last executing test programs: 4.156869223s ago: executing program 3 (id=593): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000003b2e08c2b52e0ab8e58f000000000000800000000000001f09002d2dfc15c54cf2de85540d906804bb7225a3700375a84d8ed682c1dc82bd3465dd97bcc163", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'ovf\x00', 0x3f, 0x0, 0x4}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x84, &(0x7f0000000440)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x5, @local, 0x9}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x900}, @in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc93}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000580)={r3, @in6={{0xa, 0x4e22, 0x2, @private1, 0x3}}, [0x7274, 0x7, 0x0, 0x6, 0x6, 0x400, 0x0, 0x10000, 0x8, 0x4, 0x100, 0x1b, 0xffffe00000000000, 0x2, 0x9]}, &(0x7f00000003c0)=0x100) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8931, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) 4.049323062s ago: executing program 3 (id=597): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_open(0x0, 0x800, 0x140, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r5], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c08000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x22000d4, &(0x7f0000000140), 0x1, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = open(&(0x7f0000000600)='.\x00', 0x0, 0x1) getdents(r9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000280)={0x0, @tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x2}}, @phonet={0x23, 0x7f, 0x5, 0x2}, @phonet={0x23, 0x81, 0x5}, 0xff9d, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='gretap0\x00', 0x400, 0x8, 0x9}) r10 = epoll_create1(0x0) listen(r7, 0x2) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100)={0xa000000d}) 3.865864109s ago: executing program 3 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) (fail_nth: 1) getresuid(&(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000000500)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1ff) ppoll(&(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={[0x10]}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000070000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.050532943s ago: executing program 3 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 3.024825025s ago: executing program 3 (id=614): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000980), 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6eaa000000000008611014000000008dfa8cac880095000000031fc38d6814d8b8c2f9c33e2fd2e79900"/51], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x894c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x8200, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r10, 0x0, r3, 0x0, 0x6, 0x0) 2.42307511s ago: executing program 1 (id=629): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[], 0x129) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x58f6ca9bc51d6f95, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000306033f000000ffffffffbfffffff000500010007"], 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x2ec9, 0x0, {0x1, 0x3, 0x5000000, 0x0, 0x1}, 0xbe}) 2.42283438s ago: executing program 1 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.164959193s ago: executing program 0 (id=635): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4c040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000400)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) openat$selinux_status(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'vcan0\x00', 0x400}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.97908804s ago: executing program 0 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) (fail_nth: 5) 1.775866279s ago: executing program 0 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080009000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x840004, 0x4e143, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xc}, 0x1000, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x0, r5, 0xa) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) (async) r7 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r7, 0x7000000) r8 = dup(r7) preadv2(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) (async) preadv2(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="da2b8c72c57b3a0ea36b14fbf2b17cd6da5923d9d4a7e07afdb25d778c0d35a4e427630b08ec65392796a6195316b9f3e2b44d48b7d1f88d70cc0a211f5b79c1a9e2ab965b2b7923cf5b2875b3dedac171f91ba784fce6f8903cb3d68d4d43cb5d28c666796b287e2499fd4286ec0d0b3df43215af6cccb7db232fb2845ded248c89e597239374a8c773433a1c7362b114a8622f93874d69b6dba166571ebb6625d742d574825b8c301c7a347f59a6427b44ff"], 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x7, 0x0, 0x6, 0x3008, r6, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x7, 0x0, 0x1, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = gettid() process_vm_writev(r10, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_writev(r10, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000007f000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00014000000000000000010c00024000000000efffffff0eeb0340000005f50900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4008810}, 0x240408c4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) unshare(0x22020600) (async) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006ccffd61a11bb924e51fdd9508f1004d7c232061b99cd56033ea8634c000a4a51d8d6df3a3adc4c8f0b5a07f94cf7806d20852d5f27d354d032b4ca55dd4c70c712e1b7e970cfd883f5c8f5cda4f40328315dcccb086632f0bed37802feef8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) 1.7718507s ago: executing program 4 (id=644): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x253, &(0x7f0000001cc0)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000048a80000000000e9ffffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 1.76462479s ago: executing program 2 (id=645): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{}, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) 1.66077176s ago: executing program 2 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 1.66000913s ago: executing program 2 (id=647): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x253, &(0x7f0000001cc0)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000048a80000000000e9ffffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) (fail_nth: 2) 1.581913027s ago: executing program 0 (id=648): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000640), 0xd, 0x5f1, &(0x7f0000000680)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJMhK0hDX7EjRsrLYgUaGiNFk0oCW5MjBtjjK5ciP+FEtmy0pULN64MCVHD0sRr5nam9GPu7XenMr9fcumZc+5wzvT26Tn39Jy5AVRWf/pPLWJ/REwmEb3J7HxZe2SF/XPPe/Dnh2fTRxL1+qu/J5Fkefnzk+xrT3ZyV0T8+EMS+9qW1zs1c+3i6MTE+NXseHD60uTg1My1wxcujZ4fPz9+efi54RPHjx0/MXRkNZfRvTTjesGTTt98573ej0fe+Oarv5Khb38ZSeJkvJQ9ceF1bJb+6G98T5LlRT0nNruykrRlPycLX+KkvcQGsSb569cREY9Fb7TFwxevNz56udTGAVuqnkTUgYpKxD9UVD4OyN/bL30fXCtlVAJsh/un5iYAlsd/+9zcYHQ15gZ2P0hi4bROEhGrmplbwZ6IuHtn5Oa5OyM3Y4vm4YBiszci4vGi+E8a8d8XXdHXiP/aovhPxwVnsq9p/ivrrH/pVLH4h+0zF/9dLeM/msT/mwvi/6111t//MPl296L47/5y13ovCgAAAAAAACrq9qmIeLbo7/+1+fU/UbD+pyciTm5C/f1Ljpf//b92bxOqAQrcPxXxQuH631q++revLUv9p7EeoCM5d2Fi/EhE/DciDkXHrvR4qEUdhz/Z90Wzsv5s/V/+SOu/m60FzNpxr33JQoCx0enRjV43EHH/RsQThet/k/n+Pyno/9PfB5OrrGPf07fONCtbOf6BrVL/OuJgYf//8K4VSev7cww2xgOD+ahguSc/+PS7ZvWvN/7dYgI2Lu3/d7eO/75k4f16ptZex9GZ9nqzsvWO/zuT1xq3nOnM8t4fnZ6+OhTRmZxuS3MX5Q+vvc3wKMrjIY+XNP4PPdV6/q9o/N8dEbNL/u/kj8V7inP//7vn12btMf6H8qTxP7am/n/tieFbfd83q391/f+xRl9/KMsx/wdzPs/DtHNxfkE4thcVbXd7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRUIuIPZHUBubTtdrAQERPRPwvdtcmrkxNP3PuyruXx9Kyxuf/1/JP+u2dO07yz//vW3A8vOT4aETsjYjP2robxwNnr0yMlX3xAAAAAAAAAAAAAAAAAAAAsEP0NNn/n/qtrezWAVuuvewGAKUpiP+fymgHsP30/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/gHAAAAAIBHyt4Dt39OImL2+e7GI9WZlXWU2jJgq9XKbgBQGrf4geqy9Aeqy3t8IFmhvKvpSSud2crk2Q2cDAAAAAAAAAAAAACVc3C//f9QVfb/Q3XZ/w/Vle//P1ByO4Dtt8b3+PWN7PYFdq5WsV24/3/FswAAAAAAAAAAAACAzTQ1c+3i6MTE+NXKJV6MiEU5r++Qhm1jol6vX09/CnZKe/7liXwp/E5pTyPRHRFzOflev9WdXt7vJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLF/AgAA//8sQiNW") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 1.572810868s ago: executing program 1 (id=649): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="02ffffff0206010800000000000000000000000005000400000000000900020073797a31000000000c32194e3a001340000000080500050003000000050001000600000016000300686173683a6e65742c63c1afcd62c395339602d50d706f72742c6e657400000044a67ade4aa848cd1e14546e0d7abd356be74793b21d3478048bd75a0908933b0212ef3764d4"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x20c830, &(0x7f00000006c0), 0xfc, 0x560, &(0x7f00000008c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="877010f551dedd5fb110d95e2fb0d26ed6210473171955933cef1d53c1a8a90424e4337b4c3e3ed32bca9fb2f6bbc0ceaddfffb3d494f30da118ca170c02d57e448213de22a2069a676c2fa09f19f55acacae1e2d793ab9f568bc3befa12b042ae215bc659016ea4bac630750686905bf8c15dc0406341ca577611390ae43f296deb3eb4ac9d9ba16c5b73e1feaecf4e0af7d394822860d0e6ead4210c77bbb2ff2b2b39dca300f3509d543532f5e3aff5b4ed3cf018898c613e81e5d3c8a3226caadcb63399bba009b0cf59c2f80dc8821cf756cd4c860f79e4b4"], 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xcdda, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) 1.487267125s ago: executing program 0 (id=650): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000300000002000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYBLOB="48053b9645c3d9227be95b44e0a24d21fe398a5f9c50d4983ed1944e1c76188e8eab0e6221bc349edc6ac578633b6b5f944a1c6f64ebeb5c876170491b579ce7b6eff2cff943be1586a266945298f134a3ee", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close(0xffffffffffffffff) 1.231468979s ago: executing program 2 (id=651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x28000600) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 1.177568083s ago: executing program 1 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x28000600) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0xda2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) getpid() r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 1.174418933s ago: executing program 4 (id=653): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020010000000000500000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x253, &(0x7f0000001cc0)="$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") r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000048a80000000000e9ffffff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r3, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000fce1ff70cbbef971a07623fe9b14000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950094af7304aeb71536c9a6bd6e93000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x199) write$binfmt_script(r7, &(0x7f0000000a00)={'#! ', '', [{0x20, '\xc3\xec\xba\xf6\xcc|\xc7lA\xd8\xbb\v\xb1\xdd\xba\x14\xce\xd5\xbd\xf3\xac]>\aT]\xf1\xc7\x1fn|-FKY\x80\x14!