.577490][ T4144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.590238][ T4144] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950436kB [ 46.606343][ T4144] Node 0 Normal: 725*4kB (UME) 694*8kB (UME) 500*16kB (UME) 461*32kB (UME) 336*64kB (UME) 96*128kB (UME) 64*256kB (UM) 46*512kB (UM) 27*1024kB (UME) 11*2048kB (UM) 1100*4096kB (UM) = 4660708kB [ 46.625567][ T4144] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 46.634933][ T4144] 20218 total pagecache pages [ 46.639618][ T4144] 0 pages in swap cache [ 46.643754][ T4144] Free swap = 124692kB [ 46.647941][ T4144] Total swap = 124996kB [ 46.652094][ T4144] 2097051 pages RAM [ 46.655983][ T4144] 0 pages HighMem/MovableOnly [ 46.660656][ T4144] 80167 pages reserved [ 46.692462][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.735900][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 46.735919][ T29] audit: type=1400 audit(1726021976.660:545): avc: denied { ioctl } for pid=4159 comm="syz.4.173" path="socket:[6146]" dev="sockfs" ino=6146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.800465][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.827405][ T29] audit: type=1400 audit(1726021976.760:546): avc: denied { remount } for pid=4168 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.890434][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.941908][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.953755][ T4181] loop0: detected capacity change from 0 to 2048 [ 46.965146][ T4185] netlink: 'syz.4.181': attribute type 21 has an invalid length. [ 46.973209][ T4185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.181'. [ 46.975370][ T4181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.036084][ T4192] netlink: 'syz.3.183': attribute type 21 has an invalid length. [ 47.043956][ T4192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.183'. [ 47.049696][ T4194] loop4: detected capacity change from 0 to 128 [ 47.075865][ T4157] chnl_net:caif_netlink_parms(): no params data found [ 47.131143][ T4208] FAULT_INJECTION: forcing a failure. [ 47.131143][ T4208] name failslab, interval 1, probability 0, space 0, times 0 [ 47.143988][ T4208] CPU: 0 UID: 0 PID: 4208 Comm: syz.3.187 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 47.154664][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.164797][ T4208] Call Trace: [ 47.168088][ T4208] [ 47.171024][ T4208] dump_stack_lvl+0xf2/0x150 [ 47.172836][ T29] audit: type=1400 audit(1726021977.080:547): avc: denied { setopt } for pid=4210 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.175681][ T4208] dump_stack+0x15/0x20 [ 47.197057][ T29] audit: type=1400 audit(1726021977.080:548): avc: denied { write } for pid=4210 comm="syz.4.189" lport=51428 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.199084][ T4208] should_fail_ex+0x229/0x230 [ 47.199132][ T4208] ? tcf_idr_create+0x42/0x4c0 [ 47.221954][ T4212] netlink: 64 bytes leftover after parsing attributes in process `syz.4.189'. [ 47.225395][ T4208] should_failslab+0x8f/0xb0 [ 47.243664][ T4208] __kmalloc_noprof+0xa5/0x370 [ 47.248642][ T4208] ? radix_tree_iter_tag_clear+0x109/0x180 [ 47.254519][ T4208] tcf_idr_create+0x42/0x4c0 [ 47.259109][ T4208] ? idr_alloc_u32+0x127/0x180 [ 47.263904][ T4208] tcf_idr_create_from_flags+0x63/0x80 [ 47.269469][ T4208] tcf_pedit_init+0x279/0x8e0 [ 47.274150][ T4208] tcf_action_init_1+0x339/0x490 [ 47.279100][ T4208] tcf_action_init+0x1a0/0x530 [ 47.283931][ T4208] tc_ctl_action+0x292/0x840 [ 47.288544][ T4208] ? __pfx_tc_ctl_action+0x10/0x10 [ 47.293659][ T4208] rtnetlink_rcv_msg+0x6aa/0x710 [ 47.298597][ T4208] ? ref_tracker_free+0x3a5/0x410 [ 47.303717][ T4208] ? __dev_queue_xmit+0x161/0x1fe0 [ 47.308861][ T4208] netlink_rcv_skb+0x12c/0x230 [ 47.313684][ T4208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.319176][ T4208] rtnetlink_rcv+0x1c/0x30 [ 47.323743][ T4208] netlink_unicast+0x599/0x670 [ 47.328506][ T4208] netlink_sendmsg+0x5cc/0x6e0 [ 47.333347][ T4208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.338630][ T4208] __sock_sendmsg+0x140/0x180 [ 47.343405][ T4208] ____sys_sendmsg+0x312/0x410 [ 47.348252][ T4208] __sys_sendmsg+0x1e9/0x280 [ 47.352878][ T4208] __x64_sys_sendmsg+0x46/0x50 [ 47.357734][ T4208] x64_sys_call+0x2689/0x2d60 [ 47.362433][ T4208] do_syscall_64+0xc9/0x1c0 [ 47.367012][ T4208] ? clear_bhb_loop+0x55/0xb0 [ 47.371704][ T4208] ? clear_bhb_loop+0x55/0xb0 [ 47.376433][ T4208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.382415][ T4208] RIP: 0033:0x7fa02677def9 [ 47.386823][ T4208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.406487][ T4208] RSP: 002b:00007fa0253f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.414909][ T4208] RAX: ffffffffffffffda RBX: 00007fa026935f80 RCX: 00007fa02677def9 [ 47.422904][ T4208] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 47.430894][ T4208] RBP: 00007fa0253f7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.438990][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.446979][ T4208] R13: 0000000000000000 R14: 