last executing test programs: 1m3.397807305s ago: executing program 0 (id=11): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002e40)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)="5ebd564966f84db2a4a2c0a89b739e710593cb5ee01c3a475719b3033ff90eb26c23ec99858a9fb263ad360390d433d40f01c3878ff904377dbaf02b751a5d2cddff574acc49045ff97ec3645115f48ceba1a4ae1cc322bbc0f8efcb2482c6fe785ee240422984d4e20f0cbf18ddee3f87c3", 0x72}, {&(0x7f0000000580)="ccdba1a399e4c96179feac0a82dee7d2df8bce431aa1a97298ff082f4cfae8666ff9878690a6e9daf8ebb203ba3a01d594ca41d36a82edca4be4b3e40ad6f2f4baed907712afd89b7630629af06a26d2e023d0fa602f99a8b7dc205dcf5c48ac0885", 0x62}, {&(0x7f0000000400)="4dd34a263c92a0d97b5416f75a1247376ff98cfff17e7463370cf0cc79", 0x1d}, {&(0x7f0000000600)="6b57582f01af92fa63bd3c553274873326c803500731dbac6d3a175df4ef11ed5a5f5aef846e787c667746b2ea85cdd253cfe1300a45b3945aa570ef3b7a71d4524db0726f7335d6f5492d9d211407dbc5daba34f2ca", 0x56}], 0x4, 0x0, 0x0, 0x20000810}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000740)='0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r11 = syz_io_uring_complete(0x0) write$binfmt_elf64(r11, &(0x7f0000001ec0)=ANY=[@ANYBLOB="7f454c460400ff0600000080000000000300060006000000e70200000000000040000000000000008200000000000000dc0a0000070038000400020006000e0051e5746400040000000000000000000038d7000000000000b6c3966f000000000100000000000000ff01000000000000080000000000000002000000001000000100000000000000000000000000000007000000000000000000000000000000f7fffffffffffffff53d0000000000000600000006000000060000000000000006000000000000000000000000000000020000000000000000000000000000100200000000000000040000007a010000ff7f0000000000000000000000000000df000000000000000100010000000000e701000000000000060000000000000017e651b8632b66570b2c4021d5b5e81a9e0a9fe106ad3067ab066cd4184f797ad0617cc2c41a493f0e14ac526979051c3eb4e9629fb0eb7240314f0bf4322adba604bb28291ab04ef2ae4efd432aa641171a70451c51e3d9a8701670088fd0e2f7636a3681d22aef7c414a4afbe352b08848cf72ce5ca6edad37694f772efe12f0eab2bf6ec514d3cc39c39bc7e5c873f1e031be0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f31f689bd62cfb3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000817f98eed983c0edbfe9ccb8a33f62bd52bea30e8f8c1f03e77da8eb78e7f260b485a8be181b63f0aa31d4fa0f211126a48c82a6ffb018652f07f2fa1d"], 0x5b4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x16, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0xfea8, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x2}, 0x4, r10}}]}, {0x4, 0xa}, {0x9}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1m0.922088808s ago: executing program 0 (id=43): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000000c0000003bdca12d", @ANYRES32, @ANYBLOB="00000000000000000000000050b000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="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"], 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) pivot_root(0x0, 0x0) 55.459730087s ago: executing program 0 (id=111): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 55.459318747s ago: executing program 32 (id=111): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.82227786s ago: executing program 2 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) time(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000180)=0x8000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x891b, &(0x7f0000000740)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ptrace(0x10, 0x0) 1.77625376s ago: executing program 2 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x5c, 0x10, 0x3, 0x80000000, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x700, 0x8000, 0xe7, 0x4}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000900000000000000000010000000000008000400", @ANYRES32=r7, @ANYBLOB="0600150007"], 0x44}}, 0x0) 1.634609281s ago: executing program 2 (id=1017): socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x5, 0x6, {{0x1a, 0x4, 0x1, 0x2c, 0x68, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0xc2, [@loopback]}, @timestamp={0x44, 0x8, 0x8, 0x0, 0x1, [0x10001]}, @timestamp_prespec={0x44, 0x44, 0x78, 0x3, 0x8, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xbd77}, {@loopback, 0x83ec}, {@private=0xa010100, 0x9}, {@rand_addr=0x64010101, 0x5}, {@multicast2, 0x2e}, {@multicast2, 0x40}, {@multicast1, 0xffffb112}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1ffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.507279552s ago: executing program 5 (id=1020): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rmdir(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24500, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00e2000101000007800000c4000000000000003308a96d33acce05fd7387d5fc85e1e5debdcd019f3a9597edd280a4289cdf9f5171c84388c4618e4ee203f71cc365f88f6cb67f8c376c6a45add909b79ba428283a7510ab011f279f42e638040a5e5788288c55355c5c39dd12594093c287b738180c20f32607719bf8c3e0df001601c2ba4bee74a57060e63fc9e85db82339bc87", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.297454243s ago: executing program 2 (id=1021): r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) ppoll(&(0x7f0000000080)=[{r1, 0xca}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x7) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d178", 0x12}, {&(0x7f0000000600)="d2a9", 0x2}], 0x2}}], 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.284573853s ago: executing program 5 (id=1022): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32], 0x4, 0x7d2, &(0x7f0000000d80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1.082348054s ago: executing program 5 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="0801fb7c674d94d84d7e0000", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 973.829914ms ago: executing program 5 (id=1026): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x0, 0xd, 0x0, 0x1, 0x0, 0x80000001, 0x1280, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x4020, 0x2d2, 0xc7, 0x9, 0x1, 0x8, 0x1, 0x0, 0xfffff290, 0x0, 0x800}, r1, 0xa, r0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@local, @in=@multicast1, 0x4e20, 0x4, 0x4e23, 0x8, 0xa, 0x20, 0x80, 0x9d, r7, r9}, {0x80, 0x7fffffff, 0xffffffffffffffff, 0x8, 0x800, 0x6, 0xf0, 0x4}, {0x2, 0x8b, 0x7, 0x4}, 0x80000001, 0x6e6bbe, 0x2, 0x1, 0xe898c1e01bb48d43, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d2, 0x32}, 0xa, @in=@private=0xa010101, 0x3502, 0x0, 0x0, 0x5, 0x101, 0x9, 0xfff}}, 0xe8) 880.553115ms ago: executing program 5 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x5c, 0x10, 0x3, 0x80000000, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x700, 0x8000, 0xe7, 0x4}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000900000000000000000010000000000008000400", @ANYRES32=r7, @ANYBLOB="0600150007"], 0x44}}, 0x0) 798.586495ms ago: executing program 4 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000300)={0xf97cff8c, 0x8}, 0x10) 796.168236ms ago: executing program 5 (id=1032): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64, @ANYRES64, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_delete(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="170000000000000004000000ff0000406e0659f75cfa94ad27930000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff4904000000000000b604000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="59bb22bd700000002000110000000800"], 0x28}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000380)=""/64, 0x40}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES8=r1, @ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x2, 0xf4, &(0x7f0000000400)=""/244, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000031c0), 0x12) 769.286415ms ago: executing program 4 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 717.327566ms ago: executing program 4 (id=1035): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0x7f, 0x6, 0x50000, r0, 0x0, '\x00', 0x0, r1, 0x3, 0x4, 0x2, 0x7, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000081519d6e04ed22d20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) statx(0xffffffffffffffff, 0x0, 0x400, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r4}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) unshare(0x68040200) syz_read_part_table(0x613, &(0x7f00000015c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x80001, 0x0) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000000700)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$unix(0x1, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000048000000030a0102000000000000000001000000080007006e6174000900030073796031000000000900010073797a3000000000140004800800024000000000080001"], 0x90}}, 0x0) 713.311626ms ago: executing program 3 (id=1036): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0/file0\x00'}, 0x6e) r0 = io_uring_setup(0x2edd, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0xfffffffffffffff1, 0x4, 0x28e}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 677.490386ms ago: executing program 3 (id=1037): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='!pu>00\t||') setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000a8dd0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) 595.595276ms ago: executing program 3 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 566.160646ms ago: executing program 3 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000200)=[{0x200000000006, 0xa, 0x0, 0x7ffc0001}]}) r4 = fsmount(r2, 0x0, 0x0) name_to_handle_at(r4, &(0x7f0000000080)='.\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="140000000500000011d9eab5371723546fda00000000000000000000000000000000000000000209c569cbf451b38de93457e1ca5b379cc09fa885e9f4b170c693cee1584ba8565cd58dafcf52c41eb848f545c59637970a54e00ded8f75cb47a6387f8b75d04db0"], &(0x7f0000000140), 0x1200) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYBLOB="000000000000009c1c94335ab03b9d14000000000000000000000001000318308b9d8bbf8cfe7221f49513f26101e0d61c31b7792642c334951186d5dcc84ceda602469dbaedb771e11614bbec60abca7747dfa9e61839d739b3b437fb1f8c2116d7993465522f1fa7960ea555e77a9afd65eb57985cca8ce3629c38b7e059cb00d2e28e276f441a9a2ad408aba5335c6ed02cc6b32b22f1244d5526", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r6 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 537.202257ms ago: executing program 4 (id=1041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x120c480, &(0x7f0000000c80), 0x3, 0x4ea, &(0x7f0000000680)="$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") (fail_nth: 10) 439.839997ms ago: executing program 2 (id=1043): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4098, 0xfffffe4d}], 0x1, 0x8000, 0x0, 0x11) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x9, "dda028", 0x7, 0xa5}) 261.069728ms ago: executing program 3 (id=1045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 260.593358ms ago: executing program 4 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) time(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000180)=0x8000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x891b, &(0x7f0000000740)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ptrace(0x10, 0x0) 218.099029ms ago: executing program 3 (id=1048): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32], 0x4, 0x7d2, &(0x7f0000000d80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) renameat2(r7, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000180)='./bus\x00', 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c00000008000100022c73"], 0x1c}}, 0xc080) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x6, "c52c34051852"}, &(0x7f00000000c0)=0xe) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={r10, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r11, 0x7fff}, 0x8) 217.694638ms ago: executing program 1 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 199.335808ms ago: executing program 1 (id=1050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 175.482688ms ago: executing program 1 (id=1051): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='!pu>00\t||') setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000a8dd0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) 162.363988ms ago: executing program 4 (id=1052): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64, @ANYRES64, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_delete(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="170000000000000004000000ff0000406e0659f75cfa94ad27930000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff4904000000000000b604000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000380)=""/64, 0x40}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x12, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xf4, &(0x7f0000000400)=""/244, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r7, &(0x7f00000031c0), 0x12) 128.662039ms ago: executing program 2 (id=1053): r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000080)=[{r1, 0xca}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x7) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000600)="d2a9", 0x2}], 0x2}}], 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 128.223909ms ago: executing program 1 (id=1054): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 53.755579ms ago: executing program 1 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000200)=[{0x200000000006, 0xa, 0x0, 0x7ffc0001}]}) r4 = fsmount(r2, 0x0, 0x0) name_to_handle_at(r4, &(0x7f0000000080)='.