\x92\x19\x18~\xc4a\xf7\x12V\xd6\xe8}b}\x99^v\x98\xddx\xfbb~\x94'}], 0xa, "dd685a596b90f6aa0dea313bb181b1aa192d339237cb9e131d0094eb498c0f94539f1ffb25e9d12905dcdd2346e4961725753dc0eb00fe92bdbe17bf3b733eee36692da22d7800a631496d2ba36d637dbb02225ee904cabffe0cc77447069f339630cc4e82d7ab158ff2d99c1586bcabe5caaaeb486d2410aae2937ae812623f565cd4f9f70dbd51c40ec1c13619863d2bed459fb31a6dad898fcb5779924aceb8d0000000"}, 0xe8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 659.15363ms ago: executing program 4 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0xca4497123b1d3f23, 0x5, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r4, 0x18, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) 643.380721ms ago: executing program 0 (id=655): socket$packet(0x11, 0x2, 0x300) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x40880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) 627.159984ms ago: executing program 4 (id=656): r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x1016, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x1, 0x4, [0x9f3, 0x5a0, 0x816, 0x94]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) fchown(r2, r3, r7) 354.520748ms ago: executing program 4 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0) (fail_nth: 8) 354.190668ms ago: executing program 1 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) 245.492228ms ago: executing program 1 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 218.147071ms ago: executing program 4 (id=660): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x20000004, 0x6, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") socketpair$tipc(0x1e, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000880), 0x2, 0x9}}, 0x20) r3 = open(&(0x7f0000000300)='./file0\x00', 0x14927e, 0x160) syz_clone(0x840000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000340)='./file0\x00', 0x64842, 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) io_uring_setup(0x63e, &(0x7f0000000000)={0x0, 0x80100000, 0x0, 0x46, 0x2}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4100, 0x1004}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000002500)={0xa, &(0x7f0000002480)=[{0x10, 0x5, 0x7, 0x9}, {0x1, 0x81, 0x7, 0x6}, {0x8, 0x83, 0x80, 0x1}, {0x3, 0x1, 0x6, 0x800}, {0x5, 0x8, 0xd, 0x1a}, {0x9, 0x4, 0x3, 0x4}, {0x200, 0x3, 0x3, 0x7f}, {0x2, 0xf3, 0xf, 0x3}, {0x8000, 0x9, 0x7, 0x7}, {0x200, 0x7f, 0x10, 0x9}]}) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) 205.237842ms ago: executing program 2 (id=661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20004000) write$selinux_access(0xffffffffffffffff, 0x0, 0x44) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@filename='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 147.011857ms ago: executing program 2 (id=662): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000079da5048b84f2f316a56fd5758adc8a4b02345550dd25999ff0df0f2f00293f140a21ac467f71d270eb36a7908624a1c1bc5644dc37ab23b9c9e3e2f55ac5ea453403f10c7cc5e60382ab0cf133dc55341cb9cb2a90a150e551392178cca04b47f7614fc53687c17beac4ef1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x5}]}]}}}]}, 0x68}}, 0x4008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x7fffffff, 0xd4a6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000054b7b4d295df917742ef0c584089afe5260bf013aa058be7553aa6f4587b6e5803e3e6a99e935e9c7b8a5f92697b559848f0bc", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000001000000000000000001010"}}}]}, 0x48}}, 0x0) r13 = socket$inet6_sctp(0xa, 0x3, 0x84) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r14, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r14, &(0x7f0000003500)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3f}, 0x1c, &(0x7f00000009c0)}}], 0x1, 0x400c1) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r15, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000000240)={r16, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x411c, 0x1, 0xce9, r16}, 0x10) setxattr$incfs_metadata(&(0x7f0000000640)='./file0/../file0/file0\x00', &(0x7f0000000680), &(0x7f00000006c0)="4d3862c88c306e597a67a492e0f0622433df56a242438ec0662a2c0003d8ddbd55649adc290b1e9094feca8e346c8ff71c9646c0c8f66a9fae464e635559", 0x3e, 0x0) 0s ago: executing program 3 (id=663): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="02ffffff0206010800000000000000000000000005000400000000000900020073797a31000000000c32194e3a001340000000080500050003000000050001000600000016000300686173683a6e65742c63c1afcd62c395339602d50d706f72742c6e657400000044a67ade4aa848cd1e14546e0d7abd356be74793b21d3478048bd75a0908933b0212ef3764d4"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x20c830, &(0x7f00000006c0), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="877010f551dedd5fb110d95e2fb0d26ed6210473171955933cef1d53c1a8a90424e4337b4c3e3ed32bca9fb2f6bbc0ceaddfffb3d494f30da118ca170c02d57e448213de22a2069a676c2fa09f19f55acacae1e2d793ab9f568bc3befa12b042ae215bc659016ea4bac630750686905bf8c15dc0406341ca577611390ae43f296deb3eb4ac9d9ba16c5b73e1feaecf4e0af7d394822860d0e6ead4210c77bbb2ff2b2b39dca300f3509d543532f5e3aff5b4ed3cf018898c613e81e5d3c8a3226caadcb63399bba009b0cf59c2f80dc8821cf756cd4c860f79e4b4"], 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xcdda, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ed [ 40.116661][ T3896] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.124965][ T3896] EXT4-fs (loop2): too many log groups per flexible block group [ 40.132772][ T3896] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 40.139731][ T3896] EXT4-fs (loop2): mount failed [ 40.141058][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.263628][ T3945] loop3: detected capacity change from 0 to 512 [ 40.428473][ T3961] loop3: detected capacity change from 0 to 8192 [ 40.438458][ T3961] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.476427][ T3961] syzkaller0: entered promiscuous mode [ 40.482000][ T3961] syzkaller0: entered allmulticast mode [ 40.567703][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.594214][ T3982] netlink: 'syz.4.194': attribute type 4 has an invalid length. [ 40.602032][ T3982] netlink: 208132 bytes leftover after parsing attributes in process `syz.4.194'. [ 40.659788][ T3990] netlink: 'syz.4.197': attribute type 4 has an invalid length. [ 40.667591][ T3990] netlink: 208132 bytes leftover after parsing attributes in process `syz.4.197'. [ 40.728896][ T3998] loop2: detected capacity change from 0 to 512 [ 40.790481][ T4007] netlink: 'syz.2.205': attribute type 4 has an invalid length. [ 40.798609][ T4007] netlink: 208132 bytes leftover after parsing attributes in process `syz.2.205'. [ 40.840700][ T4014] FAULT_INJECTION: forcing a failure. [ 40.840700][ T4014] name failslab, interval 1, probability 0, space 0, times 0 [ 40.853555][ T4014] CPU: 0 UID: 0 PID: 4014 Comm: syz.3.207 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 40.864171][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.874344][ T4014] Call Trace: [ 40.877635][ T4014] [ 40.880584][ T4014] dump_stack_lvl+0xf2/0x150 [ 40.885191][ T4014] dump_stack+0x15/0x20 [ 40.889468][ T4014] should_fail_ex+0x223/0x230 [ 40.894285][ T4014] ? __kvmalloc_node_noprof+0x72/0x170 [ 40.899894][ T4014] should_failslab+0x8f/0xb0 [ 40.904501][ T4014] __kmalloc_node_noprof+0xa8/0x380 [ 40.909724][ T4014] __kvmalloc_node_noprof+0x72/0x170 [ 40.915173][ T4014] seq_read_iter+0x144/0x930 [ 40.919849][ T4014] seq_read+0x1ed/0x230 [ 40.924389][ T4014] ? kstrtouint+0x77/0xc0 [ 40.928748][ T4014] ? __pfx_seq_read+0x10/0x10 [ 40.933435][ T4014] proc_reg_read+0x13f/0x1d0 [ 40.938049][ T4014] ? __pfx_proc_reg_read+0x10/0x10 [ 40.943259][ T4014] vfs_read+0x195/0x720 [ 40.947495][ T4014] ? __rcu_read_unlock+0x4e/0x70 [ 40.952457][ T4014] ? __fget_files+0x1d4/0x210 [ 40.957274][ T4014] ksys_read+0xeb/0x1b0 [ 40.961567][ T4014] __x64_sys_read+0x42/0x50 [ 40.966181][ T4014] x64_sys_call+0x27d3/0x2d60 [ 40.970930][ T4014] do_syscall_64+0xc9/0x1c0 [ 40.975474][ T4014] ? clear_bhb_loop+0x55/0xb0 [ 40.980175][ T4014] ? clear_bhb_loop+0x55/0xb0 [ 40.985008][ T4014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.991139][ T4014] RIP: 0033:0x7feeff9cdff9 [ 40.995574][ T4014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.015362][ T4014] RSP: 002b:00007feefe647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.023834][ T4014] RAX: ffffffffffffffda RBX: 00007feeffb85f80 RCX: 00007feeff9cdff9 [ 41.031889][ T4014] RDX: 000000000000100e RSI: 00000000200030c0 RDI: 0000000000000007 [ 41.040030][ T4014] RBP: 00007feefe647090 R08: 0000000000000000 R09: 0000000000000000 [ 41.048166][ T4014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.056273][ T4014] R13: 0000000000000000 R14: 00007feeffb85f80 R15: 00007ffd04e8d158 [ 41.064291][ T4014] [ 41.119770][ T4022] loop3: detected capacity change from 0 to 512 [ 41.148684][ T4026] process 'syz.2.214' launched '/dev/fd/14' with NULL argv: empty string added [ 41.160712][ T4028] Driver unsupported XDP return value 0 on prog (id 188) dev N/A, expect packet loss! [ 41.178860][ T4028] 9pnet_fd: Insufficient options for proto=fd [ 41.321786][ T4041] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 41.329512][ T4041] netlink: 208132 bytes leftover after parsing attributes in process `syz.0.220'. [ 41.447387][ T4047] loop1: detected capacity change from 0 to 2048 [ 41.506972][ T4061] loop0: detected capacity change from 0 to 512 [ 41.525550][ T4067] tmpfs: Bad value for 'mpol' [ 41.531712][ T4047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.610725][ T4077] netlink: 'syz.2.235': attribute type 4 has an invalid length. [ 41.610748][ T4077] netlink: 208132 bytes leftover after parsing attributes in process `syz.2.235'. [ 41.616674][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.616897][ T4073] loop0: detected capacity change from 0 to 2048 [ 41.669128][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.696148][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.776344][ T4100] 9pnet_fd: Insufficient options for proto=fd [ 41.779173][ T4101] loop1: detected capacity change from 0 to 512 [ 41.849011][ T4109] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.887920][ T4111] loop0: detected capacity change from 0 to 1024 [ 41.975517][ T4118] FAULT_INJECTION: forcing a failure. [ 41.975517][ T4118] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.988720][ T4118] CPU: 0 UID: 0 PID: 4118 Comm: syz.4.248 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 41.999421][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.009564][ T4118] Call Trace: [ 42.012838][ T4118] [ 42.015781][ T4118] dump_stack_lvl+0xf2/0x150 [ 42.020439][ T4118] dump_stack+0x15/0x20 [ 42.024637][ T4118] should_fail_ex+0x223/0x230 [ 42.029364][ T4118] should_fail+0xb/0x10 [ 42.033654][ T4118] should_fail_usercopy+0x1a/0x20 [ 42.038697][ T4118] _copy_to_user+0x1e/0xa0 [ 42.043219][ T4118] simple_read_from_buffer+0xa0/0x110 [ 42.048602][ T4118] proc_fail_nth_read+0xf9/0x140 [ 42.053563][ T4118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.059127][ T4118] vfs_read+0x195/0x720 [ 42.063319][ T4118] ? __rcu_read_unlock+0x4e/0x70 [ 42.068288][ T4118] ? __fget_files+0x1d4/0x210 [ 42.073117][ T4118] ksys_read+0xeb/0x1b0 [ 42.077309][ T4118] __x64_sys_read+0x42/0x50 [ 42.081827][ T4118] x64_sys_call+0x27d3/0x2d60 [ 42.086582][ T4118] do_syscall_64+0xc9/0x1c0 [ 42.091100][ T4118] ? clear_bhb_loop+0x55/0xb0 [ 42.095809][ T4118] ? clear_bhb_loop+0x55/0xb0 [ 42.100689][ T4118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.106651][ T4118] RIP: 0033:0x7fe68d07ca3c [ 42.111159][ T4118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 42.130791][ T4118] RSP: 002b:00007fe68bcd0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.139234][ T4118] RAX: ffffffffffffffda RBX: 00007fe68d236058 RCX: 00007fe68d07ca3c [ 42.147223][ T4118] RDX: 000000000000000f RSI: 00007fe68bcd00a0 RDI: 0000000000000009 [ 42.155252][ T4118] RBP: 00007fe68bcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 42.163245][ T4118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.171276][ T4118] R13: 0000000000000000 R14: 00007fe68d236058 R15: 00007ffd0b187818 [ 42.179448][ T4118] [ 42.215695][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 42.215709][ T29] audit: type=1400 audit(1728451543.146:1024): avc: denied { create } for pid=4120 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.241569][ T29] audit: type=1400 audit(1728451543.146:1025): avc: denied { ioctl } for pid=4120 comm="syz.0.249" path="socket:[6330]" dev="sockfs" ino=6330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.266032][ T29] audit: type=1400 audit(1728451543.146:1026): avc: denied { bind } for pid=4120 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.301497][ T4128] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.312541][ T29] audit: type=1400 audit(1728451543.246:1027): avc: denied { create } for pid=4126 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.334202][ T29] audit: type=1400 audit(1728451543.246:1028): avc: denied { write } for pid=4126 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.354781][ T29] audit: type=1400 audit(1728451543.246:1029): avc: denied { nlmsg_read } for pid=4126 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.375658][ T29] audit: type=1400 audit(1728451543.246:1030): avc: denied { read } for pid=4126 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.400888][ T4136] loop4: detected capacity change from 0 to 512 [ 42.408683][ T4136] EXT4-fs: Ignoring removed bh option [ 42.418432][ T4136] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.426826][ T29] audit: type=1326 audit(1728451543.356:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff9cdff9 code=0x7ffc0000 [ 42.450331][ T29] audit: type=1326 audit(1728451543.356:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeff9cdff9 code=0x7ffc0000 [ 42.473793][ T29] audit: type=1326 audit(1728451543.356:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeff9cdff9 code=0x7ffc0000 [ 42.497405][ T4139] loop1: detected capacity change from 0 to 512 [ 42.515558][ T4136] EXT4-fs (loop4): 1 truncate cleaned up [ 42.517309][ T4141] loop3: detected capacity change from 0 to 512 [ 42.527156][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.573268][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.598940][ T4141] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.615675][ T4141] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.626378][ T4141] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.648089][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 42.649713][ T4141] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 42.673096][ T4141] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.257: bg 0: block 40: padding at end of block bitmap is not set [ 42.718760][ T4141] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.750860][ T4162] loop4: detected capacity change from 0 to 1024 [ 42.779408][ T4141] EXT4-fs (loop3): 1 truncate cleaned up [ 42.785578][ T4141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.825465][ T4141] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.257: corrupted xattr block 31: invalid header [ 42.853486][ T4141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 42.878275][ T4173] loop2: detected capacity change from 0 to 512 [ 42.886372][ T4141] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.257: corrupted xattr block 31: invalid header [ 42.908586][ T4174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 42.910608][ T4173] EXT4-fs: Ignoring removed bh option [ 42.923619][ T4173] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.932979][ T4141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 42.935626][ T4173] EXT4-fs (loop2): 1 truncate cleaned up [ 42.948017][ T4173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.960906][ T4141] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.257: bad symlink. [ 42.994106][ T4141] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.257: corrupted xattr block 31: invalid header [ 43.017240][ T4141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 43.027196][ T4141] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.257: bad symlink. [ 43.087809][ T4176] loop0: detected capacity change from 0 to 512 [ 43.094864][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.105734][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.116237][ T4176] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.271: casefold flag without casefold feature [ 43.134892][ T4176] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.271: couldn't read orphan inode 15 (err -117) [ 43.137534][ T4184] FAULT_INJECTION: forcing a failure. [ 43.137534][ T4184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.159938][ T4184] CPU: 1 UID: 0 PID: 4184 Comm: syz.1.275 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 43.170567][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.171886][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.180911][ T4184] Call Trace: [ 43.196721][ T4184] [ 43.199714][ T4184] dump_stack_lvl+0xf2/0x150 [ 43.204331][ T4184] dump_stack+0x15/0x20 [ 43.208500][ T4184] should_fail_ex+0x223/0x230 [ 43.213217][ T4184] should_fail+0xb/0x10 [ 43.217399][ T4184] should_fail_usercopy+0x1a/0x20 [ 43.222594][ T4184] _copy_from_iter+0xd3/0xd20 [ 43.227609][ T4184] ? kmalloc_reserve+0x16e/0x190 [ 43.232879][ T4184] ? __build_skb_around+0x196/0x1f0 [ 43.238222][ T4184] ? __alloc_skb+0x21f/0x310 [ 43.242961][ T4184] ? __virt_addr_valid+0x1ed/0x250 [ 43.248325][ T4184] ? __check_object_size+0x364/0x520 [ 43.253641][ T4184] netlink_sendmsg+0x460/0x6e0 [ 43.258612][ T4184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.264110][ T4184] __sock_sendmsg+0x140/0x180 [ 43.269082][ T4184] ____sys_sendmsg+0x312/0x410 [ 43.273958][ T4184] __sys_sendmsg+0x1d9/0x270 [ 43.278644][ T4184] __x64_sys_sendmsg+0x46/0x50 [ 43.283495][ T4184] x64_sys_call+0x2689/0x2d60 [ 43.288266][ T4184] do_syscall_64+0xc9/0x1c0 [ 43.292784][ T4184] ? clear_bhb_loop+0x55/0xb0 [ 43.297657][ T4184] ? clear_bhb_loop+0x55/0xb0 [ 43.302482][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.308396][ T4184] RIP: 0033:0x7fb28abddff9 [ 43.312917][ T4184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.332713][ T4184] RSP: 002b:00007fb289851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.341157][ T4184] RAX: ffffffffffffffda RBX: 00007fb28ad95f80 RCX: 00007fb28abddff9 [ 43.349134][ T4184] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 43.357132][ T4184] RBP: 00007fb289851090 R08: 0000000000000000 R09: 0000000000000000 [ 43.365112][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.373094][ T4184] R13: 0000000000000000 R14: 00007fb28ad95f80 R15: 00007ffe2a9fb118 [ 43.381087][ T4184] [ 43.403754][ T4176] mmap: syz.0.271 (4176) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.528949][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.566730][ T4207] netlink: 148 bytes leftover after parsing attributes in process `syz.2.282'. [ 43.581934][ T4209] loop0: detected capacity change from 0 to 512 [ 43.612131][ T4209] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 43.630096][ T4209] EXT4-fs (loop0): 1 truncate cleaned up [ 43.642145][ T4214] loop3: detected capacity change from 0 to 512 [ 43.649124][ T4209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.693588][ T4226] loop4: detected capacity change from 0 to 512 [ 43.702628][ T4228] loop2: detected capacity change from 0 to 512 [ 43.703991][ T4226] EXT4-fs: Ignoring removed bh option [ 43.709744][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.717080][ T4226] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 43.735601][ T4214] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.752227][ T4226] EXT4-fs (loop4): 1 truncate cleaned up [ 43.762315][ T4226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.766890][ T4228] loop2: detected capacity change from 0 to 512 [ 43.781274][ T4228] EXT4-fs: inline encryption not supported [ 43.789735][ T4228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.809558][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.819198][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.819256][ T4228] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.292: bad orphan inode 2 [ 43.830354][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.843738][ T4228] EXT4-fs (loop2): Remounting filesystem read-only [ 43.860005][ T4228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.874559][ T4228] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 43.897503][ T4233] loop0: detected capacity change from 0 to 128 [ 43.904087][ T4233] msdos: Unknown parameter '017777777777777777777770xffffffffffffffff' [ 43.915114][ T4228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.946190][ T4237] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 43.957623][ T4228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 44.090347][ T4256] netlink: 'syz.3.301': attribute type 4 has an invalid length. [ 44.095012][ T4253] loop4: detected capacity change from 0 to 1024 [ 44.098183][ T4256] netlink: 208132 bytes leftover after parsing attributes in process `syz.3.301'. [ 44.118887][ T4249] netlink: 148 bytes leftover after parsing attributes in process `syz.2.299'. [ 44.188127][ T4266] loop3: detected capacity change from 0 to 128 [ 44.201226][ T4266] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.218439][ T4266] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.298818][ T4269] loop2: detected capacity change from 0 to 512 [ 44.310087][ T4269] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 44.320936][ T4269] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 44.331086][ T4269] EXT4-fs (loop2): group descriptors corrupted! [ 44.360690][ T4277] loop4: detected capacity change from 0 to 512 [ 44.365848][ T4275] loop2: detected capacity change from 0 to 256 [ 44.367498][ T4277] EXT4-fs: Ignoring removed bh option [ 44.388031][ T4277] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.413327][ T4277] EXT4-fs (loop4): 1 truncate cleaned up [ 44.431976][ T3270] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.449545][ T4277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.548585][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.617131][ T4295] FAULT_INJECTION: forcing a failure. [ 44.617131][ T4295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.630344][ T4295] CPU: 0 UID: 0 PID: 4295 Comm: syz.2.306 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 44.641037][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.651214][ T4295] Call Trace: [ 44.654563][ T4295] [ 44.657610][ T4295] dump_stack_lvl+0xf2/0x150 [ 44.662359][ T4295] dump_stack+0x15/0x20 [ 44.666563][ T4295] should_fail_ex+0x223/0x230 [ 44.671288][ T4295] should_fail+0xb/0x10 [ 44.675483][ T4295] should_fail_usercopy+0x1a/0x20 [ 44.680661][ T4295] strncpy_from_user+0x25/0x200 [ 44.685548][ T4295] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 44.691210][ T4295] getname_flags+0xb0/0x3b0 [ 44.695772][ T4295] getname+0x17/0x20 [ 44.699684][ T4295] do_sys_openat2+0x67/0x120 [ 44.704400][ T4295] __x64_sys_open+0xe6/0x110 [ 44.709060][ T4295] x64_sys_call+0x1321/0x2d60 [ 44.713830][ T4295] do_syscall_64+0xc9/0x1c0 [ 44.718361][ T4295] ? clear_bhb_loop+0x55/0xb0 [ 44.723090][ T4295] ? clear_bhb_loop+0x55/0xb0 [ 44.727973][ T4295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.733993][ T4295] RIP: 0033:0x7fdd12aadff9 [ 44.738459][ T4295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.758122][ T4295] RSP: 002b:00007fdd11700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 44.766696][ T4295] RAX: ffffffffffffffda RBX: 00007fdd12c66058 RCX: 00007fdd12aadff9 [ 44.774673][ T4295] RDX: 000000000000008f RSI: 0000000000064842 RDI: 0000000020001780 [ 44.782754][ T4295] RBP: 00007fdd11700090 R08: 0000000000000000 R09: 0000000000000000 [ 44.790836][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.798816][ T4295] R13: 0000000000000000 R14: 00007fdd12c66058 R15: 00007ffd1255f1d8 [ 44.806804][ T4295] [ 46.136202][ T4309] FAULT_INJECTION: forcing a failure. [ 46.136202][ T4309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.149331][ T4309] CPU: 1 UID: 0 PID: 4309 Comm: syz.4.309 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 46.160008][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.170080][ T4309] Call Trace: [ 46.173381][ T4309] [ 46.176420][ T4309] dump_stack_lvl+0xf2/0x150 [ 46.181041][ T4309] dump_stack+0x15/0x20 [ 46.185247][ T4309] should_fail_ex+0x223/0x230 [ 46.189956][ T4309] should_fail+0xb/0x10 [ 46.194192][ T4309] should_fail_usercopy+0x1a/0x20 [ 46.199273][ T4309] _copy_to_user+0x1e/0xa0 [ 46.203700][ T4309] simple_read_from_buffer+0xa0/0x110 [ 46.209242][ T4309] proc_fail_nth_read+0xf9/0x140 [ 46.214201][ T4309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 46.219772][ T4309] vfs_read+0x195/0x720 [ 46.223960][ T4309] ? kcsan_setup_watchpoint+0x404/0x410 [ 46.229650][ T4309] ? ksys_read+0xb8/0x1b0 [ 46.234076][ T4309] ksys_read+0xeb/0x1b0 [ 46.238282][ T4309] __x64_sys_read+0x42/0x50 [ 46.242869][ T4309] x64_sys_call+0x27d3/0x2d60 [ 46.247663][ T4309] do_syscall_64+0xc9/0x1c0 [ 46.252221][ T4309] ? clear_bhb_loop+0x55/0xb0 [ 46.257002][ T4309] ? clear_bhb_loop+0x55/0xb0 [ 46.261781][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.267710][ T4309] RIP: 0033:0x7fe68d07ca3c [ 46.272143][ T4309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 46.291869][ T4309] RSP: 002b:00007fe68bcaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.300308][ T4309] RAX: ffffffffffffffda RBX: 00007fe68d236130 RCX: 00007fe68d07ca3c [ 46.308359][ T4309] RDX: 000000000000000f RSI: 00007fe68bcaf0a0 RDI: 0000000000000008 [ 46.316342][ T4309] RBP: 00007fe68bcaf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.324398][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.332390][ T4309] R13: 0000000000000000 R14: 00007fe68d236130 R15: 00007ffd0b187818 [ 46.340539][ T4309] [ 46.581259][ T4315] loop4: detected capacity change from 0 to 1024 [ 46.590529][ T4312] pimreg: entered allmulticast mode [ 46.715821][ T4323] ALSA: seq fatal error: cannot create timer (-22) [ 46.747396][ T4326] loop3: detected capacity change from 0 to 1024 [ 46.757888][ T4328] FAULT_INJECTION: forcing a failure. [ 46.757888][ T4328] name failslab, interval 1, probability 0, space 0, times 0 [ 46.770941][ T4328] CPU: 1 UID: 0 PID: 4328 Comm: syz.2.320 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 46.781624][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.791764][ T4328] Call Trace: [ 46.795047][ T4328] [ 46.798017][ T4328] dump_stack_lvl+0xf2/0x150 [ 46.802713][ T4328] dump_stack+0x15/0x20 [ 46.806872][ T4328] should_fail_ex+0x223/0x230 [ 46.811571][ T4328] ? resv_map_alloc+0x57/0x190 [ 46.816483][ T4328] should_failslab+0x8f/0xb0 [ 46.821100][ T4328] __kmalloc_cache_noprof+0x4b/0x2a0 [ 46.826498][ T4328] resv_map_alloc+0x57/0x190 [ 46.831186][ T4328] hugetlbfs_get_inode+0x6e/0x2b0 [ 46.836245][ T4328] hugetlb_file_setup+0x188/0x3c0 [ 46.841343][ T4328] ksys_mmap_pgoff+0x172/0x330 [ 46.846179][ T4328] x64_sys_call+0x1884/0x2d60 [ 46.850992][ T4328] do_syscall_64+0xc9/0x1c0 [ 46.855557][ T4328] ? clear_bhb_loop+0x55/0xb0 [ 46.860292][ T4328] ? clear_bhb_loop+0x55/0xb0 [ 46.864989][ T4328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.871037][ T4328] RIP: 0033:0x7fdd12aadff9 [ 46.875461][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.895105][ T4328] RSP: 002b:00007fdd11721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 46.903612][ T4328] RAX: ffffffffffffffda RBX: 00007fdd12c65f80 RCX: 00007fdd12aadff9 [ 46.911612][ T4328] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000000020800000 [ 46.919640][ T4328] RBP: 00007fdd11721090 R08: ffffffffffffffff R09: 0000000000000000 [ 46.927649][ T4328] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001 [ 46.935659][ T4328] R13: 0000000000000000 R14: 00007fdd12c65f80 R15: 00007ffd1255f1d8 [ 46.943896][ T4328] [ 46.976327][ T4326] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.983709][ T4335] loop2: detected capacity change from 0 to 1024 [ 47.006024][ T4326] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 47.014014][ T4326] EXT4-fs (loop3): too many log groups per flexible block group [ 47.021777][ T4326] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 47.030591][ T4326] EXT4-fs (loop3): mount failed [ 47.086945][ T4335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.137074][ T4352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.152968][ T4351] loop3: detected capacity change from 0 to 512 [ 47.182395][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.214862][ T4351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.227550][ T4351] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.247777][ T4351] __quota_error: 411 callbacks suppressed [ 47.247797][ T4351] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 47.258435][ T4371] loop2: detected capacity change from 0 to 512 [ 47.264129][ T4351] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 47.279863][ T4351] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.330: Failed to acquire dquot type 0 [ 47.291636][ T29] audit: type=1400 audit(1728451548.226:1444): avc: denied { write } for pid=4367 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.316711][ T4371] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.336: casefold flag without casefold feature [ 47.332729][ T29] audit: type=1326 audit(1728451548.266:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 47.332965][ T4371] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.336: couldn't read orphan inode 15 (err -117) [ 47.356305][ T29] audit: type=1326 audit(1728451548.266:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 47.391538][ T29] audit: type=1326 audit(1728451548.266:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 47.415021][ T29] audit: type=1326 audit(1728451548.266:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 47.417516][ T4371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.440849][ T29] audit: type=1326 audit(1728451548.266:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 47.474686][ T29] audit: type=1326 audit(1728451548.306:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 47.481238][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 47.512074][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.518637][ T29] audit: type=1400 audit(1728451548.446:1451): avc: denied { read } for pid=4370 comm="syz.2.336" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.603026][ T4380] loop0: detected capacity change from 0 to 512 [ 47.650423][ T4380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.652695][ T4378] loop3: detected capacity change from 0 to 512 [ 47.663290][ T4380] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.671666][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.691054][ T4378] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.693657][ T4380] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.339: Failed to acquire dquot type 0 [ 47.698468][ T4378] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.340: bg 0: block 248: padding at end of block bitmap is not set [ 47.723419][ T4378] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.340: Failed to acquire dquot type 1 [ 47.748587][ T4378] EXT4-fs (loop3): 1 truncate cleaned up [ 47.749030][ T3272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.764482][ T4378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.803187][ T4378] syz.3.340 (4378) used greatest stack depth: 9432 bytes left [ 47.813502][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.814745][ T4386] loop2: detected capacity change from 0 to 2048 [ 47.847743][ T4386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.863269][ T4393] loop3: detected capacity change from 0 to 256 [ 47.870735][ T4386] 9pnet_virtio: no channels available for device [ 47.889898][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.974106][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 48.081075][ T4405] loop2: detected capacity change from 0 to 512 [ 48.089605][ T4407] FAULT_INJECTION: forcing a failure. [ 48.089605][ T4407] name failslab, interval 1, probability 0, space 0, times 0 [ 48.102288][ T4407] CPU: 0 UID: 0 PID: 4407 Comm: syz.3.344 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 48.112978][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.123045][ T4407] Call Trace: [ 48.126363][ T4407] [ 48.129311][ T4407] dump_stack_lvl+0xf2/0x150 [ 48.133923][ T4407] dump_stack+0x15/0x20 [ 48.138233][ T4407] should_fail_ex+0x223/0x230 [ 48.142932][ T4407] ? perf_event_alloc+0x154/0x1750 [ 48.148127][ T4407] should_failslab+0x8f/0xb0 [ 48.152781][ T4407] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 48.158624][ T4407] perf_event_alloc+0x154/0x1750 [ 48.163595][ T4407] __se_sys_perf_event_open+0x840/0x21f0 [ 48.169278][ T4407] ? proc_fail_nth_write+0x12a/0x150 [ 48.174659][ T4407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.180385][ T4407] ? __fget_files+0x1d4/0x210 [ 48.185133][ T4407] __x64_sys_perf_event_open+0x67/0x80 [ 48.190626][ T4407] x64_sys_call+0x18d7/0x2d60 [ 48.195344][ T4407] do_syscall_64+0xc9/0x1c0 [ 48.199933][ T4407] ? clear_bhb_loop+0x55/0xb0 [ 48.204704][ T4407] ? clear_bhb_loop+0x55/0xb0 [ 48.209422][ T4407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.215345][ T4407] RIP: 0033:0x7feeff9cdff9 [ 48.219780][ T4407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.239420][ T4407] RSP: 002b:00007feefe605038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 48.247863][ T4407] RAX: ffffffffffffffda RBX: 00007feeffb86130 RCX: 00007feeff9cdff9 [ 48.255858][ T4407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 48.263892][ T4407] RBP: 00007feefe605090 R08: 0000000000000000 R09: 0000000000000000 [ 48.271900][ T4407] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 48.279957][ T4407] R13: 0000000000000000 R14: 00007feeffb86130 R15: 00007ffd04e8d158 [ 48.288030][ T4407] [ 48.292223][ T4407] program syz.3.344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.363688][ T4405] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.378427][ T4408] loop1: detected capacity change from 0 to 512 [ 48.397513][ T4405] EXT4-fs (loop2): 1 truncate cleaned up [ 48.403687][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.405431][ T4413] loop4: detected capacity change from 0 to 256 [ 48.420353][ T4405] bpf_get_probe_write_proto: 8 callbacks suppressed [ 48.420371][ T4405] syz.2.346[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.429462][ T4405] syz.2.346[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.432660][ T4408] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.445952][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 48.451936][ T4408] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent [ 48.464961][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 48.488743][ T4413] msdos: Unknown parameter '' [ 48.512370][ T4413] loop4: detected capacity change from 0 to 512 [ 48.551774][ T4420] loop1: detected capacity change from 0 to 256 [ 48.562378][ T4420] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.679862][ T4422] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.688438][ T4422] program syz.4.