00007fa026935f80 R15: 00007ffee69948a8 [ 47.455066][ T4208] [ 47.486124][ T4181] serio: Serial port ttyS3 [ 47.552882][ T4157] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.560193][ T4157] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.574318][ T4157] bridge_slave_0: entered allmulticast mode [ 47.578363][ T4228] netlink: 76 bytes leftover after parsing attributes in process `syz.4.194'. [ 47.581301][ T4157] bridge_slave_0: entered promiscuous mode [ 47.596538][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.603824][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.611203][ T4226] bridge0: entered allmulticast mode [ 47.625229][ T53] bridge_slave_1: left allmulticast mode [ 47.630971][ T53] bridge_slave_1: left promiscuous mode [ 47.636758][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.645239][ T53] bridge_slave_0: left allmulticast mode [ 47.650987][ T53] bridge_slave_0: left promiscuous mode [ 47.656808][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.758462][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.768016][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.780446][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.792162][ T53] bond0 (unregistering): Released all slaves [ 47.807307][ T4157] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.814536][ T4157] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.843793][ T4157] bridge_slave_1: entered allmulticast mode [ 47.867383][ T4157] bridge_slave_1: entered promiscuous mode [ 47.897728][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.904939][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.912519][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.919674][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.923094][ T4245] loop4: detected capacity change from 0 to 2048 [ 47.935283][ T4230] bridge0: entered promiscuous mode [ 47.970403][ T4157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.980633][ T53] dummy0: left promiscuous mode [ 47.995886][ T53] batadv_slave_1: left promiscuous mode [ 48.002743][ T4245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.031480][ T53] hsr_slave_0: left promiscuous mode [ 48.040794][ T53] hsr_slave_1: left promiscuous mode [ 48.048018][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.055498][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.070422][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.078061][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.098398][ T53] veth1_macvtap: left promiscuous mode [ 48.103944][ T53] veth0_macvtap: left promiscuous mode [ 48.109771][ T53] veth1_vlan: left promiscuous mode [ 48.115039][ T53] veth0_vlan: left promiscuous mode [ 48.154312][ T4265] loop0: detected capacity change from 0 to 2048 [ 48.200922][ T4265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.257664][ T29] audit: type=1400 audit(1726021978.190:549): avc: denied { map } for pid=4264 comm="syz.0.203" path="/58/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.261413][ T4265] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 48.286968][ T29] audit: type=1400 audit(1726021978.190:550): avc: denied { execute } for pid=4264 comm="syz.0.203" path="/58/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.292239][ T4265] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.292239][ T4265] [ 48.324557][ T4265] EXT4-fs (loop0): Total free blocks count 0 [ 48.330674][ T4265] EXT4-fs (loop0): Free/Dirty block details [ 48.336791][ T4265] EXT4-fs (loop0): free_blocks=0 [ 48.342224][ T4265] EXT4-fs (loop0): dirty_blocks=0 [ 48.347458][ T4265] EXT4-fs (loop0): Block reservation details [ 48.353515][ T4265] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 48.408593][ T53] team0 (unregistering): Port device team_slave_1 removed [ 48.419776][ T53] team0 (unregistering): Port device team_slave_0 removed [ 48.464027][ T4157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.475852][ T4270] tipc: Started in network mode [ 48.480754][ T4270] tipc: Node identity 7f000001, cluster identity 4711 [ 48.487866][ T4270] tipc: Enabled bearer , priority 10 [ 48.534032][ T4157] team0: Port device team_slave_0 added [ 48.542281][ T4157] team0: Port device team_slave_1 added [ 48.564644][ T4157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.571703][ T4157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.597849][ T4157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.609433][ T4157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.616500][ T4157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.642786][ T4157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.646930][ T4283] loop1: detected capacity change from 0 to 128 [ 48.712784][ T4157] hsr_slave_0: entered promiscuous mode [ 48.719742][ T4157] hsr_slave_1: entered promiscuous mode [ 48.725750][ T4157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.733381][ T4157] Cannot create hsr debugfs directory [ 48.877243][ T3656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.989988][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.097096][ T4157] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.212890][ T4157] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.222783][ T4157] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.232031][ T4157] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.251423][ T4341] loop3: detected capacity change from 0 to 512 [ 49.281764][ T4341] EXT4-fs: Ignoring removed nobh option [ 49.287493][ T4341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.294115][ T4341] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.398576][ T4157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.403588][ T4341] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.212: Parent and EA inode have the same ino 15 [ 49.447458][ T4157] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.467949][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.475037][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.490348][ T4341] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.212: Parent and EA inode have the same ino 15 [ 49.539535][ T4341] EXT4-fs (loop3): 1 orphan inode deleted [ 49.549488][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.554182][ T4341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.556561][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.576841][ T4365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 49.599105][ T29] audit: type=1400 audit(1726021979.520:551): avc: denied { nlmsg_write } for pid=4358 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.609134][ T4157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.630114][ T4157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.639383][ T3330] tipc: Node number set to 2130706433 [ 49.702615][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 49.731488][ T29] audit: type=1400 audit(1726021979.660:552): avc: denied { mounton } for pid=4340 comm="+}[@" path="/32/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.801609][ T29] audit: type=1400 audit(1726021979.660:553): avc: denied { mount } for pid=4340 comm="+}[@" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.846262][ T3267] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 49.872565][ T3267] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 49.886147][ T29] audit: type=1400 audit(1726021979.800:554): avc: denied { unlink } for pid=3267 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 49.918178][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.925258][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.933328][ T3267] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15 [ 49.946511][ T4314] bridge_slave_0: entered allmulticast mode [ 49.947141][ T4314] bridge_slave_0: entered promiscuous mode [ 49.954268][ T4157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.967527][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.967604][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.974248][ T4314] bridge_slave_1: entered allmulticast mode [ 49.974884][ T4314] bridge_slave_1: entered promiscuous mode [ 50.028611][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.083722][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.106302][ T4314] team0: Port device team_slave_0 added [ 50.113004][ T4314] team0: Port device team_slave_1 added [ 50.144634][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.151667][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.177647][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.189393][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.196386][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.222374][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.256228][ T4314] hsr_slave_0: entered promiscuous mode [ 50.262375][ T4314] hsr_slave_1: entered promiscuous mode [ 50.269974][ T4314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.277728][ T4314] Cannot create hsr debugfs directory [ 50.287989][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.305440][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.366567][ T4157] veth0_vlan: entered promiscuous mode [ 50.380952][ T4157] veth1_vlan: entered promiscuous mode [ 50.407952][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.459508][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.490869][ T4314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.540134][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.552177][ T4157] veth0_macvtap: entered promiscuous mode [ 50.563666][ T4314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.585158][ T4157] veth1_macvtap: entered promiscuous mode [ 50.617891][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.628515][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.638361][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.648900][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.658777][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.669367][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.679250][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.689689][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.700606][ T4157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.720311][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.730793][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.740635][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.751087][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.760996][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.771443][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.781434][ T4157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.791903][ T4157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.802952][ T4157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.812894][ T4157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.821772][ T4157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.830574][ T4157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.839612][ T4157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.866796][ T4314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.929489][ T4314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.958158][ T53] bridge_slave_1: left allmulticast mode [ 50.963856][ T53] bridge_slave_1: left promiscuous mode [ 50.969595][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.979212][ T53] bridge_slave_0: left allmulticast mode [ 50.985047][ T53] bridge_slave_0: left promiscuous mode [ 50.990865][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.079058][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.089402][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.100436][ T53] bond0 (unregistering): Released all slaves [ 51.110816][ T4424] netlink: 'syz.2.221': attribute type 21 has an invalid length. [ 51.118921][ T4424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.221'. [ 51.144215][ T4400] chnl_net:caif_netlink_parms(): no params data found [ 51.163239][ T4426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.222'. [ 51.177473][ T4314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.187944][ T4314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.210947][ T4314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.236794][ T4314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.276955][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.284088][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.304046][ T4400] bridge_slave_0: entered allmulticast mode [ 51.319230][ T4400] bridge_slave_0: entered promiscuous mode [ 51.329736][ T53] hsr_slave_0: left promiscuous mode [ 51.336107][ T53] hsr_slave_1: left promiscuous mode [ 51.341882][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.349430][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.357349][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.364775][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.374790][ T53] veth1_macvtap: left promiscuous mode [ 51.380417][ T53] veth0_macvtap: left promiscuous mode [ 51.386039][ T53] veth1_vlan: left promiscuous mode [ 51.391332][ T53] veth0_vlan: left promiscuous mode [ 51.391863][ T4452] Zero length message leads to an empty skb [ 51.461829][ T4455] loop1: detected capacity change from 0 to 128 [ 51.504986][ T53] team0 (unregistering): Port device team_slave_1 removed [ 51.515416][ T53] team0 (unregistering): Port device team_slave_0 removed [ 51.559514][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.566771][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.574930][ T4400] bridge_slave_1: entered allmulticast mode [ 51.581496][ T4400] bridge_slave_1: entered promiscuous mode [ 51.616727][ T4400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.627672][ T4400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.667688][ T4400] team0: Port device team_slave_0 added [ 51.674560][ T4400] team0: Port device team_slave_1 added [ 51.728950][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.736206][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.762899][ T4400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.799841][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.806986][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.832948][ T4400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.857875][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.873114][ T4463] loop0: detected capacity change from 0 to 512 [ 51.891657][ T4463] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.904591][ T4400] hsr_slave_0: entered promiscuous mode [ 51.921852][ T4463] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.228: corrupted in-inode xattr: invalid ea_ino [ 51.935676][ T4400] hsr_slave_1: entered promiscuous mode [ 51.952607][ T4463] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.228: couldn't read orphan inode 15 (err -117) [ 51.964588][ T4400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.979964][ T4463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.983191][ T4400] Cannot create hsr debugfs directory [ 