\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="140000000500000011d9eab5371723546fda00000000000000000000000000000000000000000209c569cbf451b38de93457e1ca5b379cc09fa885e9f4b170c693cee1584ba8565cd58dafcf52c41eb848f545c59637970a54e00ded8f75cb47a6387f8b75d04db0"], &(0x7f0000000140), 0x1200) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYBLOB="000000000000009c1c94335ab03b9d14000000000000000000000001000318308b9d8bbf8cfe7221f49513f26101e0d61c31b7792642c334951186d5dcc84ceda602469dbaedb771e11614bbec60abca7747dfa9e61839d739b3b437fb1f8c2116d7993465522f1fa7960ea555e77a9afd65eb57985cca8ce3629c38b7e059cb00d2e28e276f441a9a2ad408aba5335c6ed02cc6b32b22f1244d5526", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) r7 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 0s ago: executing program 1 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 47.224797][ T4059] loop2: detected capacity change from 0 to 256 [ 47.231690][ T4059] FAT-fs (loop2): bogus number of FAT sectors [ 47.237831][ T4059] FAT-fs (loop2): Can't find a valid FAT filesystem [ 47.246234][ T29] audit: type=1400 audit(1732408456.957:1390): avc: denied { getopt } for pid=4058 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.357057][ T4064] loop2: detected capacity change from 0 to 512 [ 47.494519][ T4074] loop4: detected capacity change from 0 to 512 [ 47.531458][ T4071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.204'. [ 47.548175][ T4078] loop4: detected capacity change from 0 to 512 [ 47.695882][ T4079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.209'. [ 48.125665][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 48.254876][ T29] audit: type=1326 audit(1732408457.957:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 48.280326][ T29] audit: type=1326 audit(1732408457.957:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 48.303814][ T29] audit: type=1326 audit(1732408457.957:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 48.332876][ T4085] netlink: 212 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.420075][ T4092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7852 sclass=netlink_route_socket pid=4092 comm=syz.2.215 [ 48.627095][ T4103] can0: slcan on ttyS3. [ 48.647083][ T4106] loop5: detected capacity change from 0 to 2048 [ 48.667979][ T4106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.682289][ T4102] can0 (unregistered): slcan off ttyS3. [ 48.760550][ T4124] loop1: detected capacity change from 0 to 512 [ 48.768583][ T4124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.775393][ T4124] ext4: Unknown parameter 'delalloc"journal_dev' [ 48.796759][ T4124] loop1: detected capacity change from 0 to 2048 [ 48.852013][ T4124] Alternate GPT is invalid, using primary GPT. [ 48.858455][ T4124] loop1: p2 p3 p7 [ 48.979839][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.017227][ T4132] loop5: detected capacity change from 0 to 164 [ 49.029348][ T4132] iso9660: Unknown parameter '' [ 49.069926][ T4132] loop5: detected capacity change from 0 to 512 [ 49.078668][ T4132] EXT4-fs: Ignoring removed oldalloc option [ 49.087598][ T4132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 49.117435][ T4132] EXT4-fs (loop5): 1 truncate cleaned up [ 49.124550][ T4132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.165658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 49.283140][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.287555][ T4148] can0: slcan on ttyS3. [ 49.335895][ T4147] can0 (unregistered): slcan off ttyS3. [ 49.379319][ T4162] loop2: detected capacity change from 0 to 512 [ 49.386043][ T4162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.392822][ T4162] ext4: Unknown parameter 'delalloc"journal_dev' [ 49.402343][ T4156] can0: slcan on ttyS3. [ 49.419041][ T4162] loop2: detected capacity change from 0 to 2048 [ 49.461699][ T4162] Alternate GPT is invalid, using primary GPT. [ 49.468097][ T4162] loop2: p2 p3 p7 [ 49.485771][ T4155] can0 (unregistered): slcan off ttyS3. [ 49.570686][ T4178] loop3: detected capacity change from 0 to 1024 [ 49.577643][ T4178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.585105][ T4178] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 49.607422][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.623897][ T4178] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 49.667754][ T4188] can0: slcan on ttyS3. [ 49.756633][ T4187] can0 (unregistered): slcan off ttyS3. [ 49.806692][ T4203] loop5: detected capacity change from 0 to 1024 [ 49.813469][ T4203] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.816581][ T4205] loop4: detected capacity change from 0 to 256 [ 49.827299][ T4203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.827512][ T4205] FAT-fs (loop4): bogus number of FAT sectors [ 49.845477][ T4205] FAT-fs (loop4): Can't find a valid FAT filesystem [ 50.205657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 50.303470][ T4223] loop4: detected capacity change from 0 to 164 [ 50.310085][ T4223] iso9660: Unknown parameter '' [ 50.353291][ T4223] loop4: detected capacity change from 0 to 512 [ 50.362427][ T4223] EXT4-fs: Ignoring removed oldalloc option [ 50.371230][ T4223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.386167][ T4223] EXT4-fs (loop4): 1 truncate cleaned up [ 50.393188][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.420298][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.558129][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.603846][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.608692][ T4231] loop2: detected capacity change from 0 to 2048 [ 50.645177][ T4234] can0: slcan on ttyS3. [ 50.653243][ T4231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.697163][ T4233] can0 (unregistered): slcan off ttyS3. [ 50.801324][ T4248] loop3: detected capacity change from 0 to 2048 [ 50.817886][ T4248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.889621][ T4258] loop5: detected capacity change from 0 to 164 [ 50.897968][ T4258] iso9660: Unknown parameter '' [ 50.943600][ T4258] loop5: detected capacity change from 0 to 512 [ 50.951412][ T4258] EXT4-fs: Ignoring removed oldalloc option [ 50.960290][ T4258] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.991308][ T4258] EXT4-fs (loop5): 1 truncate cleaned up [ 51.000131][ T4258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.032658][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.198867][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.222804][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.245657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 51.683955][ T4276] can0: slcan on ttyS3. [ 51.725904][ T4275] can0 (unregistered): slcan off ttyS3. [ 51.769364][ T4280] IPv4: Oversized IP packet from 172.20.20.24 [ 51.775672][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 51.781825][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 51.835004][ T4285] loop3: detected capacity change from 0 to 164 [ 51.841756][ T4285] iso9660: Unknown parameter '' [ 51.882445][ T4285] loop3: detected capacity change from 0 to 512 [ 51.891132][ T4285] EXT4-fs: Ignoring removed oldalloc option [ 51.899781][ T4285] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.919825][ T4285] EXT4-fs (loop3): 1 truncate cleaned up [ 51.929476][ T4285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.007039][ T4292] loop2: detected capacity change from 0 to 2048 [ 52.017614][ T4292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.108698][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.142286][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 52.142346][ T29] audit: type=1326 audit(1732408461.847:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.173008][ T29] audit: type=1326 audit(1732408461.857:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.195047][ T4302] loop3: detected capacity change from 0 to 2048 [ 52.196382][ T29] audit: type=1326 audit(1732408461.857:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.226067][ T29] audit: type=1326 audit(1732408461.857:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.233478][ T4303] loop1: detected capacity change from 0 to 1024 [ 52.249406][ T29] audit: type=1326 audit(1732408461.857:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.249443][ T29] audit: type=1326 audit(1732408461.857:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.260027][ T4302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.279362][ T29] audit: type=1326 audit(1732408461.857:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.302805][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 52.304476][ T4303] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.314915][ T29] audit: type=1326 audit(1732408461.857:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.375115][ T29] audit: type=1326 audit(1732408461.867:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.398491][ T29] audit: type=1326 audit(1732408461.867:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 52.428045][ T4303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.589522][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.652181][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.737655][ T4318] IPv4: Oversized IP packet from 172.20.20.24 [ 52.743881][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 52.837682][ T4323] loop3: detected capacity change from 0 to 1024 [ 52.844522][ T4323] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.857988][ T4323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.986481][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.088272][ T4337] loop1: detected capacity change from 0 to 256 [ 53.094977][ T4337] FAT-fs (loop1): bogus number of FAT sectors [ 53.101086][ T4337] FAT-fs (loop1): Can't find a valid FAT filesystem [ 53.325662][ C0] net_ratelimit: 1 callbacks suppressed [ 53.325680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 53.550873][ T4346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 53.619471][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.788222][ T4354] SELinux: failed to load policy [ 53.827875][ T4359] loop4: detected capacity change from 0 to 512 [ 53.834515][ T4359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.841325][ T4359] ext4: Unknown parameter 'delalloc"journal_dev' [ 53.858479][ T4359] loop4: detected capacity change from 0 to 2048 [ 53.899945][ T4362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 53.901310][ T4359] Alternate GPT is invalid, using primary GPT. [ 53.915509][ T4359] loop4: p2 p3 p7 [ 54.014439][ T4366] loop3: detected capacity change from 0 to 164 [ 54.021106][ T4366] iso9660: Unknown parameter '' [ 54.066943][ T4370] netlink: 212 bytes leftover after parsing attributes in process `syz.4.318'. [ 54.068170][ T4366] loop3: detected capacity change from 0 to 512 [ 54.088988][ T4366] EXT4-fs: Ignoring removed oldalloc option [ 54.106985][ T4366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.129923][ T4366] EXT4-fs (loop3): 1 truncate cleaned up [ 54.139097][ T4366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.293598][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.365673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 54.398266][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 54.423697][ T4394] loop2: detected capacity change from 0 to 256 [ 54.430664][ T4394] FAT-fs (loop2): bogus number of FAT sectors [ 54.436927][ T4394] FAT-fs (loop2): Can't find a valid FAT filesystem [ 54.553280][ T4402] netlink: 212 bytes leftover after parsing attributes in process `syz.3.330'. [ 54.740884][ T4417] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 54.749580][ T4417] bridge0: port 3(team0) entered disabled state [ 54.756080][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.763225][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.772668][ T4417] bridge0: port 3(team0) entered blocking state [ 54.779042][ T4417] bridge0: port 3(team0) entered forwarding state [ 54.785720][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.792807][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.793528][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 54.800151][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.816044][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.825029][ T4417] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.834428][ T4418] team0: left allmulticast mode [ 54.839338][ T4418] team_slave_0: left allmulticast mode [ 54.844822][ T4418] team_slave_1: left allmulticast mode [ 54.850690][ T4418] bridge0: port 3(team0) entered disabled state [ 54.859795][ T4418] bridge_slave_1: left allmulticast mode [ 54.865464][ T4418] bridge_slave_1: left promiscuous mode [ 54.871163][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.878791][ T4418] bridge_slave_0: left allmulticast mode [ 54.884444][ T4418] bridge_slave_0: left promiscuous mode [ 54.890178][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.900081][ T4418] bond0: (slave bridge0): Releasing backup interface [ 55.248322][ T4433] SELinux: failed to load policy [ 55.371003][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 55.405664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 55.434636][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 55.465903][ T4460] SELinux: failed to load policy [ 55.472034][ T4458] syzkaller0: entered allmulticast mode [ 55.480449][ T4458] syzkaller0 (unregistering): left allmulticast mode [ 55.603011][ T4466] FAULT_INJECTION: forcing a failure. [ 55.603011][ T4466] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.616133][ T4466] CPU: 1 UID: 0 PID: 4466 Comm: syz.2.357 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 55.626463][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.636621][ T4466] Call Trace: [ 55.639940][ T4466] [ 55.642870][ T4466] dump_stack_lvl+0xf2/0x150 [ 55.647487][ T4466] dump_stack+0x15/0x20 [ 55.651700][ T4466] should_fail_ex+0x223/0x230 [ 55.656404][ T4466] should_fail+0xb/0x10 [ 55.660597][ T4466] should_fail_usercopy+0x1a/0x20 [ 55.665712][ T4466] _copy_from_iter+0xd5/0xd00 [ 55.670437][ T4466] ? kmalloc_reserve+0x16e/0x190 [ 55.675423][ T4466] ? __build_skb_around+0x196/0x1f0 [ 55.680638][ T4466] ? __alloc_skb+0x21f/0x310 [ 55.685246][ T4466] ? __virt_addr_valid+0x1ed/0x250 [ 55.690392][ T4466] ? __check_object_size+0x364/0x520 [ 55.695784][ T4466] netlink_sendmsg+0x460/0x6e0 [ 55.700578][ T4466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.705913][ T4466] __sock_sendmsg+0x140/0x180 [ 55.710750][ T4466] ____sys_sendmsg+0x312/0x410 [ 55.715569][ T4466] __sys_sendmsg+0x19d/0x230 [ 55.720197][ T4466] __x64_sys_sendmsg+0x46/0x50 [ 55.725105][ T4466] x64_sys_call+0x2734/0x2dc0 [ 55.729872][ T4466] do_syscall_64+0xc9/0x1c0 [ 55.734425][ T4466] ? clear_bhb_loop+0x55/0xb0 [ 55.739240][ T4466] ? clear_bhb_loop+0x55/0xb0 [ 55.743930][ T4466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.750061][ T4466] RIP: 0033:0x7fae64ece819 [ 55.754499][ T4466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.774347][ T4466] RSP: 002b:00007fae63547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.782991][ T4466] RAX: ffffffffffffffda RBX: 00007fae65085fa0 RCX: 00007fae64ece819 [ 55.791018][ T4466] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 55.799006][ T4466] RBP: 00007fae63547090 R08: 0000000000000000 R09: 0000000000000000 [ 55.807032][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.815052][ T4466] R13: 0000000000000000 R14: 00007fae65085fa0 