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.781234][ T4430] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.797162][ T4430] loop1: detected capacity change from 0 to 512 [ 48.807766][ T4430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.820444][ T4430] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.850510][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.880668][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.937069][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.969571][ T4449] vhci_hcd: default hub control req: 0503 v0000 i0000 l0 [ 48.991067][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.012218][ T4454] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 49.018825][ T4454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.026599][ T4454] vhci_hcd vhci_hcd.0: Device attached [ 49.035012][ T4454] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 49.049896][ T4456] vhci_hcd: connection closed [ 49.050207][ T166] vhci_hcd: stop threads [ 49.052019][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.054922][ T166] vhci_hcd: release socket [ 49.054933][ T166] vhci_hcd: disconnect device [ 49.099466][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.137539][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 49.183825][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.190990][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.198328][ T4440] bridge_slave_0: entered allmulticast mode [ 49.204899][ T4440] bridge_slave_0: entered promiscuous mode [ 49.212275][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.219751][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.227242][ T4440] bridge_slave_1: entered allmulticast mode [ 49.233999][ T4440] bridge_slave_1: entered promiscuous mode [ 49.302632][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.313664][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.331213][ T4467] sd 0:0:1:0: device reset [ 49.337594][ T36] bridge_slave_1: left allmulticast mode [ 49.343396][ T36] bridge_slave_1: left promiscuous mode [ 49.349246][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.363674][ T36] bridge_slave_0: left allmulticast mode [ 49.369532][ T36] bridge_slave_0: left promiscuous mode [ 49.375317][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.423200][ T4474] loop4: detected capacity change from 0 to 512 [ 49.430374][ T4474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.443162][ T4474] EXT4-fs (loop4): 1 truncate cleaned up [ 49.449416][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.465474][ T4474] syz.4.368[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.465548][ T4474] syz.4.368[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.480547][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 49.502307][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 49.511465][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.522526][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.532965][ T36] bond0 (unregistering): Released all slaves [ 49.553703][ T4440] team0: Port device team_slave_0 added [ 49.572222][ T4440] team0: Port device team_slave_1 added [ 49.602433][ T36] hsr_slave_0: left promiscuous mode [ 49.618642][ T36] hsr_slave_1: left promiscuous mode [ 49.628845][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.636607][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.644920][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.652427][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.662308][ T36] veth1_macvtap: left promiscuous mode [ 49.668138][ T36] veth0_macvtap: left promiscuous mode [ 49.673687][ T36] veth1_vlan: left promiscuous mode [ 49.678960][ T36] veth0_vlan: left promiscuous mode [ 49.803117][ T36] team0 (unregistering): Port device team_slave_1 removed [ 49.813894][ T36] team0 (unregistering): Port device team_slave_0 removed [ 49.853297][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.860310][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.886242][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.897596][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.904641][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.930714][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.942014][ T4488] tipc: Failed to obtain node identity [ 49.947561][ T4488] tipc: Enabling of bearer rejected, failed to enable media [ 49.958617][ T4510] netlink: 256 bytes leftover after parsing attributes in process `syz.2.376'. [ 50.005239][ T4440] hsr_slave_0: entered promiscuous mode [ 50.020566][ T4440] hsr_slave_1: entered promiscuous mode [ 50.033339][ T4440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.043350][ T4440] Cannot create hsr debugfs directory [ 50.055789][ T4521] loop1: detected capacity change from 0 to 512 [ 50.075889][ T4520] loop2: detected capacity change from 0 to 1024 [ 50.131930][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.171596][ T4521] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.239786][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.289061][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.300489][ T4546] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 50.307045][ T4546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.314839][ T4546] vhci_hcd vhci_hcd.0: Device attached [ 50.350121][ T4546] syz.4.381 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.366550][ T4547] vhci_hcd: connection closed [ 50.371695][ T36] vhci_hcd: stop threads [ 50.380767][ T36] vhci_hcd: release socket [ 50.385355][ T36] vhci_hcd: disconnect device [ 50.414169][ T4559] loop1: detected capacity change from 0 to 2048 [ 50.473367][ T4559] loop1: p1 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 50.478110][ T4559] loop1: p1 size 33024 extends beyond EOD, truncated [ 50.578824][ T4559] loop1: p5 size 33024 extends beyond EOD, truncated [ 50.589101][ T4559] loop1: p6 size 33024 extends beyond EOD, truncated [ 50.597157][ T4559] loop1: p7 size 33024 extends beyond EOD, truncated [ 50.604676][ T4559] loop1: p8 size 33024 extends beyond EOD, truncated [ 50.641065][ T4440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.653758][ T4559] loop1: p9 size 33024 extends beyond EOD, truncated [ 50.663822][ T4440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.680945][ T4559] loop1: p10 size 33024 extends beyond EOD, truncated [ 50.694972][ T4440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.703828][ T4440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.711399][ T4559] loop1: p11 size 33024 extends beyond EOD, truncated [ 50.720993][ T4559] loop1: p12 size 33024 extends beyond EOD, truncated [ 50.741444][ T4559] loop1: p13 size 33024 extends beyond EOD, truncated [ 50.756554][ T4559] loop1: p14 size 33024 extends beyond EOD, truncated [ 50.758029][ T4587] loop2: detected capacity change from 0 to 1024 [ 50.773823][ T4559] loop1: p15 size 33024 extends beyond EOD, truncated [ 50.790110][ T4587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.804966][ T4559] loop1: p16 size 33024 extends beyond EOD, truncated [ 50.812825][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.820130][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.825378][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.838001][ T4559] loop1: p17 size 33024 extends beyond EOD, truncated [ 50.859244][ T4559] loop1: p18 size 33024 extends beyond EOD, truncated [ 50.878867][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.885990][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.907337][ T4559] loop1: p19 size 33024 extends beyond EOD, truncated [ 50.918778][ T4559] loop1: p20 size 33024 extends beyond EOD, truncated [ 50.932043][ T4603] loop4: detected capacity change from 0 to 1024 [ 50.936893][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.945572][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.964335][ T4559] loop1: p21 size 33024 extends beyond EOD, truncated [ 50.976656][ T4559] loop1: p22 size 33024 extends beyond EOD, truncated [ 50.985053][ T4559] loop1: p23 size 33024 extends beyond EOD, truncated [ 51.023066][ T4440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.035449][ T4559] loop1: p24 size 33024 extends beyond EOD, truncated [ 51.050465][ T4559] loop1: p25 size 33024 extends beyond EOD, truncated [ 51.061046][ T4559] loop1: p26 size 33024 extends beyond EOD, truncated [ 51.070465][ T4559] loop1: p27 size 33024 extends beyond EOD, truncated [ 51.101811][ T4559] loop1: p28 size 33024 extends beyond EOD, truncated [ 51.119476][ T4559] loop1: p29 size 33024 extends beyond EOD, truncated [ 51.157148][ T4559] loop1: p30 size 33024 extends beyond EOD, truncated [ 51.170922][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.182683][ T4559] loop1: p31 size 33024 extends beyond EOD, truncated [ 51.199585][ T4559] loop1: p32 size 33024 extends beyond EOD, truncated [ 51.227399][ T4559] loop1: p33 size 33024 extends beyond EOD, truncated [ 51.234908][ T4559] loop1: p34 size 33024 extends beyond EOD, truncated [ 51.252522][ T4559] loop1: p35 size 33024 extends beyond EOD, truncated [ 51.267202][ T4559] loop1: p36 size 33024 extends beyond EOD, truncated [ 51.286088][ T4559] loop1: p37 size 33024 extends beyond EOD, truncated [ 51.293629][ T4559] loop1: p38 size 33024 extends beyond EOD, truncated [ 51.301548][ T4559] loop1: p39 size 33024 extends beyond EOD, truncated [ 51.318770][ T4559] loop1: p40 size 33024 extends beyond EOD, truncated [ 51.336847][ T4559] loop1: p41 size 33024 extends beyond EOD, truncated [ 51.344399][ T4559] loop1: p42 size 33024 extends beyond EOD, truncated [ 51.352163][ T4559] loop1: p43 size 33024 extends beyond EOD, truncated [ 51.355339][ T4440] veth0_vlan: entered promiscuous mode [ 51.359846][ T4559] loop1: p44 size 33024 extends beyond EOD, truncated [ 51.372080][ T4559] loop1: p45 size 33024 extends beyond EOD, truncated [ 51.379871][ T4559] loop1: p46 size 33024 extends beyond EOD, truncated [ 51.382257][ T4440] veth1_vlan: entered promiscuous mode [ 51.388114][ T4559] loop1: p47 size 33024 extends beyond EOD, truncated [ 51.400239][ T4559] loop1: p48 size 33024 extends beyond EOD, truncated [ 51.408289][ T4559] loop1: p49 size 33024 extends beyond EOD, truncated [ 51.415753][ T4559] loop1: p50 size 33024 extends beyond EOD, truncated [ 51.417152][ T4440] veth0_macvtap: entered promiscuous mode [ 51.423591][ T4559] loop1: p51 size 33024 extends beyond EOD, truncated [ 51.430377][ T4440] veth1_macvtap: entered promiscuous mode [ 51.435805][ T4559] loop1: p52 size 33024 extends beyond EOD, truncated [ 51.448134][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.448839][ T4559] loop1: p53 size 33024 extends beyond EOD, truncated [ 51.458760][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.466543][ T4559] loop1: p54 size 33024 extends beyond EOD, [ 51.475273][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.475295][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.481316][ T4559] truncated [ 51.486977][ T4559] loop1: p55 size 33024 extends beyond EOD, [ 51.491834][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.501613][ T4559] truncated [ 51.504653][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.504667][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.512320][ T4559] loop1: p56 size 33024 extends beyond EOD, [ 51.521059][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.525120][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.534029][ T4559] truncated [ 51.535406][ T4559] loop1: p57 size 33024 extends beyond EOD, [ 51.547192][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.550467][ T4559] truncated [ 51.560259][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.560330][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.610985][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.620899][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.631441][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.641280][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.651732][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.662506][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.663113][ T4559] loop1: p58 size 33024 extends beyond EOD, truncated [ 51.674513][ T4440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.685493][ T4440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.694286][ T4440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.703016][ T4440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.712165][ T4559] loop1: p59 size 33024 extends beyond EOD, truncated [ 51.720619][ T4559] loop1: p60 size 33024 extends beyond EOD, truncated [ 51.728852][ T4559] loop1: p61 size 33024 extends beyond EOD, truncated [ 51.737726][ T4559] loop1: p62 size 33024 extends beyond EOD, truncated [ 51.747225][ T4559] loop1: p63 size 33024 extends beyond EOD, truncated [ 51.754596][ T4559] loop1: p64 size 33024 extends beyond EOD, truncated [ 51.762155][ T4559] loop1: p65 size 33024 extends beyond EOD, truncated [ 51.770429][ T4559] loop1: p66 size 33024 extends beyond EOD, truncated [ 51.782395][ T4559] loop1: p67 size 33024 extends beyond EOD, truncated [ 51.790749][ T4559] loop1: p68 size 33024 extends beyond EOD, truncated [ 51.798402][ T4559] loop1: p69 size 33024 extends beyond EOD, truncated [ 51.805769][ T4559] loop1: p70 size 33024 extends beyond EOD, truncated [ 51.813635][ T4559] loop1: p71 size 33024 extends beyond EOD, truncated [ 51.821097][ T4559] loop1: p72 size 33024 extends beyond EOD, truncated [ 51.828550][ T4559] loop1: p73 size 33024 extends beyond EOD, truncated [ 51.835857][ T4559] loop1: p74 size 33024 extends beyond EOD, truncated [ 51.843380][ T4559] loop1: p75 size 33024 extends beyond EOD, truncated [ 51.850689][ T4559] loop1: p76 size 33024 extends beyond EOD, truncated [ 51.858064][ T4559] loop1: p77 size 33024 extends beyond EOD, truncated [ 51.865761][ T4559] loop1: p78 size 33024 extends beyond EOD, truncated [ 51.873441][ T4559] loop1: p79 size 33024 extends beyond EOD, truncated [ 51.883617][ T4559] loop1: p80 size 33024 extends beyond EOD, truncated [ 51.891291][ T4559] loop1: p81 size 33024 extends beyond EOD, truncated [ 51.898747][ T4559] loop1: p82 size 33024 extends beyond EOD, truncated [ 51.906316][ T4559] loop1: p83 size 33024 extends beyond EOD, truncated [ 51.914041][ T4559] loop1: p84 size 33024 extends beyond EOD, truncated [ 51.922448][ T4559] loop1: p85 size 33024 extends beyond EOD, truncated [ 51.930978][ T4559] loop1: p86 size 33024 extends beyond EOD, truncated [ 51.939099][ T4559] loop1: p87 size 33024 extends beyond EOD, truncated [ 51.946628][ T4559] loop1: p88 size 33024 extends beyond EOD, truncated [ 51.954134][ T4559] loop1: p89 size 33024 extends beyond EOD, truncated [ 51.961757][ T4559] loop1: p90 size 33024 extends beyond EOD, truncated [ 51.969254][ T4559] loop1: p91 size 33024 extends beyond EOD, truncated [ 51.976964][ T4559] loop1: p92 size 33024 extends beyond EOD, truncated [ 51.984669][ T4559] loop1: p93 size 33024 extends beyond EOD, truncated [ 51.992183][ T4559] loop1: p94 size 33024 extends beyond EOD, truncated [ 51.999823][ T4559] loop1: p95 size 33024 extends beyond EOD, truncated [ 52.007809][ T4559] loop1: p96 size 33024 extends beyond EOD, truncated [ 52.015447][ T4559] loop1: p97 size 33024 extends beyond EOD, truncated [ 52.025544][ T4559] loop1: p98 size 33024 extends beyond EOD, truncated [ 52.033265][ T4559] loop1: p99 size 33024 extends beyond EOD, truncated [ 52.041682][ T4559] loop1: p100 size 33024 extends beyond EOD, truncated [ 52.045851][ T4662] tipc: Started in network mode [ 52.050681][ T4559] loop1: p101 size 33024 extends beyond EOD, truncated [ 52.053650][ T4662] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 52.066674][ T4559] loop1: p102 size 33024 extends beyond EOD, [ 52.069515][ T4662] tipc: Enabling of bearer rejected, failed to enable media [ 52.084074][ T4559] truncated [ 52.087799][ T4559] loop1: p103 size 33024 extends beyond EOD, truncated [ 52.095829][ T4559] loop1: p104 size 33024 extends beyond EOD, truncated [ 52.106614][ T4559] loop1: p105 size 33024 extends beyond EOD, truncated [ 52.109827][ T4664] FAULT_INJECTION: forcing a failure. [ 52.109827][ T4664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.121576][ T4559] loop1: p106 size 33024 extends beyond EOD, [ 52.126674][ T4664] CPU: 0 UID: 0 PID: 4664 Comm: syz.4.401 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 52.133037][ T4559] truncated [ 52.134657][ T4559] loop1: p107 size 33024 extends beyond EOD, [ 52.143726][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.143743][ T4664] Call Trace: [ 52.143751][ T4664] [ 52.143761][ T4664] dump_stack_lvl+0xf2/0x150 [ 52.146908][ T4559] truncated [ 52.152943][ T4664] dump_stack+0x15/0x20 [ 52.164699][ T4559] loop1: p108 size 33024 extends beyond EOD, [ 52.166353][ T4664] should_fail_ex+0x223/0x230 [ 52.169315][ T4559] truncated [ 52.170161][ T4559] loop1: p109 size 33024 extends beyond EOD, [ 52.173893][ T4664] should_fail+0xb/0x10 [ 52.177075][ T4559] truncated [ 52.181154][ T4664] should_fail_usercopy+0x1a/0x20 [ 52.188802][ T4559] loop1: p110 size 33024 extends beyond EOD, [ 52.191971][ T4664] _copy_to_user+0x1e/0xa0 [ 52.195204][ T4559] truncated [ 52.201225][ T4664] simple_read_from_buffer+0xa0/0x110 [ 52.201264][ T4664] proc_fail_nth_read+0xf9/0x140 [ 52.207026][ T4559] loop1: p111 size 33024 extends beyond EOD, [ 52.208607][ T4664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.213557][ T4559] truncated [ 52.214362][ T4559] loop1: p112 size 33024 extends beyond EOD, [ 52.219617][ T4664] vfs_read+0x195/0x720 [ 52.224088][ T4559] truncated [ 52.225428][ T4559] loop1: p113 size 33024 extends beyond EOD, [ 52.227233][ T4664] ? sock_common_getsockopt+0x5b/0x70 [ 52.227271][ T4664] ? __rcu_read_unlock+0x4e/0x70 [ 52.232658][ T4559] truncated [ 52.234149][ T4559] loop1: p114 size 33024 extends beyond EOD, [ 52.237623][ T4664] ? __fget_files+0x1d4/0x210 [ 52.237676][ T4664] ksys_read+0xeb/0x1b0 [ 52.243713][ T4559] truncated [ 52.257722][ T4559] loop1: p115 size 33024 extends beyond EOD, [ 52.258635][ T4664] __x64_sys_read+0x42/0x50 [ 52.262799][ T4559] truncated [ 52.263480][ T4559] loop1: p116 size 33024 extends beyond EOD, [ 52.265967][ T4664] x64_sys_call+0x27d3/0x2d60 [ 52.272061][ T4559] truncated [ 52.277399][ T4664] do_syscall_64+0xc9/0x1c0 [ 52.277496][ T4664] ? clear_bhb_loop+0x55/0xb0 [ 52.277529][ T4664] ? clear_bhb_loop+0x55/0xb0 [ 52.287570][ T4559] loop1: p117 size 33024 extends beyond EOD, [ 52.291635][ T4664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.296343][ T4559] truncated [ 52.300453][ T4664] RIP: 0033:0x7fe68d07ca3c [ 52.300475][ T4664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 52.304477][ T4559] loop1: p118 size 33024 extends beyond EOD, [ 52.309650][ T4664] RSP: 002b:00007fe68bcf1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.309678][ T4664] RAX: ffffffffffffffda RBX: 00007fe68d235f80 RCX: 00007fe68d07ca3c [ 52.314204][ T4559] truncated [ 52.317283][ T4664] RDX: 000000000000000f RSI: 00007fe68bcf10a0 RDI: 0000000000000005 [ 52.317300][ T4664] RBP: 00007fe68bcf1090 R08: 0000000000000000 R09: 0000000000000000 [ 52.325040][ T4559] loop1: p119 size 33024 extends beyond EOD, [ 52.328015][ T4664] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 52.328035][ T4664] R13: 0000000000000000 R14: 00007fe68d235f80 R15: 00007ffd0b187818 [ 52.328064][ T4664] [ 52.331190][ T4559] truncated [ 52.333054][ T4559] loop1: p120 size 33024 extends beyond EOD, [ 52.398519][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 52.398537][ T29] audit: type=1326 audit(1728451553.276:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.399122][ T4559] truncated [ 52.407142][ T29] audit: type=1326 audit(1728451553.276:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.517296][ T4559] loop1: p121 size 33024 extends beyond EOD, truncated [ 52.518037][ T4559] loop1: p122 size 33024 extends beyond EOD, [ 52.524164][ T29] audit: type=1326 audit(1728451553.276:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.524200][ T29] audit: type=1326 audit(1728451553.276:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.524225][ T29] audit: type=1326 audit(1728451553.276:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.524254][ T29] audit: type=1326 audit(1728451553.276:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.524283][ T29] audit: type=1326 audit(1728451553.276:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.524326][ T29] audit: type=1326 audit(1728451553.276:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.530506][ T4559] truncated [ 52.553757][ T29] audit: type=1326 audit(1728451553.286:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.582942][ T4559] loop1: p123 size 33024 extends beyond EOD, [ 52.600270][ T29] audit: type=1326 audit(1728451553.286:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 52.623608][ T4559] truncated [ 52.628309][ T4559] loop1: p124 size 33024 extends beyond EOD, [ 52.729494][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 52.744330][ T4559] truncated [ 52.749187][ T4559] loop1: p125 size 33024 extends beyond EOD, truncated [ 52.757155][ T4559] loop1: p126 size 33024 extends beyond EOD, truncated [ 52.764518][ T4559] loop1: p127 size 33024 extends beyond EOD, truncated [ 52.772409][ T4559] loop1: p128 size 33024 extends beyond EOD, truncated [ 52.782490][ T4559] loop1: p129 size 33024 extends beyond EOD, truncated [ 52.792383][ T4559] loop1: p130 size 33024 extends beyond EOD, truncated [ 52.801882][ T4559] loop1: p131 size 33024 extends beyond EOD, truncated [ 52.810944][ T4559] loop1: p132 size 33024 extends beyond EOD, truncated [ 52.819754][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 52.828794][ T4559] loop1: p133 size 33024 extends beyond EOD, truncated [ 52.844112][ T4559] loop1: p134 size 33024 extends beyond EOD, truncated [ 52.853481][ T4559] loop1: p135 size 33024 extends beyond EOD, truncated [ 52.866325][ T4559] loop1: p136 size 33024 extends beyond EOD, truncated [ 52.873906][ T4559] loop1: p137 size 33024 extends beyond EOD, truncated [ 52.885149][ T4559] loop1: p138 size 33024 extends beyond EOD, truncated [ 52.892552][ T4677] loop4: detected capacity change from 0 to 512 [ 52.903311][ T4559] loop1: p139 size 33024 extends beyond EOD, truncated [ 52.910537][ T4677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.924694][ T4559] loop1: p140 size 33024 extends beyond EOD, truncated [ 52.933387][ T4559] loop1: p141 size 33024 extends beyond EOD, truncated [ 52.942618][ T4559] loop1: p142 size 33024 extends beyond EOD, truncated [ 52.945100][ T4677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 52.951670][ T4559] loop1: p143 size 33024 extends beyond EOD, truncated [ 52.964776][ T4688] 9pnet_virtio: no channels available for device [ 52.965569][ T4559] loop1: p144 size 33024 extends beyond EOD, truncated [ 52.972323][ T4677] System zones: 1-12 [ 52.980560][ T4559] loop1: p145 size 33024 extends beyond EOD, truncated [ 52.990278][ T4559] loop1: p146 size 33024 extends beyond EOD, truncated [ 52.999894][ T4559] loop1: p147 size 33024 extends beyond EOD, truncated [ 53.007406][ T4677] EXT4-fs (loop4): 1 truncate cleaned up [ 53.007689][ T4559] loop1: p148 size 33024 extends beyond EOD, truncated [ 53.013743][ T4677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.020696][ T4559] loop1: p149 size 33024 extends beyond EOD, truncated [ 53.039665][ T4559] loop1: p150 size 33024 extends beyond EOD, truncated [ 53.047295][ T4559] loop1: p151 size 33024 extends beyond EOD, truncated [ 53.054727][ T4559] loop1: p152 size 33024 extends beyond EOD, truncated [ 53.062402][ T4559] loop1: p153 size 33024 extends beyond EOD, truncated [ 53.070015][ T4559] loop1: p154 size 33024 extends beyond EOD, truncated [ 53.077786][ T4559] loop1: p155 size 33024 extends beyond EOD, truncated [ 53.085350][ T4559] loop1: p156 size 33024 extends beyond EOD, truncated [ 