52.013917][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.061217][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.068420][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.110208][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.117587][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.171435][ T4314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.207869][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.248281][ T4484] netlink: 76 bytes leftover after parsing attributes in process `syz.2.231'. [ 52.329841][ T4490] loop0: detected capacity change from 0 to 2048 [ 52.385026][ T4500] loop2: detected capacity change from 0 to 512 [ 52.405894][ T4500] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.431403][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.442096][ T4490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.472262][ T4500] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.233: corrupted in-inode xattr: invalid ea_ino [ 52.488757][ T4500] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.233: couldn't read orphan inode 15 (err -117) [ 52.520094][ T4500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.568563][ T4400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.587836][ T4400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.609678][ T4400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.620285][ T4157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.620938][ T4400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.698463][ T4490] serio: Serial port ttyS3 [ 52.768668][ T4529] netlink: 'syz.2.236': attribute type 21 has an invalid length. [ 52.788844][ T4529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.236'. [ 52.817846][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.851641][ T4400] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.877718][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.884843][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.914163][ T4546] loop2: detected capacity change from 0 to 2048 [ 52.938608][ T4546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.993039][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.000173][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.025600][ T4314] veth0_vlan: entered promiscuous mode [ 53.053184][ T4556] tipc: Started in network mode [ 53.058227][ T4556] tipc: Node identity 7f000001, cluster identity 4711 [ 53.089084][ T4556] tipc: Enabled bearer , priority 10 [ 53.119646][ T4314] veth1_vlan: entered promiscuous mode [ 53.182975][ T4314] veth0_macvtap: entered promiscuous mode [ 53.199176][ T4314] veth1_macvtap: entered promiscuous mode [ 53.210211][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.249452][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.260001][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.269889][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.280367][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.290227][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.300718][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.310555][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.321014][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.375361][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.383402][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.390630][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.413956][ T4580] bridge0: entered allmulticast mode [ 53.443488][ T4400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.463367][ T4585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.238'. [ 53.476035][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.483214][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.490637][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.497726][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.530392][ T4587] bridge0: entered promiscuous mode [ 53.538935][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.549598][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.559683][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.570404][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.580251][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.590715][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.600552][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.610997][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.624432][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.626924][ T4585] FAULT_INJECTION: forcing a failure. [ 53.626924][ T4585] name failslab, interval 1, probability 0, space 0, times 0 [ 53.646356][ T4585] CPU: 1 UID: 0 PID: 4585 Comm: syz.0.238 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 53.657047][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.667137][ T4585] Call Trace: [ 53.670422][ T4585] [ 53.673359][ T4585] dump_stack_lvl+0xf2/0x150 [ 53.678066][ T4585] dump_stack+0x15/0x20 [ 53.682251][ T4585] should_fail_ex+0x229/0x230 [ 53.686946][ T4585] ? __alloc_skb+0x10b/0x310 [ 53.691643][ T4585] should_failslab+0x8f/0xb0 [ 53.696292][ T4585] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 53.702115][ T4585] __alloc_skb+0x10b/0x310 [ 53.706638][ T4585] netlink_alloc_large_skb+0xad/0xe0 [ 53.711930][ T4585] netlink_sendmsg+0x3b4/0x6e0 [ 53.716769][ T4585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.722064][ T4585] __sock_sendmsg+0x140/0x180 [ 53.726828][ T4585] ____sys_sendmsg+0x312/0x410 [ 53.731615][ T4585] __sys_sendmsg+0x1e9/0x280 [ 53.736305][ T4585] __x64_sys_sendmsg+0x46/0x50 [ 53.741105][ T4585] x64_sys_call+0x2689/0x2d60 [ 53.745870][ T4585] do_syscall_64+0xc9/0x1c0 [ 53.750510][ T4585] ? clear_bhb_loop+0x55/0xb0 [ 53.755236][ T4585] ? clear_bhb_loop+0x55/0xb0 [ 53.759967][ T4585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.765883][ T4585] RIP: 0033:0x7f469cdbdef9 [ 53.770302][ T4585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.789994][ T4585] RSP: 002b:00007f469ba31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.798416][ T4585] RAX: ffffffffffffffda RBX: 00007f469cf75f80 RCX: 00007f469cdbdef9 [ 53.806487][ T4585] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000009 [ 53.814508][ T4585] RBP: 00007f469ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 53.822506][ T4585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.830573][ T4585] R13: 0000000000000000 R14: 00007f469cf75f80 R15: 00007ffe6d9c6738 [ 53.838560][ T4585] [ 53.872066][ T4314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.881190][ T4314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.890309][ T4314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.899233][ T4314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.996793][ T4400] veth0_vlan: entered promiscuous mode [ 54.023571][ T4400] veth1_vlan: entered promiscuous mode [ 54.042301][ T4400] veth0_macvtap: entered promiscuous mode [ 54.042806][ T4602] loop4: detected capacity change from 0 to 2048 [ 54.051456][ T4400] veth1_macvtap: entered promiscuous mode [ 54.085460][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.086470][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.096113][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.118692][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.120072][ T4607] Dead loop on virtual device ip6_vti0, fix it urgently! [ 54.129376][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.147252][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.149756][ T4602] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.209: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 54.157928][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.184059][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.194623][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.199449][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 54.199467][ T29] audit: type=1326 audit(1726021984.130:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.204633][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.210441][ T29] audit: type=1326 audit(1726021984.130:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.233624][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.233824][ T3452] tipc: Node number set to 2130706433 [ 54.244043][ T29] audit: type=1326 audit(1726021984.130:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.270217][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.277299][ T29] audit: type=1326 audit(1726021984.130:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.296515][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.305791][ T29] audit: type=1326 audit(1726021984.130:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.312981][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.336100][ T29] audit: type=1326 audit(1726021984.130:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.346471][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.346490][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.346502][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.346515][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.346526][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.369999][ T29] audit: type=1326 audit(1726021984.130:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.379872][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.379888][ T4400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.379904][ T4400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.423562][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.433994][ T29] audit: type=1326 audit(1726021984.130:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.434025][ T29] audit: type=1326 audit(1726021984.130:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.451771][ T4602] EXT4-fs (loop4): Remounting filesystem read-only [ 54.454572][ T29] audit: type=1326 audit(1726021984.130:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155c92def9 code=0x7ffc0000 [ 54.489540][ T4400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.601122][ T4400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.610098][ T4400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.618978][ T4400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.646639][ T4314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.714026][ T4614] loop3: detected capacity change from 0 to 512 [ 54.742127][ T4614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.757331][ T4614] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.019271][ T4625] EXT4-fs (loop3): shut down requested (0) [ 55.040244][ T4626] loop4: detected capacity change from 0 to 512 [ 55.099336][ T4626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.147299][ T4626] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.160245][ T4400] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.801235][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 55.928820][ T4157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.939171][ T4157] ================================================================== [ 55.947295][ T4157] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain [ 55.954808][ T4157] [ 55.957139][ T4157] write to 0xffff888237c2b370 of 1 bytes by task 4612 on cpu 0: [ 55.964783][ T4157] folios_put_refs+0x266/0x2b0 [ 55.969580][ T4157] mlock_folio_batch+0x319d/0x31d0 [ 55.974722][ T4157] munlock_folio+0xcd/0x130 [ 55.979260][ T4157] folio_remove_rmap_ptes+0x214/0x220 [ 55.984660][ T4157] unmap_page_range+0x1028/0x2210 [ 55.989708][ T4157] unmap_single_vma+0x142/0x1d0 [ 55.994575][ T4157] unmap_vmas+0x18d/0x2b0 [ 55.998957][ T4157] exit_mmap+0x18f/0x710 [ 56.003228][ T4157] __mmput+0x28/0x1b0 [ 56.007230][ T4157] mmput+0x4c/0x60 [ 56.010958][ T4157] exit_mm+0xe4/0x190 [ 56.014954][ T4157] do_exit+0x55e/0x1720 [ 56.019134][ T4157] do_group_exit+0x102/0x150 [ 56.023764][ T4157] get_signal+0xf2f/0x1080 [ 56.028211][ T4157] arch_do_signal_or_restart+0x95/0x4b0 [ 56.033775][ T4157] syscall_exit_to_user_mode+0x59/0x130 [ 56.039351][ T4157] do_syscall_64+0xd6/0x1c0 [ 56.043872][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.049806][ T4157] [ 56.052226][ T4157] read to 0xffff888237c2b370 of 1 bytes by task 4157 on cpu 1: [ 56.059771][ T4157] need_mlock_drain+0x30/0x50 [ 56.064456][ T4157] __lru_add_drain_all+0x235/0x410 [ 56.069574][ T4157] lru_add_drain_all+0x10/0x20 [ 56.074358][ T4157] invalidate_bdev+0x47/0x70 [ 56.078954][ T4157] ext4_put_super+0x571/0x840 [ 56.083623][ T4157] generic_shutdown_super+0xde/0x210 [ 56.088915][ T4157] kill_block_super+0x2a/0x70 [ 56.093612][ T4157] ext4_kill_sb+0x44/0x80 [ 56.097961][ T4157] deactivate_locked_super+0x7d/0x1c0 [ 56.103346][ T4157] deactivate_super+0x9f/0xb0 [ 56.108054][ T4157] cleanup_mnt+0x268/0x2e0 [ 56.112496][ T4157] __cleanup_mnt+0x19/0x20 [ 56.116941][ T4157] task_work_run+0x13a/0x1a0 [ 56.121561][ T4157] do_exit+0x5dd/0x1720 [ 56.125731][ T4157] do_group_exit+0x142/0x150 [ 56.130327][ T4157] __x64_sys_exit_group+0x1f/0x20 [ 56.135354][ T4157] x64_sys_call+0x2d5d/0x2d60 [ 56.140042][ T4157] do_syscall_64+0xc9/0x1c0 [ 56.144540][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.150448][ T4157] [ 56.152758][ T4157] value changed: 0x1f -> 0x13 [ 56.157442][ T4157] [ 56.159754][ T4157] Reported by Kernel Concurrency Sanitizer on: [ 56.165891][ T4157] CPU: 1 UID: 0 PID: 4157 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 56.176757][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.186808][ T4157] ================================================================== [ 56.197887][ T4314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.210634][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.260333][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.309707][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.360252][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.422543][ T11] bridge_slave_1: left allmulticast mode [ 56.428433][ T11] bridge_slave_1: left promiscuous mode [ 56.434119][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.442042][ T11] bridge_slave_0: left allmulticast mode [ 56.447801][ T11] bridge_slave_0: left promiscuous mode [ 56.453612][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.550293][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.560775][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.571124][ T11] bond0 (unregistering): Released all slaves [ 56.608472][ T11] tipc: Disabling bearer [ 56.613743][ T11] tipc: Left network mode [ 56.669352][ T11] hsr_slave_0: left promiscuous mode [ 56.675130][ T11] hsr_slave_1: left promiscuous mode [ 56.681164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.688640][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.696844][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.704360][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.713676][ T11] veth1_macvtap: left promiscuous mode [ 56.719294][ T11] veth0_macvtap: left promiscuous mode [ 56.724861][ T11] veth1_vlan: left promiscuous mode [ 56.730148][ T11] veth0_vlan: left promiscuous mode [ 56.817567][ T11] team0 (unregistering): Port device team_slave_1 removed [ 56.828039][ T11] team0 (unregistering): Port device team_slave_0 removed