R15: 00007fff7a85de98 [ 55.823075][ T4466] [ 56.089088][ T4484] SELinux: failed to load policy [ 56.307749][ T4496] loop5: detected capacity change from 0 to 764 [ 56.315271][ T4496] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.378031][ T4505] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.386530][ T4505] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.395462][ T4505] rock: directory entry would overflow storage [ 56.401689][ T4505] rock: sig=0x4f50, size=4, remaining=3 [ 56.407267][ T4505] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.415324][ T4505] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.445696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 56.570733][ T4514] SELinux: failed to load policy [ 57.461012][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 57.461029][ T29] audit: type=1326 audit(1732408467.167:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.485656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 57.493047][ T29] audit: type=1326 audit(1732408467.167:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.520879][ T29] audit: type=1326 audit(1732408467.167:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.544241][ T29] audit: type=1326 audit(1732408467.167:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.567589][ T29] audit: type=1326 audit(1732408467.167:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.591027][ T29] audit: type=1326 audit(1732408467.167:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.614354][ T29] audit: type=1326 audit(1732408467.167:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.637580][ T29] audit: type=1326 audit(1732408467.167:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.661039][ T29] audit: type=1326 audit(1732408467.167:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.684297][ T29] audit: type=1326 audit(1732408467.167:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 57.764265][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 57.781618][ T4539] loop3: detected capacity change from 0 to 1024 [ 57.788790][ T4539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.796838][ T4539] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.828379][ T4545] loop2: detected capacity change from 0 to 512 [ 57.828564][ T4539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.835355][ T4545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.857070][ T4545] EXT4-fs (loop2): inodes count not valid: 4 vs 32 [ 57.863933][ T4539] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 58.077637][ T4557] loop5: detected capacity change from 0 to 2048 [ 58.087347][ T4557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.302093][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.525877][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 58.618169][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.689954][ T4573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4573 comm=syz.3.398 [ 58.766685][ T4575] SELinux: failed to load policy [ 59.565675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 59.667101][ T4607] SELinux: failed to load policy [ 60.484800][ T4629] loop4: detected capacity change from 0 to 1024 [ 60.491712][ T4629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.498797][ T4629] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.518378][ T4629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.533022][ T4629] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 60.605645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 60.622011][ T4639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.422'. [ 60.639709][ T4639] loop2: detected capacity change from 0 to 1024 [ 60.646697][ T4639] EXT4-fs: dax option not supported [ 60.767839][ T4646] SELinux: failed to load policy [ 60.955727][ T4660] IPv6: Can't replace route, no match found [ 60.963308][ T4660] loop1: detected capacity change from 0 to 128 [ 61.473241][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 61.505143][ T4680] loop2: detected capacity change from 0 to 512 [ 61.596375][ T4692] loop2: detected capacity change from 0 to 1024 [ 61.603145][ T4692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.611085][ T4692] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.624884][ T4694] loop3: detected capacity change from 0 to 764 [ 61.632674][ T4694] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.640905][ T4692] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 61.645686][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 61.693048][ T4697] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.701448][ T4697] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.710605][ T4697] rock: directory entry would overflow storage [ 61.716821][ T4697] rock: sig=0x4f50, size=4, remaining=3 [ 61.722460][ T4697] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 62.059662][ T4700] loop1: detected capacity change from 0 to 764 [ 62.067291][ T4700] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.127161][ T4701] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.135462][ T4701] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.144382][ T4701] rock: directory entry would overflow storage [ 62.150618][ T4701] rock: sig=0x4f50, size=4, remaining=3 [ 62.156221][ T4701] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 62.444311][ T4708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 62.479876][ T4712] loop3: detected capacity change from 0 to 512 [ 62.493904][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 62.510036][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 62.510054][ T29] audit: type=1400 audit(1732408472.217:2599): avc: denied { bind } for pid=4715 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.537283][ T29] audit: type=1400 audit(1732408472.217:2600): avc: denied { name_bind } for pid=4715 comm="syz.3.453" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.559017][ T29] audit: type=1400 audit(1732408472.217:2601): avc: denied { node_bind } for pid=4715 comm="syz.3.453" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.580178][ T29] audit: type=1326 audit(1732408472.247:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.603843][ T29] audit: type=1326 audit(1732408472.247:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.627285][ T29] audit: type=1326 audit(1732408472.247:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.650623][ T29] audit: type=1326 audit(1732408472.247:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.673976][ T29] audit: type=1326 audit(1732408472.247:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.697415][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 62.704427][ T29] audit: type=1326 audit(1732408472.247:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.727795][ T29] audit: type=1326 audit(1732408472.247:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 62.950959][ T4735] loop5: detected capacity change from 0 to 512 [ 63.077606][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 63.111372][ T4737] netlink: 56 bytes leftover after parsing attributes in process `syz.5.460'. [ 63.111518][ T4741] loop4: detected capacity change from 0 to 512 [ 63.202471][ T4753] loop4: detected capacity change from 0 to 164 [ 63.209252][ T4753] iso9660: Unknown parameter '' [ 63.249605][ T4753] loop4: detected capacity change from 0 to 512 [ 63.258283][ T4753] EXT4-fs: Ignoring removed oldalloc option [ 63.266412][ T4753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.282317][ T4753] EXT4-fs (loop4): 1 truncate cleaned up [ 63.481196][ T3459] IPVS: starting estimator thread 0... [ 63.575747][ T4768] IPVS: using max 2544 ests per chain, 127200 per kthread [ 63.725652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 63.877737][ T4782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'. [ 64.020585][ T4789] loop1: detected capacity change from 0 to 164 [ 64.027300][ T4789] iso9660: Unknown parameter '' [ 64.075058][ T4789] loop1: detected capacity change from 0 to 512 [ 64.084523][ T4789] EXT4-fs: Ignoring removed oldalloc option [ 64.092319][ T4789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.107803][ T4789] EXT4-fs (loop1): 1 truncate cleaned up [ 64.267725][ T4802] IPv4: Oversized IP packet from 172.20.20.24 [ 64.274064][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 64.280262][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 64.309575][ T4806] loop1: detected capacity change from 0 to 764 [ 64.316789][ T4806] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.364474][ T4810] loop2: detected capacity change from 0 to 512 [ 64.371132][ T4810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.377005][ T4811] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.378852][ T4810] ext4: Unknown parameter 'delalloc"journal_dev' [ 64.392683][ T4811] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 64.401831][ T4811] rock: directory entry would overflow storage [ 64.408281][ T4811] rock: sig=0x4f50, size=4, remaining=3 [ 64.413875][ T4811] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 64.433842][ T4810] loop2: detected capacity change from 0 to 2048 [ 64.441121][ T4815] loop4: detected capacity change from 0 to 512 [ 64.447919][ T4815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.454767][ T4815] ext4: Unknown parameter 'delalloc"journal_dev' [ 64.473872][ T4815] loop4: detected capacity change from 0 to 2048 [ 64.486530][ T4810] Alternate GPT is invalid, using primary GPT. [ 64.492901][ T4810] loop2: p2 p3 p7 [ 64.520896][ T4815] Alternate GPT is invalid, using primary GPT. [ 64.527470][ T4815] loop4: p2 p3 p7 [ 64.648519][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 64.680174][ T4819] loop4: detected capacity change from 0 to 164 [ 64.686738][ T4819] iso9660: Unknown parameter '' [ 64.725383][ T4819] loop4: detected capacity change from 0 to 512 [ 64.731739][ T4822] loop5: detected capacity change from 0 to 164 [ 64.735433][ T4819] EXT4-fs: Ignoring removed oldalloc option [ 64.740336][ T4822] iso9660: Unknown parameter '' [ 64.752232][ T4819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.765677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 64.784653][ T4819] EXT4-fs (loop4): 1 truncate cleaned up [ 64.798961][ T4822] loop5: detected capacity change from 0 to 512 [ 64.807329][ T4822] EXT4-fs: Ignoring removed oldalloc option [ 64.816719][ T4822] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.847087][ T4822] EXT4-fs (loop5): 1 truncate cleaned up [ 65.049438][ T4834] IPv4: Oversized IP packet from 172.20.20.24 [ 65.055784][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 65.061944][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 65.137244][ T4844] loop3: detected capacity change from 0 to 512 [ 65.162277][ T4844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.169903][ T4844] ext4: Unknown parameter 'delalloc"journal_dev' [ 65.189528][ T4844] loop3: detected capacity change from 0 to 2048 [ 65.261272][ T4844] Alternate GPT is invalid, using primary GPT. [ 65.267788][ T4844] loop3: p2 p3 p7 [ 65.317677][ T4858] loop1: detected capacity change from 0 to 764 [ 65.324769][ T4858] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.385024][ T4860] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.394843][ T4860] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.409811][ T4860] rock: directory entry would overflow storage [ 65.416043][ T4860] rock: sig=0x4f50, size=4, remaining=3 [ 65.421782][ T4860] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 65.428821][ T4864] IPv4: Oversized IP packet from 172.20.20.24 [ 65.435508][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 65.479502][ T4869] loop3: detected capacity change from 0 to 164 [ 65.486214][ T4869] iso9660: Unknown parameter '' [ 65.528288][ T4869] loop3: detected capacity change from 0 to 512 [ 65.538012][ T4869] EXT4-fs: Ignoring removed oldalloc option [ 65.545402][ T4869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.560949][ T4869] EXT4-fs (loop3): 1 truncate cleaned up [ 65.709275][ T4887] SELinux: failed to load policy [ 65.728896][ T4889] loop2: detected capacity change from 0 to 512 [ 65.735526][ T4889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.742518][ T4889] ext4: Unknown parameter 'delalloc"journal_dev' [ 65.763580][ T4889] loop2: detected capacity change from 0 to 2048 [ 65.811376][ T4889] Alternate GPT is invalid, using primary GPT. [ 65.817794][ T4889] loop2: p2 p3 p7 [ 66.227708][ T4910] loop1: detected capacity change from 0 to 164 [ 66.274418][ T4910] iso9660: Unknown parameter '' [ 66.499153][ T4910] loop1: detected capacity change from 0 to 512 [ 66.526395][ T4910] EXT4-fs: Ignoring removed oldalloc option [ 66.540677][ T4910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.567541][ T4910] EXT4-fs (loop1): 1 truncate cleaned up [ 66.792174][ T4947] loop3: detected capacity change from 0 to 1024 [ 66.800017][ T4947] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.965502][ T4965] loop4: detected capacity change from 0 to 1024 [ 66.972184][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.979319][ T4965] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 66.998250][ T4965] EXT4-fs mount: 16 callbacks suppressed [ 66.998264][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.018358][ T4965] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 67.474285][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.555'. [ 67.485330][ T4972] vlan2: entered allmulticast mode [ 67.516141][ T4974] loop5: detected capacity change from 0 to 164 [ 67.522638][ T4974] iso9660: Unknown parameter '' [ 67.562371][ T4974] loop5: detected capacity change from 0 to 512 [ 67.570753][ T4974] EXT4-fs: Ignoring removed oldalloc option [ 67.581028][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.583516][ T4974] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.617881][ T4974] EXT4-fs (loop5): 1 truncate cleaned up [ 67.629323][ T4974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.787560][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.814502][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 67.814520][ T29] audit: type=1326 audit(1732408477.517:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 67.844653][ T29] audit: type=1326 audit(1732408477.527:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 67.868102][ T29] audit: type=1326 audit(1732408477.527:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 67.891615][ T29] audit: type=1326 audit(1732408477.527:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 67.915190][ T29] audit: type=1326 audit(1732408477.527:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 67.953325][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.955656][ T29] audit: type=1326 audit(1732408477.647:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 67.985905][ T29] audit: type=1326 audit(1732408477.647:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 68.009213][ T29] audit: type=1326 audit(1732408477.647:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 68.033107][ T29] audit: type=1326 audit(1732408477.647:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 68.056757][ T29] audit: type=1326 audit(1732408477.647:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.2.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae64ece819 code=0x7ffc0000 [ 68.195320][ T5005] loop3: detected capacity change from 0 to 764 [ 68.205156][ T5005] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.216031][ T5005] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.224531][ T5005] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.244735][ T5005] rock: directory entry would overflow storage [ 68.250952][ T5005] rock: sig=0x4f50, size=4, remaining=3 [ 68.256562][ T5005] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 68.390881][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 68.549197][ T5024] loop4: detected capacity change from 0 to 164 [ 68.555949][ T5024] iso9660: Unknown parameter '' [ 68.625540][ T5024] loop4: detected capacity change from 0 to 512 [ 68.635432][ T5024] EXT4-fs: Ignoring removed oldalloc option [ 68.643227][ T5024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.670656][ T5024] EXT4-fs (loop4): 1 truncate cleaned up [ 68.680592][ T5024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.707615][ T5031] FAULT_INJECTION: forcing a failure. [ 68.707615][ T5031] name failslab, interval 1, probability 0, space 0, times 1 [ 68.720326][ T5031] CPU: 1 UID: 0 PID: 5031 Comm: syz.5.577 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 68.730611][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.740691][ T5031] Call Trace: [ 68.744008][ T5031] [ 68.746951][ T5031] dump_stack_lvl+0xf2/0x150 [ 68.751581][ T5031] dump_stack+0x15/0x20 [ 68.755821][ T5031] should_fail_ex+0x223/0x230 [ 68.760547][ T5031] ? __d_alloc+0x3d/0x340 [ 68.764915][ T5031] should_failslab+0x8f/0xb0 [ 68.769617][ T5031] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 68.775676][ T5031] __d_alloc+0x3d/0x340 [ 68.779919][ T5031] d_alloc_parallel+0x54/0xc60 [ 68.784778][ T5031] ? selinux_inode_permission+0x341/0x410 [ 68.790564][ T5031] ? lockref_get_not_dead+0x118/0x1b0 [ 68.796016][ T5031] ? down_read+0x171/0x4b0 [ 68.800541][ T5031] __lookup_slow+0x8d/0x250 [ 68.805096][ T5031] lookup_slow+0x3c/0x60 [ 68.809930][ T5031] walk_component+0x1f5/0x230 [ 68.814631][ T5031] ? path_lookupat+0xfd/0x2b0 [ 68.819514][ T5031] path_lookupat+0x10a/0x2b0 [ 68.824147][ T5031] filename_lookup+0x150/0x340 [ 68.829061][ T5031] user_path_at+0x3c/0x120 [ 68.833499][ T5031] user_statfs+0x7a/0x2a0 [ 68.837892][ T5031] __x64_sys_statfs+0x64/0xf0 [ 68.842607][ T5031] ? fput+0x1c4/0x200 [ 68.846655][ T5031] ? ksys_write+0x176/0x1b0 [ 68.851182][ T5031] ? fpregs_assert_state_consistent+0x83/0xa0 [ 68.857327][ T5031] x64_sys_call+0x1fcd/0x2dc0 [ 68.862031][ T5031] do_syscall_64+0xc9/0x1c0 [ 68.866559][ T5031] ? clear_bhb_loop+0x55/0xb0 [ 68.871325][ T5031] ? clear_bhb_loop+0x55/0xb0 [ 68.876137][ T5031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.882081][ T5031] RIP: 0033:0x7ff2a35ce819 [ 68.886522][ T5031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.906150][ T5031] RSP: 002b:00007ff2a1c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 68.914572][ T5031] RAX: ffffffffffffffda RBX: 00007ff2a3785fa0 RCX: 00007ff2a35ce819 [ 68.922547][ T5031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 68.925664][ C0] net_ratelimit: 7 callbacks suppressed [ 68.925680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 68.930579][ T5031] RBP: 00007ff2a1c47090 R08: 0000000000000000 R09: 0000000000000000 [ 68.951282][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.959257][ T5031] R13: 0000000000000001 R14: 00007ff2a3785fa0 R15: 00007ffd5ea27d48 [ 68.967238][ T5031] [ 69.051149][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 69.065470][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.090130][ T5046] loop1: detected capacity change from 0 to 512 [ 69.127320][ T5053] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 69.141288][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.148618][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.158740][ T5054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 69.168573][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.175695][ T5053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.183022][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.188206][ T5058] loop3: detected capacity change from 0 to 2048 [ 69.190096][ T5053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.220485][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 69.224688][ T5053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 69.240188][ T5061] bridge_slave_1: left allmulticast mode [ 69.246062][ T5061] bridge_slave_1: left promiscuous mode [ 69.251797][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.263390][ T5058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.279032][ T5061] bridge_slave_0: left allmulticast mode [ 69.282169][ T5068] IPv4: Oversized IP packet from 172.20.20.24 [ 69.284791][ T5061] bridge_slave_0: left promiscuous mode [ 69.284947][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.291056][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 69.309736][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 69.383863][ T5061] bond0: (slave bridge0): Releasing backup interface [ 69.430659][ T5077] loop2: detected capacity change from 0 to 164 [ 69.440369][ T5077] iso9660: Unknown parameter '' [ 69.495318][ T5077] loop2: detected capacity change from 0 to 512 [ 69.508794][ T5077] EXT4-fs: Ignoring removed oldalloc option [ 69.518940][ T5077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.532135][ T5083] FAULT_INJECTION: forcing a failure. [ 69.532135][ T5083] name failslab, interval 1, probability 0, space 0, times 0 [ 69.545054][ T5083] CPU: 1 UID: 0 PID: 5083 Comm: syz.5.597 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 69.555478][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.565579][ T5083] Call Trace: [ 69.568983][ T5083] [ 69.571921][ T5083] dump_stack_lvl+0xf2/0x150 [ 69.576618][ T5083] dump_stack+0x15/0x20 [ 69.580810][ T5083] should_fail_ex+0x223/0x230 [ 69.585522][ T5083] ? bpf_prog_array_alloc+0x3c/0x60 [ 69.590777][ T5083] should_failslab+0x8f/0xb0 [ 69.595369][ T5083] __kmalloc_noprof+0xa5/0x370 [ 69.600149][ T5083] bpf_prog_array_alloc+0x3c/0x60 [ 69.605213][ T5083] netns_bpf_prog_attach+0x20d/0x280 [ 69.610587][ T5083] bpf_prog_attach+0x332/0x380 [ 69.611418][ T5077] EXT4-fs (loop2): 1 truncate cleaned up [ 69.615402][ T5083] __sys_bpf+0x296/0x7a0 [ 69.615472][ T5083] __x64_sys_bpf+0x43/0x50 [ 69.615509][ T5083] x64_sys_call+0x2914/0x2dc0 [ 69.615542][ T5083] do_syscall_64+0xc9/0x1c0 [ 69.615592][ T5083] ? clear_bhb_loop+0x55/0xb0 [ 69.615633][ T5083] ? clear_bhb_loop+0x55/0xb0 [ 69.615730][ T5083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.615823][ T5083] RIP: 0033:0x7ff2a35ce819 [ 69.615842][ T5083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.615863][ T5083] RSP: 002b:00007ff2a1c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.615887][ T5083] RAX: ffffffffffffffda RBX: 00007ff2a3785fa0 RCX: 00007ff2a35ce819 [ 69.615903][ T5083] RDX: 0000000000000014 RSI: 0000000020000140 RDI: 0000000000000008 [ 69.615919][ T5083] RBP: 00007ff2a1c47090 R08: 0000000000000000 R09: 0000000000000000 [ 69.615935][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.615951][ T5083] R13: 0000000000000000 R14: 00007ff2a3785fa0 R15: 00007ffd5ea27d48 [ 69.616009][ T5083] [ 69.623095][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.638883][ T5077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.774663][ T5086] loop3: detected capacity change from 0 to 512 [ 69.929867][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.953067][ T5100] loop2: detected capacity change from 0 to 512 [ 69.959657][ T5100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.965664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 69.966380][ T5100] ext4: Unknown parameter 'delalloc"journal_dev' [ 69.995081][ T5100] loop2: detected capacity change from 0 to 2048 [ 70.011970][ T5105] loop4: detected capacity change from 0 to 512 [ 70.018570][ T5105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.025356][ T5105] ext4: Unknown parameter 'delalloc"journal_dev' [ 70.033783][ T5100] Alternate GPT is invalid, using primary GPT. [ 70.040301][ T5100] loop2: p2 p3 p7 [ 70.095157][ T5105] loop4: detected capacity change from 0 to 2048 [ 70.132777][ T5105] Alternate GPT is invalid, using primary GPT. [ 70.133896][ T5110] loop3: detected capacity change from 0 to 164 [ 70.139205][ T5105] loop4: p2 p3 p7 [ 70.145776][ T5110] iso9660: Unknown parameter '' [ 70.186301][ T5110] loop3: detected capacity change from 0 to 512 [ 70.194851][ T5110] EXT4-fs: Ignoring removed oldalloc option [ 70.204298][ T5110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.220082][ T5110] EXT4-fs (loop3): 1 truncate cleaned up [ 70.229312][ T5110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.275226][ T5116] loop2: detected capacity change from 0 to 512 [ 70.410919][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.422493][ T5131] xt_hashlimit: max too large, truncated to 1048576 [ 70.456668][ T5135] loop4: detected capacity change from 0 to 512 [ 70.470365][ T5135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.482113][ T5135] ext4: Unknown parameter 'delalloc"journal_dev' [ 70.503566][ T5135] loop4: detected capacity change from 0 to 2048 [ 70.524232][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 70.535495][ T5140] vlan2: entered allmulticast mode [ 70.541415][ T5135] Alternate GPT is invalid, using primary GPT. [ 70.547908][ T5135] loop4: p2 p3 p7 [ 70.571167][ T5143] SELinux: failed to load policy [ 70.739286][ T5157] IPv4: Oversized IP packet from 172.20.20.24 [ 70.745610][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 70.751802][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 70.798054][ T5162] syz.5.629[5162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.798329][ T5162] syz.5.629[5162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.940894][ T5171] SELinux: failed to load policy [ 71.005651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 71.172630][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 71.185289][ T5182] loop4: detected capacity change from 0 to 512 [ 71.197620][ T5182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.210545][ T5182] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.405759][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 71.486047][ T5206] loop2: detected capacity change from 0 to 512 [ 71.546937][ T5214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5214 comm=syz.5.647 [ 71.634170][ T5219] loop2: detected capacity change from 0 to 512 [ 71.640799][ T5219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.647490][ T5219] ext4: Unknown parameter 'delalloc"journal_dev' [ 71.664078][ T5219] loop2: detected capacity change from 0 to 2048 [ 71.712081][ T5219] Alternate GPT is invalid, using primary GPT. [ 71.718541][ T5219] loop2: p2 p3 p7 [ 71.736959][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.759530][ T5221] loop4: detected capacity change from 0 to 164 [ 71.766229][ T5221] iso9660: Unknown parameter '' [ 71.806550][ T5221] loop4: detected capacity change from 0 to 512 [ 71.814739][ T5221] EXT4-fs: Ignoring removed oldalloc option [ 71.822669][ T5221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.837317][ T5221] EXT4-fs (loop4): 1 truncate cleaned up [ 71.844989][ T5221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.931682][ T5227] FAULT_INJECTION: forcing a failure. [ 71.931682][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 71.944556][ T5227] CPU: 1 UID: 0 PID: 5227 Comm: syz.2.655 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 71.954868][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.965025][ T5227] Call Trace: [ 71.968347][ T5227] [ 71.971373][ T5227] dump_stack_lvl+0xf2/0x150 [ 71.976009][ T5227] dump_stack+0x15/0x20 [ 71.980269][ T5227] should_fail_ex+0x223/0x230 [ 71.985053][ T5227] ? __alloc_skb+0x10b/0x310 [ 71.989717][ T5227] should_failslab+0x8f/0xb0 [ 71.994337][ T5227] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 72.000262][ T5227] __alloc_skb+0x10b/0x310 [ 72.004703][ T5227] netlink_ack+0xef/0x4f0 [ 72.009144][ T5227] netlink_rcv_skb+0x19c/0x230 [ 72.013931][ T5227] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 72.019491][ T5227] xfrm_netlink_rcv+0x47/0x60 [ 72.024221][ T5227] netlink_unicast+0x599/0x670 [ 72.029043][ T5227] netlink_sendmsg+0x5cc/0x6e0 [ 72.033922][ T5227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.039296][ T5227] __sock_sendmsg+0x140/0x180 [ 72.044027][ T5227] ____sys_sendmsg+0x312/0x410 [ 72.049010][ T5227] __sys_sendmsg+0x19d/0x230 [ 72.053666][ T5227] __x64_sys_sendmsg+0x46/0x50 [ 72.058454][ T5227] x64_sys_call+0x2734/0x2dc0 [ 72.063205][ T5227] do_syscall_64+0xc9/0x1c0 [ 72.067759][ T5227] ? clear_bhb_loop+0x55/0xb0 [ 72.072460][ T5227] ? clear_bhb_loop+0x55/0xb0 [ 72.077259][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.083200][ T5227] RIP: 0033:0x7fae64ece819 [ 72.087718][ T5227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.107768][ T5227] RSP: 002b:00007fae63547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.116186][ T5227] RAX: ffffffffffffffda RBX: 00007fae65085fa0 RCX: 00007fae64ece819 [ 72.124159][ T5227] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 72.132249][ T5227] RBP: 00007fae63547090 R08: 0000000000000000 R09: 0000000000000000 [ 72.140257][ T5227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.148269][ T5227] R13: 0000000000000000 R14: 00007fae65085fa0 R15: 00007fff7a85de98 [ 72.156342][ T5227] [ 72.164889][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.241410][ T5233] loop3: detected capacity change from 0 to 512 [ 72.310634][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 72.335141][ T5245] loop3: detected capacity change from 0 to 2048 [ 72.357386][ T5249] loop2: detected capacity change from 0 to 512 [ 72.364062][ T5249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.370866][ T5249] ext4: Unknown parameter 'delalloc"journal_dev' [ 72.405281][ T5249] loop2: detected capacity change from 0 to 2048 [ 72.479108][ T5249] Alternate GPT is invalid, using primary GPT. [ 72.485495][ T5249] loop2: p2 p3 p7 [ 72.498860][ T5257] loop4: detected capacity change from 0 to 1024 [ 72.508304][ T5245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.523972][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.666'. [ 72.534138][ T5257] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.568772][ T5257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.705944][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.835848][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.845547][ T5267] FAULT_INJECTION: forcing a failure. [ 72.845547][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 72.858336][ T5267] CPU: 1 UID: 0 PID: 5267 Comm: syz.2.669 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 72.868613][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.878707][ T5267] Call Trace: [ 72.882105][ T5267] [ 72.885045][ T5267] dump_stack_lvl+0xf2/0x150 [ 72.889701][ T5267] dump_stack+0x15/0x20 [ 72.893867][ T5267] should_fail_ex+0x223/0x230 [ 72.898581][ T5267] ? __alloc_skb+0x10b/0x310 [ 72.903261][ T5267] should_failslab+0x8f/0xb0 [ 72.907867][ T5267] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 72.913795][ T5267] __alloc_skb+0x10b/0x310 [ 72.918271][ T5267] sock_wmalloc+0x7b/0xc0 [ 72.922628][ T5267] pppol2tp_sendmsg+0xff/0x440 [ 72.927430][ T5267] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 72.932899][ T5267] __sock_sendmsg+0x140/0x180 [ 72.937643][ T5267] sock_write_iter+0x15e/0x1a0 [ 72.942503][ T5267] do_iter_readv_writev+0x394/0x450 [ 72.947736][ T5267] vfs_writev+0x2d4/0x880 [ 72.952126][ T5267] ? proc_fail_nth_write+0x12a/0x150 [ 72.957500][ T5267] do_writev+0xf4/0x220 [ 72.962100][ T5267] __x64_sys_writev+0x45/0x50 [ 72.966861][ T5267] x64_sys_call+0x1fab/0x2dc0 [ 72.971560][ T5267] do_syscall_64+0xc9/0x1c0 [ 72.976114][ T5267] ? clear_bhb_loop+0x55/0xb0 [ 72.980897][ T5267] ? clear_bhb_loop+0x55/0xb0 [ 72.985812][ T5267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.991751][ T5267] RIP: 0033:0x7fae64ece819 [ 72.996175][ T5267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.015873][ T5267] RSP: 002b:00007fae63547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 73.024365][ T5267] RAX: ffffffffffffffda RBX: 00007fae65085fa0 RCX: 00007fae64ece819 [ 73.032408][ T5267] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000006 [ 73.040393][ T5267] RBP: 00007fae63547090 R08: 0000000000000000 R09: 0000000000000000 [ 73.048376][ T5267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.056428][ T5267] R13: 0000000000000000 R14: 00007fae65085fa0 R15: 00007fff7a85de98 [ 73.064463][ T5267] [ 73.124471][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 73.124489][ T29] audit: type=1400 audit(1732408482.827:3427): avc: denied { cpu } for pid=5269 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 73.149835][ T29] audit: type=1400 audit(1732408482.827:3428): avc: denied { setopt } for pid=5269 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.201966][ T5279] loop1: detected capacity change from 0 to 512 [ 73.241771][ T5284] loop3: detected capacity change from 0 to 764 [ 73.271761][ T5284] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.282491][ T5293] SELinux: failed to load policy [ 73.301890][ T5295] loop5: detected capacity change from 0 to 512 [ 73.361365][ T5300] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.369835][ T5300] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.379613][ T5300] rock: directory entry would overflow storage [ 73.385801][ T5300] rock: sig=0x4f50, size=4, remaining=3 [ 73.391447][ T5300] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 73.401969][ T5300] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 73.470463][ T5301] netlink: 56 bytes leftover after parsing attributes in process `syz.5.681'. [ 74.125646][ C0] net_ratelimit: 3 callbacks suppressed [ 74.125664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 74.251784][ T5317] loop2: detected capacity change from 0 to 512 [ 74.262850][ T1035] IPVS: starting estimator thread 0... [ 74.277134][ T5315] block device autoloading is deprecated and will be removed. [ 74.284892][ T5315] syz.5.687: attempt to access beyond end of device [ 74.284892][ T5315] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 74.292331][ T29] audit: type=1326 audit(1732408483.997:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.321323][ T29] audit: type=1326 audit(1732408483.997:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.345010][ T29] audit: type=1326 audit(1732408484.027:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.368472][ T29] audit: type=1326 audit(1732408484.027:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.398493][ T29] audit: type=1326 audit(1732408484.077:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.421853][ T29] audit: type=1326 audit(1732408484.077:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.445240][ T29] audit: type=1326 audit(1732408484.077:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.455904][ T5320] IPVS: using max 2160 ests per chain, 108000 per kthread [ 74.468937][ T29] audit: type=1326 audit(1732408484.077:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261378e819 code=0x7ffc0000 [ 74.519892][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 74.571356][ T5333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5333 comm=syz.5.694 [ 74.592901][ T5337] loop2: detected capacity change from 0 to 764 [ 74.600148][ T5337] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 74.660179][ T5339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 74.668381][ T5339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 74.677209][ T5339] rock: directory entry would overflow storage [ 74.683617][ T5339] rock: sig=0x4f50, size=4, remaining=3 [ 74.689313][ T5339] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 74.697486][ T5339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 75.165700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 75.225977][ T5346] loop1: detected capacity change from 0 to 512 [ 75.374364][ T5347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.697'. [ 75.380411][ T5351] loop5: detected capacity change from 0 to 1024 [ 75.390783][ T5351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.400833][ T5351] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.405975][ T5353] loop4: detected capacity change from 0 to 512 [ 75.427733][ T5351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.442080][ T5351] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 75.457950][ T5360] loop4: detected capacity change from 0 to 512 [ 75.464545][ T5360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.471272][ T5360] ext4: Unknown parameter 'delalloc"journal_dev' [ 75.488707][ T5360] loop4: detected capacity change from 0 to 2048 [ 75.522839][ T5360] Alternate GPT is invalid, using primary GPT. [ 75.529382][ T5360] loop4: p2 p3 p7 [ 76.043360][ T5375] loop4: detected capacity change from 0 to 164 [ 76.050062][ T5375] iso9660: Unknown parameter '' [ 76.093796][ T5375] loop4: detected capacity change from 0 to 512 [ 76.103386][ T5375] EXT4-fs: Ignoring removed oldalloc option [ 76.114087][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 76.123453][ T5375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.138783][ T5375] EXT4-fs (loop4): 1 truncate cleaned up [ 76.146840][ T5375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.205644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 76.227689][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.313234][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.315746][ T5387] loop5: detected capacity change from 0 to 764 [ 76.329928][ T5387] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.342786][ T5389] loop4: detected capacity change from 0 to 764 [ 76.349985][ T5389] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.358984][ T5389] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.367459][ T5389] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.376739][ T5389] rock: directory entry would overflow storage [ 76.382923][ T5389] rock: sig=0x4f50, size=4, remaining=3 [ 76.388531][ T5389] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.396578][ T5390] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.404868][ T5390] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.413849][ T5390] rock: directory entry would overflow storage [ 76.420086][ T5390] rock: sig=0x4f50, size=4, remaining=3 [ 76.425733][ T5390] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.436745][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 76.438631][ T5390] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.466014][ T5394] loop4: detected capacity change from 0 to 512 [ 76.481902][ T5394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.485437][ T5396] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.716'. [ 76.490893][ T5394] ext4: Unknown parameter 'delalloc"journal_dev' [ 76.499936][ T5396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5396 comm=syz.2.716 [ 76.529232][ T5394] loop4: detected capacity change from 0 to 2048 [ 76.538096][ T5396] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.539339][ T5400] loop3: detected capacity change from 0 to 512 [ 76.591320][ T5394] Alternate GPT is invalid, using primary GPT. [ 76.597813][ T5394] loop4: p2 p3 p7 [ 76.630657][ T5401] smc: net device bond0 applied user defined pnetid SYZ0 [ 76.705046][ T5402] netlink: 56 bytes leftover after parsing attributes in process `syz.3.718'. [ 76.800494][ T5404] loop2: detected capacity change from 0 to 1024 [ 76.807293][ T5404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.814306][ T5404] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.827108][ T5404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.841824][ T5404] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 76.979684][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 77.245646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 77.434978][ T5422] loop3: detected capacity change from 0 to 2048 [ 77.482366][ T5422] Alternate GPT is invalid, using primary GPT. [ 77.488802][ T5422] loop3: p2 p3 p7 [ 77.540019][ T5424] loop3: detected capacity change from 0 to 764 [ 77.547209][ T5424] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.556569][ T5424] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.564727][ T5424] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 77.573969][ T5424] rock: directory entry would overflow storage [ 77.580211][ T5424] rock: sig=0x4f50, size=4, remaining=3 [ 77.585811][ T5424] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 77.636512][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.663900][ T5430] loop4: detected capacity change from 0 to 164 [ 77.671340][ T5430] iso9660: Unknown parameter '' [ 77.715691][ T5430] loop4: detected capacity change from 0 to 512 [ 77.723433][ T5430] EXT4-fs: Ignoring removed oldalloc option [ 77.732796][ T5430] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.749055][ T5430] EXT4-fs (loop4): 1 truncate cleaned up [ 77.757178][ T5430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.905143][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.932534][ T5439] loop4: detected capacity change from 0 to 2048 [ 77.947485][ T5439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.113461][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.732'. [ 78.163400][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.187523][ T5447] loop4: detected capacity change from 0 to 764 [ 78.194760][ T5447] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.255251][ T5448] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.263654][ T5448] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.272831][ T5448] rock: directory entry would overflow storage [ 78.279040][ T5448] rock: sig=0x4f50, size=4, remaining=3 [ 78.284629][ T5448] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 78.285682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 78.292762][ T5448] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.476761][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 78.487978][ T5450] vlan2: entered allmulticast mode [ 78.493178][ T5450] bridge_slave_0: entered allmulticast mode [ 78.523378][ T5454] FAULT_INJECTION: forcing a failure. [ 78.523378][ T5454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.535772][ T5456] loop2: detected capacity change from 0 to 512 [ 78.536732][ T5454] CPU: 0 UID: 0 PID: 5454 Comm: syz.3.735 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 78.543907][ T5456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.553023][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.553041][ T5454] Call Trace: [ 78.553048][ T5454] [ 78.553057][ T5454] dump_stack_lvl+0xf2/0x150 [ 78.553100][ T5454] dump_stack+0x15/0x20 [ 78.553137][ T5454] should_fail_ex+0x223/0x230 [ 78.562154][ T5456] ext4: Unknown parameter 'delalloc"journal_dev' [ 78.569778][ T5454] should_fail+0xb/0x10 [ 78.599966][ T5454] should_fail_usercopy+0x1a/0x20 [ 78.605099][ T5454] _copy_from_user+0x1e/0xb0 [ 78.609713][ T5454] do_ipv6_setsockopt+0x1ef/0x2250 [ 78.613305][ T5456] loop2: detected capacity change from 0 to 2048 [ 78.614854][ T5454] ? _parse_integer+0x27/0x30 [ 78.625893][ T5454] ? kstrtouint+0x77/0xc0 [ 78.630252][ T5454] ? avc_has_perm_noaudit+0x1cc/0x210 [ 78.635651][ T5454] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 78.642017][ T5454] ipv6_setsockopt+0x57/0x130 [ 78.646760][ T5454] tcp_setsockopt+0x93/0xb0 [ 78.651330][ T5454] sock_common_setsockopt+0x64/0x80 [ 78.656620][ T5454] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.662653][ T5454] __sys_setsockopt+0x187/0x200 [ 78.667515][ T5454] __x64_sys_setsockopt+0x66/0x80 [ 78.672563][ T5454] x64_sys_call+0x282e/0x2dc0 [ 78.677250][ T5454] do_syscall_64+0xc9/0x1c0 [ 78.681790][ T5454] ? clear_bhb_loop+0x55/0xb0 [ 78.686661][ T5454] ? clear_bhb_loop+0x55/0xb0 [ 78.691426][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.697483][ T5454] RIP: 0033:0x7f261378e819 [ 78.701903][ T5454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.721592][ T5454] RSP: 002b:00007f2611e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.730103][ T5454] RAX: ffffffffffffffda RBX: 00007f2613945fa0 RCX: 00007f261378e819 [ 78.738111][ T5454] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 78.746108][ T5454] RBP: 00007f2611e07090 R08: 0000000000000565 R09: 0000000000000000 [ 78.754107][ T5454] R10: 0000000020000c80 R11: 0000000000000246 R12: 0000000000000001 [ 78.762085][ T5454] R13: 0000000000000000 R14: 00007f2613945fa0 R15: 00007fffb5b53778 [ 78.770069][ T5454] [ 78.796376][ T5458] loop3: detected capacity change from 0 to 764 [ 78.802459][ T5456] Alternate GPT is invalid, using primary GPT. [ 78.809115][ T5456] loop2: p2 p3 p7 [ 78.809208][ T5458] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.824238][ T5458] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.832693][ T5458] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 78.841767][ T5458] rock: directory entry would overflow storage [ 78.847957][ T5458] rock: sig=0x4f50, size=4, remaining=3 [ 78.853561][ T5458] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 78.970949][ T5462] loop5: detected capacity change from 0 to 1024 [ 78.978040][ T5462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.985738][ T5462] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.019416][ T5462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.054155][ T5462] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 79.135207][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 79.135227][ T29] audit: type=1326 audit(1732408488.797:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 79.164995][ T29] audit: type=1326 audit(1732408488.797:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 79.188354][ T29] audit: type=1326 audit(1732408488.797:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 79.211748][ T29] audit: type=1326 audit(1732408488.797:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 79.235363][ T29] audit: type=1326 audit(1732408488.797:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 79.258774][ T29] audit: type=1326 audit(1732408488.797:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2a35cd1b0 code=0x7ffc0000 [ 79.282250][ T29] audit: type=1326 audit(1732408488.797:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff2a35d0047 code=0x7ffc0000 [ 79.305614][ T29] audit: type=1326 audit(1732408488.797:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 79.328870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 79.335934][ T29] audit: type=1326 audit(1732408488.797:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff2a35d0047 code=0x7ffc0000 [ 79.359362][ T29] audit: type=1326 audit(1732408488.797:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff2a35cd4aa code=0x7ffc0000 [ 79.404269][ T5471] loop4: detected capacity change from 0 to 2048 [ 79.412886][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.437515][ T5471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.485317][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.573541][ T5486] FAULT_INJECTION: forcing a failure. [ 79.573541][ T5486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.574103][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 79.586753][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.4.745 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 79.605779][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.616005][ T5486] Call Trace: [ 79.619334][ T5486] [ 79.622625][ T5486] dump_stack_lvl+0xf2/0x150 [ 79.627229][ T5486] dump_stack+0x15/0x20 [ 79.631460][ T5486] should_fail_ex+0x223/0x230 [ 79.636311][ T5486] should_fail+0xb/0x10 [ 79.640486][ T5486] should_fail_usercopy+0x1a/0x20 [ 79.645516][ T5486] _copy_to_user+0x20/0xa0 [ 79.649932][ T5486] vga_arb_read+0x1b1/0x3d0 [ 79.654455][ T5486] vfs_readv+0x3e2/0x660 [ 79.658741][ T5486] ? __pfx_vga_arb_read+0x10/0x10 [ 79.663865][ T5486] do_readv+0xf4/0x220 [ 79.668376][ T5486] __x64_sys_readv+0x45/0x50 [ 79.672973][ T5486] x64_sys_call+0x2c34/0x2dc0 [ 79.677667][ T5486] do_syscall_64+0xc9/0x1c0 [ 79.682243][ T5486] ? clear_bhb_loop+0x55/0xb0 [ 79.686994][ T5486] ? clear_bhb_loop+0x55/0xb0 [ 79.691681][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.697589][ T5486] RIP: 0033:0x7fbdd1cce819 [ 79.702122][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.721760][ T5486] RSP: 002b:00007fbdd0347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 79.730226][ T5486] RAX: ffffffffffffffda RBX: 00007fbdd1e85fa0 RCX: 00007fbdd1cce819 [ 79.738273][ T5486] RDX: 0000000000000002 RSI: 0000000020000280 RDI: 0000000000000005 [ 79.746360][ T5486] RBP: 00007fbdd0347090 R08: 0000000000000000 R09: 0000000000000000 [ 79.754339][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.762347][ T5486] R13: 0000000000000000 R14: 00007fbdd1e85fa0 R15: 00007ffd34f08f88 [ 79.770325][ T5486] [ 79.830725][ T5491] loop5: detected capacity change from 0 to 512 [ 79.835150][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 79.837264][ T5491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.852874][ T5491] ext4: Unknown parameter 'delalloc"journal_dev' [ 79.875570][ T5491] loop5: detected capacity change from 0 to 2048 [ 79.911943][ T5491] Alternate GPT is invalid, using primary GPT. [ 79.918405][ T5491] loop5: p2 p3 p7 [ 80.060456][ T5506] loop1: detected capacity change from 0 to 2048 [ 80.077327][ T5506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.125409][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.152083][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 80.163624][ T5515] vlan2: entered allmulticast mode [ 80.195156][ T5519] loop4: detected capacity change from 0 to 1024 [ 80.203122][ T5519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.210337][ T5519] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 80.283243][ T5519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.300470][ T5519] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 80.335879][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.365682][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 80.749761][ T5539] loop3: detected capacity change from 0 to 164 [ 80.757534][ T5539] iso9660: Unknown parameter '' [ 80.799327][ T5539] loop3: detected capacity change from 0 to 512 [ 80.807940][ T5539] EXT4-fs: Ignoring removed oldalloc option [ 80.815899][ T5539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.831243][ T5539] EXT4-fs (loop3): 1 truncate cleaned up [ 80.839241][ T5539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.983661][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.010751][ T5543] loop3: detected capacity change from 0 to 2048 [ 81.027676][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.064994][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.258186][ T5558] loop1: detected capacity change from 0 to 1024 [ 81.265060][ T5558] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.270468][ T5561] loop4: detected capacity change from 0 to 512 [ 81.288241][ T5558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.302222][ T5566] loop4: detected capacity change from 0 to 512 [ 81.309141][ T5566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.316023][ T5566] ext4: Unknown parameter 'delalloc"journal_dev' [ 81.334523][ T5566] loop4: detected capacity change from 0 to 2048 [ 81.370439][ T5566] Alternate GPT is invalid, using primary GPT. [ 81.377154][ T5566] loop4: p2 p3 p7 [ 81.405702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 81.443427][ T5579] SELinux: failed to load policy [ 81.464985][ T5581] IPv4: Oversized IP packet from 172.20.20.24 [ 81.471213][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 81.477377][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 81.496294][ T5582] loop5: detected capacity change from 0 to 1024 [ 81.503352][ T5582] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.528940][ T5582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.574603][ T5593] loop3: detected capacity change from 0 to 512 [ 81.601673][ T5595] IPv4: Oversized IP packet from 172.20.20.24 [ 81.607931][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 81.614257][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 81.731091][ T5601] loop3: detected capacity change from 0 to 164 [ 81.738167][ T5601] iso9660: Unknown parameter '' [ 81.779904][ T5601] loop3: detected capacity change from 0 to 512 [ 81.789465][ T5601] EXT4-fs: Ignoring removed oldalloc option [ 81.797297][ T5601] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.811489][ T5601] EXT4-fs (loop3): 1 truncate cleaned up [ 81.819030][ T5601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.964125][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.990044][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.058755][ T5615] SELinux: failed to load policy [ 82.062124][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 82.122786][ T5621] loop1: detected capacity change from 0 to 512 [ 82.148040][ T5623] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 82.155869][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 82.185153][ T5628] loop1: detected capacity change from 0 to 164 [ 82.185923][ T5629] loop2: detected capacity change from 0 to 164 [ 82.192683][ T5628] iso9660: Unknown parameter '' [ 82.198136][ T5629] iso9660: Unknown parameter '' [ 82.244722][ T5629] loop2: detected capacity change from 0 to 512 [ 82.247243][ T5628] loop1: detected capacity change from 0 to 512 [ 82.254977][ T5629] EXT4-fs: Ignoring removed oldalloc option [ 82.262996][ T5628] EXT4-fs: Ignoring removed oldalloc option [ 82.274783][ T5628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.281090][ T5629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.297924][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.308255][ T5628] EXT4-fs (loop1): 1 truncate cleaned up [ 82.315226][ T5629] EXT4-fs (loop2): 1 truncate cleaned up [ 82.331678][ T5629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.350596][ T5628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.445815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 82.472673][ T5638] loop4: detected capacity change from 0 to 764 [ 82.481304][ T5638] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.545959][ T5641] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.554242][ T5641] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.571658][ T5641] rock: directory entry would overflow storage [ 82.577900][ T5641] rock: sig=0x4f50, size=4, remaining=3 [ 82.583704][ T5641] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 82.608142][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.614811][ T5641] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.642824][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.703585][ T5645] loop1: detected capacity change from 0 to 2048 [ 82.736943][ T5647] loop2: detected capacity change from 0 to 1024 [ 82.743874][ T5647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.750875][ T5647] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.767418][ T5647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.782829][ T5647] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 82.827959][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.837227][ T5653] loop1: detected capacity change from 0 to 512 [ 82.948271][ T5667] loop2: detected capacity change from 0 to 164 [ 82.954789][ T5667] iso9660: Unknown parameter '' [ 82.997589][ T5667] loop2: detected capacity change from 0 to 512 [ 83.006555][ T5667] EXT4-fs: Ignoring removed oldalloc option [ 83.014841][ T5667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.029353][ T5667] EXT4-fs (loop2): 1 truncate cleaned up [ 83.037260][ T5667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.193767][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.221664][ T5674] loop5: detected capacity change from 0 to 512 [ 83.298321][ T5677] loop4: detected capacity change from 0 to 1024 [ 83.305185][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.312560][ T5677] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 83.347881][ T5677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.362506][ T5677] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 83.389230][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.413551][ T5682] loop4: detected capacity change from 0 to 764 [ 83.420291][ T5678] netlink: 56 bytes leftover after parsing attributes in process `syz.5.817'. [ 83.430016][ T5682] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 83.439732][ T5682] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 83.448156][ T5682] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 83.456956][ T5682] rock: directory entry would overflow storage [ 83.463342][ T5682] rock: sig=0x4f50, size=4, remaining=3 [ 83.468980][ T5682] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 83.497451][ T5684] loop4: detected capacity change from 0 to 512 [ 83.592080][ T5689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7852 sclass=netlink_route_socket pid=5689 comm=syz.4.822 [ 83.796013][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 83.807686][ T5691] vlan2: entered allmulticast mode [ 83.812867][ T5691] bridge_slave_0: entered allmulticast mode [ 83.847941][ T5695] loop1: detected capacity change from 0 to 256 [ 83.861069][ T5695] FAT-fs (loop1): Directory bread(block 64) failed [ 83.867729][ T5695] FAT-fs (loop1): Directory bread(block 65) failed [ 83.874388][ T5695] FAT-fs (loop1): Directory bread(block 66) failed [ 83.880959][ T5695] FAT-fs (loop1): Directory bread(block 67) failed [ 83.887661][ T5695] FAT-fs (loop1): Directory bread(block 68) failed [ 83.894244][ T5695] FAT-fs (loop1): Directory bread(block 69) failed [ 83.900831][ T5695] FAT-fs (loop1): Directory bread(block 70) failed [ 83.907397][ T5695] FAT-fs (loop1): Directory bread(block 71) failed [ 83.914043][ T5695] FAT-fs (loop1): Directory bread(block 72) failed [ 83.920677][ T5695] FAT-fs (loop1): Directory bread(block 73) failed [ 83.934970][ T5695] Process accounting resumed [ 83.940113][ T5695] syz.1.824: attempt to access beyond end of device [ 83.940113][ T5695] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 83.987924][ T5695] usb usb4: usbfs: process 5695 (syz.1.824) did not claim interface 0 before use [ 84.096672][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 84.167957][ T5703] loop5: detected capacity change from 0 to 1024 [ 84.174882][ T5703] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.187834][ T5703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.394405][ T5708] loop4: detected capacity change from 0 to 764 [ 84.401652][ T5708] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.462029][ T5709] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.470375][ T5709] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.479177][ T5709] rock: directory entry would overflow storage [ 84.485456][ T5709] rock: sig=0x4f50, size=4, remaining=3 [ 84.491046][ T5709] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 84.499168][ T5709] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 84.525684][ C0] net_ratelimit: 4 callbacks suppressed [ 84.525717][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 84.909640][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 84.909656][ T29] audit: type=1326 audit(1732408494.617:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 84.944080][ T29] audit: type=1326 audit(1732408494.617:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 84.968205][ T29] audit: type=1326 audit(1732408494.617:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 84.991557][ T29] audit: type=1326 audit(1732408494.617:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.015205][ T29] audit: type=1326 audit(1732408494.617:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.038662][ T29] audit: type=1326 audit(1732408494.617:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5716 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.099778][ T5722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.836'. [ 85.110017][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.120629][ T29] audit: type=1326 audit(1732408494.777:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.144064][ T29] audit: type=1326 audit(1732408494.777:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.167481][ T29] audit: type=1326 audit(1732408494.777:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.191167][ T29] audit: type=1326 audit(1732408494.787:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ce23e819 code=0x7ffc0000 [ 85.195121][ T5732] loop2: detected capacity change from 0 to 764 [ 85.222095][ T5732] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.230991][ T5732] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.239231][ T5732] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.256371][ T5732] rock: directory entry would overflow storage [ 85.262627][ T5732] rock: sig=0x4f50, size=4, remaining=3 [ 85.268251][ T5732] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.339644][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 85.376507][ T5749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 85.405029][ T5751] loop5: detected capacity change from 0 to 512 [ 85.471324][ T5758] loop4: detected capacity change from 0 to 512 [ 85.502127][ T5760] loop5: detected capacity change from 0 to 764 [ 85.510429][ T5760] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.565629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 85.574234][ T5762] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.582816][ T5762] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.591708][ T5762] rock: directory entry would overflow storage [ 85.597940][ T5762] rock: sig=0x4f50, size=4, remaining=3 [ 85.603537][ T5762] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.611609][ T5762] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.633934][ T5761] netlink: 56 bytes leftover after parsing attributes in process `syz.4.850'. [ 85.984981][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 86.018717][ T5768] loop3: detected capacity change from 0 to 1024 [ 86.025840][ T5768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.033140][ T5768] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.060192][ T5768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.074948][ T5768] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 86.103405][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.352835][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 86.353476][ T5789] SELinux: failed to load policy [ 86.387231][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 86.416828][ T5796] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.460625][ T5806] loop4: detected capacity change from 0 to 1024 [ 86.467375][ T5806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.474668][ T5806] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.487193][ T5806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.501689][ T5806] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 86.605434][ T5813] loop4: detected capacity change from 0 to 764 [ 86.611831][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 86.619695][ T5813] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.628238][ T5813] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.636699][ T5813] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.645433][ T5813] rock: directory entry would overflow storage [ 86.651641][ T5813] rock: sig=0x4f50, size=4, remaining=3 [ 86.657304][ T5813] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 86.704532][ T5817] loop4: detected capacity change from 0 to 764 [ 86.711800][ T5817] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.772072][ T5818] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.780700][ T5818] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.789644][ T5818] rock: directory entry would overflow storage [ 86.795828][ T5818] rock: sig=0x4f50, size=4, remaining=3 [ 86.801683][ T5818] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 86.809718][ T5818] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 87.055695][ T5823] SELinux: failed to load policy [ 87.353420][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.361468][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.368624][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.377933][ T5843] loop3: detected capacity change from 0 to 512 [ 87.408528][ T5847] SELinux: failed to load policy [ 87.409681][ T5845] loop5: detected capacity change from 0 to 512 [ 87.420329][ T5845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.428273][ T5845] ext4: Unknown parameter 'delalloc"journal_dev' [ 87.433924][ T5849] IPv4: Oversized IP packet from 172.20.20.24 [ 87.440986][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 87.447160][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 87.453979][ T5845] loop5: detected capacity change from 0 to 2048 [ 87.501793][ T5845] Alternate GPT is invalid, using primary GPT. [ 87.508315][ T5845] loop5: p2 p3 p7 [ 87.645662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 87.717699][ T5870] SELinux: failed to load policy [ 87.789866][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.797931][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.805032][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.878457][ T5882] loop5: detected capacity change from 0 to 2048 [ 87.957241][ T5884] loop5: detected capacity change from 0 to 1024 [ 87.963965][ T5884] EXT4-fs: quotafile must be on filesystem root [ 88.111278][ T5898] SELinux: failed to load policy [ 88.333044][ T5906] loop3: detected capacity change from 0 to 512 [ 88.392115][ T5908] loop2: detected capacity change from 0 to 164 [ 88.398775][ T5908] iso9660: Unknown parameter '' [ 88.436899][ T5908] loop2: detected capacity change from 0 to 512 [ 88.445859][ T5908] EXT4-fs: Ignoring removed oldalloc option [ 88.453699][ T5908] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.469869][ T5908] EXT4-fs (loop2): 1 truncate cleaned up [ 88.496577][ T5909] __nla_validate_parse: 7 callbacks suppressed [ 88.496594][ T5909] netlink: 56 bytes leftover after parsing attributes in process `syz.3.911'. [ 88.685668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 88.746220][ T5921] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.893507][ T5930] SELinux: failed to load policy [ 89.265673][ T5942] IPv4: Oversized IP packet from 172.20.20.24 [ 89.271970][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 89.477184][ T5956] loop4: detected capacity change from 0 to 1024 [ 89.484128][ T5956] EXT4-fs: quotafile must be on filesystem root [ 89.493308][ T5956] FAULT_INJECTION: forcing a failure. [ 89.493308][ T5956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.506472][ T5956] CPU: 1 UID: 0 PID: 5956 Comm: syz.4.931 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 89.516733][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.526913][ T5956] Call Trace: [ 89.530194][ T5956] [ 89.533274][ T5956] dump_stack_lvl+0xf2/0x150 [ 89.537942][ T5956] dump_stack+0x15/0x20 [ 89.542222][ T5956] should_fail_ex+0x223/0x230 [ 89.547104][ T5956] should_fail+0xb/0x10 [ 89.551267][ T5956] should_fail_usercopy+0x1a/0x20 [ 89.556402][ T5956] strncpy_from_user+0x25/0x210 [ 89.561279][ T5956] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 89.566947][ T5956] getname_flags+0xb0/0x3b0 [ 89.571604][ T5956] __x64_sys_rename+0x40/0x70 [ 89.576322][ T5956] x64_sys_call+0x2b1c/0x2dc0 [ 89.581000][ T5956] do_syscall_64+0xc9/0x1c0 [ 89.585574][ T5956] ? clear_bhb_loop+0x55/0xb0 [ 89.590387][ T5956] ? clear_bhb_loop+0x55/0xb0 [ 89.595114][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.601116][ T5956] RIP: 0033:0x7fbdd1cce819 [ 89.605597][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.625405][ T5956] RSP: 002b:00007fbdd0347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 89.633902][ T5956] RAX: ffffffffffffffda RBX: 00007fbdd1e85fa0 RCX: 00007fbdd1cce819 [ 89.642130][ T5956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.650106][ T5956] RBP: 00007fbdd0347090 R08: 0000000000000000 R09: 0000000000000000 [ 89.658087][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.666065][ T5956] R13: 0000000000000000 R14: 00007fbdd1e85fa0 R15: 00007ffd34f08f88 [ 89.674077][ T5956] [ 89.682166][ T5958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.932'. [ 89.725645][ C0] net_ratelimit: 1 callbacks suppressed [ 89.725665][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.746731][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 89.787566][ T5967] loop1: detected capacity change from 0 to 1024 [ 89.791573][ T5969] loop2: detected capacity change from 0 to 512 [ 89.794395][ T5967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.822180][ T5967] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.897983][ T5977] loop5: detected capacity change from 0 to 512 [ 89.904553][ T5977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.911334][ T5977] ext4: Unknown parameter 'delalloc"journal_dev' [ 89.911531][ T5967] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 89.931177][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 89.931256][ T29] audit: type=1326 audit(1732408499.637:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 89.944868][ T5977] loop5: detected capacity change from 0 to 2048 [ 89.960820][ T29] audit: type=1326 audit(1732408499.637:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 89.990499][ T29] audit: type=1326 audit(1732408499.637:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.014042][ T29] audit: type=1326 audit(1732408499.637:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.018995][ T5982] netlink: 56 bytes leftover after parsing attributes in process `syz.2.935'. [ 90.037386][ T29] audit: type=1326 audit(1732408499.637:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.037424][ T29] audit: type=1326 audit(1732408499.637:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.093051][ T29] audit: type=1326 audit(1732408499.637:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.116552][ T29] audit: type=1326 audit(1732408499.637:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.139966][ T29] audit: type=1326 audit(1732408499.637:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.163365][ T29] audit: type=1326 audit(1732408499.637:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd1cce819 code=0x7ffc0000 [ 90.194394][ T5986] SELinux: failed to load policy [ 90.221700][ T5977] Alternate GPT is invalid, using primary GPT. [ 90.228211][ T5977] loop5: p2 p3 p7 [ 90.518644][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 90.577973][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 90.735175][ T6021] loop5: detected capacity change from 0 to 1024 [ 90.741973][ T6021] EXT4-fs: Ignoring removed orlov option [ 90.747698][ T6021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.765635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 90.789742][ T6027] loop5: detected capacity change from 0 to 764 [ 90.797079][ T6027] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.857099][ T6029] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.865437][ T6029] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.874565][ T6029] rock: directory entry would overflow storage [ 90.880781][ T6029] rock: sig=0x4f50, size=4, remaining=3 [ 90.886378][ T6029] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 90.894395][ T6029] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.137584][ T6033] FAULT_INJECTION: forcing a failure. [ 91.137584][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.150767][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.1.956 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 91.161150][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.171227][ T6033] Call Trace: [ 91.174516][ T6033] [ 91.177534][ T6033] dump_stack_lvl+0xf2/0x150 [ 91.182199][ T6033] dump_stack+0x15/0x20 [ 91.186409][ T6033] should_fail_ex+0x223/0x230 [ 91.191156][ T6033] should_fail+0xb/0x10 [ 91.195477][ T6033] should_fail_usercopy+0x1a/0x20 [ 91.200573][ T6033] _copy_from_user+0x1e/0xb0 [ 91.205284][ T6033] get_sg_io_hdr+0xbc/0x390 [ 91.209801][ T6033] ? path_openat+0x1a5a/0x1fa0 [ 91.214703][ T6033] sg_new_write+0xca/0x8e0 [ 91.219320][ T6033] sg_ioctl+0xe22/0x1870 [ 91.223615][ T6033] ? __fget_files+0x17c/0x1c0 [ 91.228392][ T6033] ? __pfx_sg_ioctl+0x10/0x10 [ 91.233104][ T6033] __se_sys_ioctl+0xc9/0x140 [ 91.237792][ T6033] __x64_sys_ioctl+0x43/0x50 [ 91.242436][ T6033] x64_sys_call+0x1690/0x2dc0 [ 91.247309][ T6033] do_syscall_64+0xc9/0x1c0 [ 91.251998][ T6033] ? clear_bhb_loop+0x55/0xb0 [ 91.256787][ T6033] ? clear_bhb_loop+0x55/0xb0 [ 91.261577][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.267483][ T6033] RIP: 0033:0x7f03ce23e819 [ 91.271909][ T6033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.291552][ T6033] RSP: 002b:00007f03cc8b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.299979][ T6033] RAX: ffffffffffffffda RBX: 00007f03ce3f5fa0 RCX: 00007f03ce23e819 [ 91.308010][ T6033] RDX: 0000000020000040 RSI: 0000000000002285 RDI: 0000000000000006 [ 91.316071][ T6033] RBP: 00007f03cc8b1090 R08: 0000000000000000 R09: 0000000000000000 [ 91.324154][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.332128][ T6033] R13: 0000000000000000 R14: 00007f03ce3f5fa0 R15: 00007ffc44261b08 [ 91.340224][ T6033] [ 91.402835][ T6039] loop1: detected capacity change from 0 to 512 [ 91.428832][ T6041] loop3: detected capacity change from 0 to 512 [ 91.488192][ T6048] loop1: detected capacity change from 0 to 164 [ 91.496464][ T6048] iso9660: Unknown parameter '' [ 91.534141][ T6048] loop1: detected capacity change from 0 to 512 [ 91.542395][ T6048] EXT4-fs: Ignoring removed oldalloc option [ 91.556726][ T6048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.574577][ T6048] EXT4-fs (loop1): 1 truncate cleaned up [ 91.595240][ T6049] netlink: 56 bytes leftover after parsing attributes in process `syz.3.961'. [ 91.651777][ T6055] IPv4: Oversized IP packet from 172.20.20.24 [ 91.658140][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 91.664298][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 91.672757][ T6057] SELinux: failed to load policy [ 91.720549][ T6059] syz.2.968[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.720707][ T6059] syz.2.968[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.732221][ T6059] syz.2.968[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.752735][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 91.773421][ T6062] bridge_slave_1: left allmulticast mode [ 91.779176][ T6062] bridge_slave_1: left promiscuous mode [ 91.785050][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.794084][ T6062] bridge_slave_0: left promiscuous mode [ 91.799874][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.807406][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 91.842806][ T6072] loop2: detected capacity change from 0 to 512 [ 91.980571][ T6081] loop1: detected capacity change from 0 to 764 [ 91.987853][ T6081] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 92.048175][ T6083] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 92.056464][ T6083] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 92.065534][ T6083] rock: directory entry would overflow storage [ 92.072038][ T6083] rock: sig=0x4f50, size=4, remaining=3 [ 92.077630][ T6083] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 92.085685][ T6083] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 92.366620][ T6087] loop3: detected capacity change from 0 to 2048 [ 92.760302][ T6093] loop2: detected capacity change from 0 to 1024 [ 92.767205][ T6093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.774269][ T6093] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.790450][ T6093] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 92.845652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 92.853393][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 92.874503][ T6101] loop2: detected capacity change from 0 to 164 [ 92.881012][ T6101] iso9660: Unknown parameter '' [ 92.918436][ T6105] loop4: detected capacity change from 0 to 512 [ 92.923831][ T6101] loop2: detected capacity change from 0 to 512 [ 92.934773][ T6101] EXT4-fs: Ignoring removed oldalloc option [ 92.945494][ T6101] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.970952][ T6101] EXT4-fs (loop2): 1 truncate cleaned up [ 93.193996][ T6115] loop2: detected capacity change from 0 to 512 [ 93.345690][ T6116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.988'. [ 93.885658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.141776][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 94.209662][ T6138] random: crng reseeded on system resumption [ 94.277056][ T6142] loop3: detected capacity change from 0 to 2048 [ 94.291944][ T6138] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.355496][ T6144] loop3: detected capacity change from 0 to 1024 [ 94.362348][ T6144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.370403][ T6144] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 94.391578][ T6144] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 94.432185][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1001'. [ 94.451239][ T6149] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 94.459072][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 94.476088][ T6152] SELinux: failed to load policy [ 94.576790][ T6164] loop3: detected capacity change from 0 to 164 [ 94.582046][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 94.583376][ T6164] iso9660: Unknown parameter '' [ 94.636765][ T6164] loop3: detected capacity change from 0 to 512 [ 94.644842][ T6164] EXT4-fs: Ignoring removed oldalloc option [ 94.668900][ T6164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.702786][ T6164] EXT4-fs (loop3): 1 truncate cleaned up [ 94.711507][ T6179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1014'. [ 94.733560][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'. [ 94.742615][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.750460][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.757571][ T6179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.771902][ T6181] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 94.779718][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 94.782390][ T6177] random: crng reseeded on system resumption [ 94.884984][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 94.902962][ T6191] SELinux: failed to load policy [ 94.921563][ T6192] bond1: entered promiscuous mode [ 94.926698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.942339][ T6194] loop3: detected capacity change from 0 to 164 [ 94.971071][ T6194] iso9660: Unknown parameter '' [ 95.000966][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 95.000980][ T29] audit: type=1326 audit(1732408504.707:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a35c57e7 code=0x7ffc0000 [ 95.075039][ T29] audit: type=1326 audit(1732408504.737:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2a356a1a9 code=0x7ffc0000 [ 95.098532][ T29] audit: type=1326 audit(1732408504.737:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a35ce819 code=0x7ffc0000 [ 95.122479][ T29] audit: type=1326 audit(1732408504.737:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a35c57e7 code=0x7ffc0000 [ 95.146568][ T29] audit: type=1326 audit(1732408504.737:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2a356a1a9 code=0x7ffc0000 [ 95.154109][ T6194] loop3: detected capacity change from 0 to 512 [ 95.170224][ T29] audit: type=1326 audit(1732408504.737:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a35c57e7 code=0x7ffc0000 [ 95.170266][ T29] audit: type=1326 audit(1732408504.737:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2a356a1a9 code=0x7ffc0000 [ 95.170300][ T29] audit: type=1326 audit(1732408504.737:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a35c57e7 code=0x7ffc0000 [ 95.170383][ T29] audit: type=1326 audit(1732408504.737:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2a356a1a9 code=0x7ffc0000 [ 95.170413][ T29] audit: type=1326 audit(1732408504.737:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.5.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2a35c57e7 code=0x7ffc0000 [ 95.207320][ T6205] loop5: detected capacity change from 0 to 764 [ 95.237772][ T6194] EXT4-fs: Ignoring removed oldalloc option [ 95.283112][ T6194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.304075][ T6205] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.333783][ T6194] EXT4-fs (loop3): 1 truncate cleaned up [ 95.339629][ T6205] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.349264][ T6205] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.359690][ T6205] rock: directory entry would overflow storage [ 95.365934][ T6205] rock: sig=0x4f50, size=4, remaining=3 [ 95.371534][ T6205] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 95.441321][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 95.540580][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'. [ 95.622881][ T6222] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 95.634791][ T6225] loop1: detected capacity change from 0 to 512 [ 95.687944][ T6227] SELinux: failed to load policy [ 95.755277][ T6235] loop1: detected capacity change from 0 to 764 [ 95.763661][ T6235] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.773285][ T6235] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.789324][ T6235] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 95.808712][ T6235] rock: directory entry would overflow storage [ 95.814982][ T6235] rock: sig=0x4f50, size=4, remaining=3 [ 95.820588][ T6235] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 95.853344][ T6243] loop4: detected capacity change from 0 to 2048 [ 95.860273][ T6245] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 95.945366][ T6251] FAULT_INJECTION: forcing a failure. [ 95.945366][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 95.958131][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.4.1041 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 95.965680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 95.968461][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.985434][ T6251] Call Trace: [ 95.988728][ T6251] [ 95.991672][ T6251] dump_stack_lvl+0xf2/0x150 [ 95.996407][ T6251] dump_stack+0x15/0x20 [ 96.000638][ T6251] should_fail_ex+0x223/0x230 [ 96.005434][ T6251] ? mas_alloc_nodes+0x1e3/0x490 [ 96.010412][ T6251] should_failslab+0x8f/0xb0 [ 96.015060][ T6251] kmem_cache_alloc_noprof+0x4c/0x290 [ 96.020588][ T6251] mas_alloc_nodes+0x1e3/0x490 [ 96.025495][ T6251] mas_preallocate+0x44a/0x650 [ 96.030308][ T6251] __mmap_region+0x809/0x13f0 [ 96.035097][ T6251] mmap_region+0x164/0x1e0 [ 96.039582][ T6251] do_mmap+0x718/0xb60 [ 96.043669][ T6251] vm_mmap_pgoff+0x133/0x290 [ 96.048400][ T6251] ksys_mmap_pgoff+0xd0/0x330 [ 96.053097][ T6251] ? fpregs_assert_state_consistent+0x83/0xa0 [ 96.059341][ T6251] x64_sys_call+0x1940/0x2dc0 [ 96.064039][ T6251] do_syscall_64+0xc9/0x1c0 [ 96.068640][ T6251] ? clear_bhb_loop+0x55/0xb0 [ 96.073479][ T6251] ? clear_bhb_loop+0x55/0xb0 [ 96.078190][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.084210][ T6251] RIP: 0033:0x7fbdd1cce853 [ 96.088638][ T6251] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 96.108432][ T6251] RSP: 002b:00007fbdd0346e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 96.116859][ T6251] RAX: ffffffffffffffda RBX: 00000000000004e8 RCX: 00007fbdd1cce853 [ 96.124845][ T6251] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 96.132914][ T6251] RBP: 0000000020000682 R08: 00000000ffffffff R09: 0000000000000000 [ 96.141747][ T6251] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 96.149729][ T6251] R13: 00007fbdd0346ef0 R14: 00007fbdd0346eb0 R15: 0000000020000c80 [ 96.157715][ T6251] [ 96.171102][ T6255] loop1: detected capacity change from 0 to 512 [ 96.208351][ T6254] loop2: detected capacity change from 0 to 4096 [ 96.258988][ T6266] loop3: detected capacity change from 0 to 764 [ 96.294102][ T6266] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.398121][ T6279] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.407421][ T6279] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.416374][ T6279] rock: directory entry would overflow storage [ 96.422845][ T6279] rock: sig=0x4f50, size=4, remaining=3 [ 96.428621][ T6279] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 96.436674][ T6279] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 96.495814][ T6285] ================================================================== [ 96.503908][ T6285] BUG: KCSAN: assert: race in srcu_gp_start_if_needed+0x808/0x9f0 [ 96.511804][ T6285] [ 96.514117][ T6285] race at unknown origin, with assert no writes to 0xffffffff8676ffc8 of 8 bytes by task 6285 on cpu 0: [ 96.525212][ T6285] srcu_gp_start_if_needed+0x808/0x9f0 [ 96.530706][ T6285] __synchronize_srcu+0x114/0x150 [ 96.535726][ T6285] synchronize_srcu+0x1ae/0x1d0 [ 96.540576][ T6285] uprobe_unregister_sync+0x1a/0x20 [ 96.545775][ T6285] probe_event_disable+0x1f5/0x240 [ 96.550893][ T6285] trace_uprobe_register+0xbb/0x3c0 [ 96.556113][ T6285] perf_trace_event_unreg+0x6c/0x1a0 [ 96.561506][ T6285] perf_uprobe_destroy+0x6a/0xf0 [ 96.566446][ T6285] _free_event+0x7ca/0xa10 [ 96.570852][ T6285] perf_event_release_kernel+0x61a/0x670 [ 96.576488][ T6285] perf_release+0x1f/0x30 [ 96.580844][ T6285] __fput+0x17a/0x6d0 [ 96.584830][ T6285] ____fput+0x1c/0x30 [ 96.588849][ T6285] task_work_run+0x13a/0x1a0 [ 96.593449][ T6285] syscall_exit_to_user_mode+0xa8/0x120 [ 96.598999][ T6285] do_syscall_64+0xd6/0x1c0 [ 96.603514][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.609422][ T6285] [ 96.611737][ T6285] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 96.618850][ T6285] [ 96.621164][ T6285] Reported by Kernel Concurrency Sanitizer on: [ 96.627300][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.1.1056 Not tainted 6.12.0-syzkaller-08756-g42d9e8b7ccdd #0 [ 96.637637][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.647685][ T6285] ================================================================== [ 97.005656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 98.045640][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.095632][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 100.125958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.165649][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.205664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.245658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.285665][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.325662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 106.365673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available