53.093677][ T4559] loop1: p157 size 33024 extends beyond EOD, truncated [ 53.101203][ T4559] loop1: p158 size 33024 extends beyond EOD, truncated [ 53.109023][ T4559] loop1: p159 size 33024 extends beyond EOD, truncated [ 53.116650][ T4559] loop1: p160 size 33024 extends beyond EOD, truncated [ 53.124146][ T4559] loop1: p161 size 33024 extends beyond EOD, truncated [ 53.132500][ T4559] loop1: p162 size 33024 extends beyond EOD, truncated [ 53.140128][ T4559] loop1: p163 size 33024 extends beyond EOD, truncated [ 53.147825][ T4559] loop1: p164 size 33024 extends beyond EOD, truncated [ 53.155339][ T4559] loop1: p165 size 33024 extends beyond EOD, truncated [ 53.162973][ T4559] loop1: p166 size 33024 extends beyond EOD, truncated [ 53.170465][ T4559] loop1: p167 size 33024 extends beyond EOD, truncated [ 53.177942][ T4559] loop1: p168 size 33024 extends beyond EOD, truncated [ 53.185239][ T4559] loop1: p169 size 33024 extends beyond EOD, truncated [ 53.192757][ T4559] loop1: p170 size 33024 extends beyond EOD, truncated [ 53.200280][ T4559] loop1: p171 size 33024 extends beyond EOD, truncated [ 53.207687][ T4559] loop1: p172 size 33024 extends beyond EOD, truncated [ 53.215080][ T4559] loop1: p173 size 33024 extends beyond EOD, truncated [ 53.222769][ T4559] loop1: p174 size 33024 extends beyond EOD, truncated [ 53.230364][ T4559] loop1: p175 size 33024 extends beyond EOD, truncated [ 53.238120][ T4559] loop1: p176 size 33024 extends beyond EOD, truncated [ 53.245565][ T4559] loop1: p177 size 33024 extends beyond EOD, truncated [ 53.253126][ T4559] loop1: p178 size 33024 extends beyond EOD, truncated [ 53.260974][ T4559] loop1: p179 size 33024 extends beyond EOD, truncated [ 53.268586][ T4559] loop1: p180 size 33024 extends beyond EOD, truncated [ 53.276099][ T4559] loop1: p181 size 33024 extends beyond EOD, truncated [ 53.283744][ T4559] loop1: p182 size 33024 extends beyond EOD, truncated [ 53.291250][ T4559] loop1: p183 size 33024 extends beyond EOD, truncated [ 53.298756][ T4559] loop1: p184 size 33024 extends beyond EOD, truncated [ 53.306902][ T4559] loop1: p185 size 33024 extends beyond EOD, truncated [ 53.314309][ T4559] loop1: p186 size 33024 extends beyond EOD, truncated [ 53.321791][ T4559] loop1: p187 size 33024 extends beyond EOD, truncated [ 53.329495][ T4559] loop1: p188 size 33024 extends beyond EOD, truncated [ 53.337213][ T4559] loop1: p189 size 33024 extends beyond EOD, truncated [ 53.344667][ T4559] loop1: p190 size 33024 extends beyond EOD, truncated [ 53.352328][ T4559] loop1: p191 size 33024 extends beyond EOD, truncated [ 53.360054][ T4559] loop1: p192 size 33024 extends beyond EOD, truncated [ 53.367745][ T4559] loop1: p193 size 33024 extends beyond EOD, truncated [ 53.375306][ T4559] loop1: p194 size 33024 extends beyond EOD, truncated [ 53.382952][ T4559] loop1: p195 size 33024 extends beyond EOD, truncated [ 53.390766][ T4559] loop1: p196 size 33024 extends beyond EOD, truncated [ 53.398650][ T4559] loop1: p197 size 33024 extends beyond EOD, truncated [ 53.406459][ T4559] loop1: p198 size 33024 extends beyond EOD, truncated [ 53.414246][ T4559] loop1: p199 size 33024 extends beyond EOD, truncated [ 53.421729][ T4559] loop1: p200 size 33024 extends beyond EOD, truncated [ 53.429268][ T4559] loop1: p201 size 33024 extends beyond EOD, truncated [ 53.436933][ T4559] loop1: p202 size 33024 extends beyond EOD, truncated [ 53.444416][ T4559] loop1: p203 size 33024 extends beyond EOD, truncated [ 53.452086][ T4559] loop1: p204 size 33024 extends beyond EOD, truncated [ 53.459717][ T4559] loop1: p205 size 33024 extends beyond EOD, truncated [ 53.467113][ T4559] loop1: p206 size 33024 extends beyond EOD, truncated [ 53.474645][ T4559] loop1: p207 size 33024 extends beyond EOD, truncated [ 53.482714][ T4559] loop1: p208 size 33024 extends beyond EOD, truncated [ 53.490453][ T4559] loop1: p209 size 33024 extends beyond EOD, truncated [ 53.498080][ T4559] loop1: p210 size 33024 extends beyond EOD, truncated [ 53.505531][ T4559] loop1: p211 size 33024 extends beyond EOD, truncated [ 53.513192][ T4559] loop1: p212 size 33024 extends beyond EOD, truncated [ 53.522019][ T4559] loop1: p213 size 33024 extends beyond EOD, truncated [ 53.529591][ T4559] loop1: p214 size 33024 extends beyond EOD, truncated [ 53.537513][ T4559] loop1: p215 size 33024 extends beyond EOD, truncated [ 53.544995][ T4559] loop1: p216 size 33024 extends beyond EOD, truncated [ 53.552565][ T4559] loop1: p217 size 33024 extends beyond EOD, truncated [ 53.560119][ T4559] loop1: p218 size 33024 extends beyond EOD, truncated [ 53.567759][ T4559] loop1: p219 size 33024 extends beyond EOD, truncated [ 53.575356][ T4559] loop1: p220 size 33024 extends beyond EOD, truncated [ 53.582946][ T4559] loop1: p221 size 33024 extends beyond EOD, truncated [ 53.590474][ T4559] loop1: p222 size 33024 extends beyond EOD, truncated [ 53.597854][ T4559] loop1: p223 size 33024 extends beyond EOD, truncated [ 53.605607][ T4559] loop1: p224 size 33024 extends beyond EOD, truncated [ 53.613256][ T4559] loop1: p225 size 33024 extends beyond EOD, truncated [ 53.620703][ T4559] loop1: p226 size 33024 extends beyond EOD, truncated [ 53.628394][ T4559] loop1: p227 size 33024 extends beyond EOD, truncated [ 53.636041][ T4559] loop1: p228 size 33024 extends beyond EOD, truncated [ 53.643671][ T4559] loop1: p229 size 33024 extends beyond EOD, truncated [ 53.651383][ T4559] loop1: p230 size 33024 extends beyond EOD, truncated [ 53.659138][ T4559] loop1: p231 size 33024 extends beyond EOD, truncated [ 53.666626][ T4559] loop1: p232 size 33024 extends beyond EOD, truncated [ 53.674061][ T4559] loop1: p233 size 33024 extends beyond EOD, truncated [ 53.681675][ T4559] loop1: p234 size 33024 extends beyond EOD, truncated [ 53.689218][ T4559] loop1: p235 size 33024 extends beyond EOD, truncated [ 53.696982][ T4559] loop1: p236 size 33024 extends beyond EOD, truncated [ 53.704580][ T4559] loop1: p237 size 33024 extends beyond EOD, truncated [ 53.713888][ T4559] loop1: p238 size 33024 extends beyond EOD, truncated [ 53.722393][ T4559] loop1: p239 size 33024 extends beyond EOD, truncated [ 53.722590][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.731687][ T4559] loop1: p240 size 33024 extends beyond EOD, truncated [ 53.745873][ T4559] loop1: p241 size 33024 extends beyond EOD, truncated [ 53.759237][ T4559] loop1: p242 size 33024 extends beyond EOD, truncated [ 53.772862][ T4559] loop1: p243 size 33024 extends beyond EOD, truncated [ 53.780775][ T4559] loop1: p244 size 33024 extends beyond EOD, truncated [ 53.800468][ T4559] loop1: p245 size 33024 extends beyond EOD, truncated [ 53.809011][ T4559] loop1: p246 size 33024 extends beyond EOD, truncated [ 53.817271][ T4559] loop1: p247 size 33024 extends beyond EOD, truncated [ 53.819223][ T4697] loop4: detected capacity change from 0 to 512 [ 53.824954][ T4559] loop1: p248 size 33024 extends beyond EOD, truncated [ 53.849040][ T4559] loop1: p249 size 33024 extends beyond EOD, truncated [ 53.861411][ T4559] loop1: p250 size 33024 extends beyond EOD, truncated [ 53.868395][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 53.874047][ T4704] x_tables: unsorted entry at hook 2 [ 53.879127][ T4697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.895352][ T4697] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.896282][ T4559] loop1: p251 size 33024 extends beyond EOD, truncated [ 53.916178][ T4559] loop1: p252 size 33024 extends beyond EOD, truncated [ 53.923939][ T4559] loop1: p253 size 33024 extends beyond EOD, truncated [ 53.948620][ T4559] loop1: p254 size 33024 extends beyond EOD, truncated [ 53.958440][ T4559] loop1: p255 size 33024 extends beyond EOD, truncated [ 54.023698][ T4714] veth0_vlan: entered allmulticast mode [ 54.070839][ T4725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 54.114141][ T4714] veth0_vlan: left promiscuous mode [ 54.147156][ T4714] veth0_vlan: entered promiscuous mode [ 54.394851][ T4717] udevd[4717]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 54.416230][ T4719] udevd[4719]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory [ 54.434812][ T4719] udevd[4719]: inotify_add_watch(7, /dev/loop1p23, 10) failed: No such file or directory [ 54.445275][ T4717] udevd[4717]: inotify_add_watch(7, /dev/loop1p24, 10) failed: No such file or directory [ 54.462938][ T4715] udevd[4715]: inotify_add_watch(7, /dev/loop1p22, 10) failed: No such file or directory [ 54.474049][ T4719] udevd[4719]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 54.486368][ T4717] udevd[4717]: inotify_add_watch(7, /dev/loop1p26, 10) failed: No such file or directory [ 54.509223][ T4717] udevd[4717]: inotify_add_watch(7, /dev/loop1p29, 10) failed: No such file or directory [ 54.519982][ T4715] udevd[4715]: inotify_add_watch(7, /dev/loop1p28, 10) failed: No such file or directory [ 54.531635][ T4718] udevd[4718]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 55.046453][ T4742] loop1: detected capacity change from 0 to 8192 [ 55.193192][ T4746] syz.1.423[4746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.193381][ T4746] syz.1.423[4746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.204766][ T4746] syz.1.423[4746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.218589][ T4746] netlink: 372 bytes leftover after parsing attributes in process `syz.1.423'. [ 55.269416][ T4744] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 55.428033][ T4751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 55.474626][ T4753] loop2: detected capacity change from 0 to 1024 [ 55.665462][ T4765] loop3: detected capacity change from 0 to 1024 [ 55.782194][ T4774] loop2: detected capacity change from 0 to 1024 [ 56.039277][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 56.111193][ T4786] loop1: detected capacity change from 0 to 1024 [ 56.142112][ T4786] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.154086][ T4786] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.162478][ T4786] EXT4-fs (loop1): too many log groups per flexible block group [ 56.170230][ T4786] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 56.181727][ T4786] EXT4-fs (loop1): mount failed [ 56.201390][ T4813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.450'. [ 56.221861][ T4813] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 56.230020][ T4812] loop2: detected capacity change from 0 to 2048 [ 56.241462][ T4813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.336898][ T4833] loop2: detected capacity change from 0 to 512 [ 56.355286][ T4836] loop4: detected capacity change from 0 to 256 [ 56.376318][ T4836] FAT-fs (loop4): bogus number of FAT sectors [ 56.382828][ T4836] FAT-fs (loop4): Can't find a valid FAT filesystem [ 56.390143][ T4833] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.594146][ T4863] serio: Serial port ptm0 [ 56.957721][ T4874] usb usb9: usbfs: process 4874 (syz.3.460) did not claim interface 0 before use [ 57.072763][ T4881] 9pnet_virtio: no channels available for device [ 57.097663][ T4883] FAULT_INJECTION: forcing a failure. [ 57.097663][ T4883] name failslab, interval 1, probability 0, space 0, times 0 [ 57.110463][ T4883] CPU: 1 UID: 0 PID: 4883 Comm: syz.0.464 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 57.121142][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.131206][ T4883] Call Trace: [ 57.134495][ T4883] [ 57.137455][ T4883] dump_stack_lvl+0xf2/0x150 [ 57.142079][ T4883] dump_stack+0x15/0x20 [ 57.146349][ T4883] should_fail_ex+0x223/0x230 [ 57.151322][ T4883] ? getname_flags+0x81/0x3b0 [ 57.156184][ T4883] should_failslab+0x8f/0xb0 [ 57.160859][ T4883] kmem_cache_alloc_noprof+0x4c/0x290 [ 57.166313][ T4883] getname_flags+0x81/0x3b0 [ 57.170845][ T4883] user_path_at+0x26/0x110 [ 57.175283][ T4883] do_fchownat+0x92/0x1a0 [ 57.179628][ T4883] __x64_sys_chown+0x47/0x60 [ 57.184228][ T4883] x64_sys_call+0x2b75/0x2d60 [ 57.189004][ T4883] do_syscall_64+0xc9/0x1c0 [ 57.193562][ T4883] ? clear_bhb_loop+0x55/0xb0 [ 57.198348][ T4883] ? clear_bhb_loop+0x55/0xb0 [ 57.203044][ T4883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.209029][ T4883] RIP: 0033:0x7fc64c6edff9 [ 57.213539][ T4883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.233243][ T4883] RSP: 002b:00007fc64b367038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 57.241667][ T4883] RAX: ffffffffffffffda RBX: 00007fc64c8a5f80 RCX: 00007fc64c6edff9 [ 57.249703][ T4883] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000020000340 [ 57.257683][ T4883] RBP: 00007fc64b367090 R08: 0000000000000000 R09: 0000000000000000 [ 57.265702][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.273782][ T4883] R13: 0000000000000000 R14: 00007fc64c8a5f80 R15: 00007ffd8ef20598 [ 57.281774][ T4883] [ 57.332882][ T4885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 57.339434][ T4885] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.347115][ T4885] vhci_hcd vhci_hcd.0: Device attached [ 57.356045][ T4885] FAULT_INJECTION: forcing a failure. [ 57.356045][ T4885] name failslab, interval 1, probability 0, space 0, times 0 [ 57.368900][ T4885] CPU: 0 UID: 0 PID: 4885 Comm: syz.0.465 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 57.379510][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.389587][ T4885] Call Trace: [ 57.392874][ T4885] [ 57.395848][ T4885] dump_stack_lvl+0xf2/0x150 [ 57.400581][ T4885] dump_stack+0x15/0x20 [ 57.404747][ T4885] should_fail_ex+0x223/0x230 [ 57.409460][ T4885] ? sidtab_sid2str_get+0xb8/0x140 [ 57.414623][ T4885] should_failslab+0x8f/0xb0 [ 57.419223][ T4885] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 57.425723][ T4885] ? vsnprintf+0xdd8/0xe30 [ 57.430258][ T4885] kmemdup_noprof+0x2a/0x60 [ 57.434781][ T4885] sidtab_sid2str_get+0xb8/0x140 [ 57.439729][ T4885] security_sid_to_context_core+0x1eb/0x2f0 [ 57.445908][ T4885] security_sid_to_context+0x27/0x30 [ 57.451219][ T4885] selinux_secid_to_secctx+0x22/0x30 [ 57.456545][ T4885] security_secid_to_secctx+0x48/0x90 [ 57.461977][ T4885] audit_log_task_context+0x8c/0x1b0 [ 57.467431][ T4885] audit_log_task+0xfb/0x180 [ 57.472035][ T4885] audit_seccomp+0x68/0x130 [ 57.476608][ T4885] __seccomp_filter+0x6fa/0x1180 [ 57.481574][ T4885] ? proc_fail_nth_write+0x12a/0x150 [ 57.486885][ T4885] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.492582][ T4885] ? vfs_write+0x580/0x910 [ 57.497025][ T4885] ? rcu_segcblist_ready_cbs+0x28/0x40 [ 57.502500][ T4885] ? __fget_files+0x1d4/0x210 [ 57.507324][ T4885] __secure_computing+0x9f/0x1c0 [ 57.512306][ T4885] syscall_trace_enter+0xd1/0x1f0 [ 57.517485][ T4885] ? fpregs_assert_state_consistent+0x83/0xa0 [ 57.523582][ T4885] do_syscall_64+0xaa/0x1c0 [ 57.528096][ T4885] ? clear_bhb_loop+0x55/0xb0 [ 57.532879][ T4885] ? clear_bhb_loop+0x55/0xb0 [ 57.537621][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.543609][ T4885] RIP: 0033:0x7fc64c6edff9 [ 57.548081][ T4885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.567855][ T4885] RSP: 002b:00007fc64b367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 57.576292][ T4885] RAX: ffffffffffffffda RBX: 00007fc64c8a5f80 RCX: 00007fc64c6edff9 [ 57.584360][ T4885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.592428][ T4885] RBP: 00007fc64b367090 R08: 0000000000000000 R09: 0000000000000000 [ 57.600408][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.608391][ T4885] R13: 0000000000000000 R14: 00007fc64c8a5f80 R15: 00007ffd8ef20598 [ 57.616456][ T4885] [ 57.619633][ T4885] audit_panic: 816 callbacks suppressed [ 57.619648][ T4885] audit: error in audit_log_task_context [ 57.624504][ T29] audit: type=1326 audit(1728451558.556:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb28abd4fa7 code=0x7ffc0000 [ 57.655679][ T4886] vhci_hcd: connection closed [ 57.656131][ T28] vhci_hcd: stop threads [ 57.662558][ T4889] loop2: detected capacity change from 0 to 512 [ 57.665089][ T28] vhci_hcd: release socket [ 57.675812][ T28] vhci_hcd: disconnect device [ 57.680801][ T29] audit: type=1326 audit(1728451558.566:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.704242][ T29] audit: type=1326 audit(1728451558.566:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.717640][ T9] vhci_hcd: vhci_device speed not set [ 57.727608][ T29] audit: type=1326 audit(1728451558.566:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.756602][ T29] audit: type=1326 audit(1728451558.566:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.756638][ T29] audit: type=1326 audit(1728451558.566:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.756679][ T29] audit: type=1326 audit(1728451558.566:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.756708][ T29] audit: type=1326 audit(1728451558.576:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.756734][ T29] audit: type=1326 audit(1728451558.576:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 57.777034][ T4895] loop1: detected capacity change from 0 to 512 [ 57.787742][ T4889] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.923885][ T4898] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.977749][ T4898] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.078054][ T4898] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.117440][ T4898] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.134249][ T4900] loop2: detected capacity change from 0 to 1024 [ 58.141888][ T4900] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.152852][ T4900] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.160955][ T4900] EXT4-fs (loop2): too many log groups per flexible block group [ 58.168751][ T4900] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 58.175766][ T4900] EXT4-fs (loop2): mount failed [ 58.189912][ T4898] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.201557][ T4898] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.214382][ T4898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.227683][ T4898] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.235519][ T4914] 9pnet_virtio: no channels available for device [ 58.882912][ T4936] loop2: detected capacity change from 0 to 256 [ 58.958526][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.970442][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.157475][ T4962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 59.164073][ T4962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.171767][ T4962] vhci_hcd vhci_hcd.0: Device attached [ 59.190912][ T4963] vhci_hcd: connection closed [ 59.191233][ T4097] vhci_hcd: stop threads [ 59.200251][ T4097] vhci_hcd: release socket [ 59.204996][ T4097] vhci_hcd: disconnect device [ 59.213130][ T4968] loop1: detected capacity change from 0 to 1024 [ 59.462666][ T4976] FAULT_INJECTION: forcing a failure. [ 59.462666][ T4976] name failslab, interval 1, probability 0, space 0, times 0 [ 59.475412][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.1.486 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 59.486027][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.496103][ T4976] Call Trace: [ 59.499541][ T4976] [ 59.502488][ T4976] dump_stack_lvl+0xf2/0x150 [ 59.507188][ T4976] dump_stack+0x15/0x20 [ 59.511368][ T4976] should_fail_ex+0x223/0x230 [ 59.516092][ T4976] ? kobject_get_path+0x85/0x160 [ 59.521066][ T4976] should_failslab+0x8f/0xb0 [ 59.525734][ T4976] __kmalloc_noprof+0xa5/0x370 [ 59.530539][ T4976] kobject_get_path+0x85/0x160 [ 59.535356][ T4976] kobject_uevent_env+0x1b9/0x550 [ 59.540613][ T4976] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 59.546479][ T4976] ? device_pm_check_callbacks+0x632/0x650 [ 59.552389][ T4976] kobject_uevent+0x1c/0x30 [ 59.556934][ T4976] device_del+0x6fa/0x780 [ 59.561336][ T4976] ? mntput+0x49/0x70 [ 59.565402][ T4976] device_unregister+0x15/0x40 [ 59.570303][ T4976] bdi_unregister+0x307/0x3a0 [ 59.575007][ T4976] del_gendisk+0x2f2/0x600 [ 59.579514][ T4976] loop_control_ioctl+0x3ae/0x440 [ 59.584562][ T4976] ? __pfx_loop_control_ioctl+0x10/0x10 [ 59.590186][ T4976] __se_sys_ioctl+0xcd/0x140 [ 59.594807][ T4976] __x64_sys_ioctl+0x43/0x50 [ 59.599428][ T4976] x64_sys_call+0x15cc/0x2d60 [ 59.604124][ T4976] do_syscall_64+0xc9/0x1c0 [ 59.608656][ T4976] ? clear_bhb_loop+0x55/0xb0 [ 59.613394][ T4976] ? clear_bhb_loop+0x55/0xb0 [ 59.618131][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.624126][ T4976] RIP: 0033:0x7fb28abddff9 [ 59.628649][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.648292][ T4976] RSP: 002b:00007fb28980f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.656719][ T4976] RAX: ffffffffffffffda RBX: 00007fb28ad96130 RCX: 00007fb28abddff9 [ 59.664697][ T4976] RDX: 000000000000000b RSI: 0000000000004c81 RDI: 0000000000000003 [ 59.672854][ T4976] RBP: 00007fb28980f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.680852][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.688911][ T4976] R13: 0000000000000000 R14: 00007fb28ad96130 R15: 00007ffe2a9fb118 [ 59.697019][ T4976] [ 59.702310][ T4711] udevd[4711]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 59.762149][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 59.772455][ T4980] sctp: [Deprecated]: syz.3.488 (pid 4980) Use of int in maxseg socket option. [ 59.772455][ T4980] Use struct sctp_assoc_value instead [ 59.962766][ T4990] loop2: detected capacity change from 0 to 8192 [ 59.972333][ T4990] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.987695][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 59.996569][ T4990] FAT-fs (loop2): Filesystem has been set read-only [ 60.003498][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.021685][ T4984] loop4: detected capacity change from 0 to 1024 [ 60.028285][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.042403][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.051571][ T4984] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.062600][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.072008][ T4984] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.086669][ T4984] EXT4-fs (loop4): too many log groups per flexible block group [ 60.094367][ T4984] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 60.104454][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.113403][ T4984] EXT4-fs (loop4): mount failed [ 60.118390][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.136183][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.163145][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.173443][ T4990] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 60.251433][ T3340] IPVS: starting estimator thread 0... [ 60.259128][ T5009] tipc: Started in network mode [ 60.264128][ T5009] tipc: Node identity ac1414aa, cluster identity 4711 [ 60.289180][ T5009] tipc: Enabled bearer , priority 10 [ 60.345962][ T5012] IPVS: using max 2016 ests per chain, 100800 per kthread [ 60.428525][ T5046] loop3: detected capacity change from 0 to 1024 [ 60.451223][ T5051] FAULT_INJECTION: forcing a failure. [ 60.451223][ T5051] name failslab, interval 1, probability 0, space 0, times 0 [ 60.464399][ T5051] CPU: 1 UID: 0 PID: 5051 Comm: syz.0.507 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 60.475106][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.485239][ T5051] Call Trace: [ 60.488564][ T5051] [ 60.491518][ T5051] dump_stack_lvl+0xf2/0x150 [ 60.496144][ T5051] dump_stack+0x15/0x20 [ 60.500410][ T5051] should_fail_ex+0x223/0x230 [ 60.505126][ T5051] ? audit_log_start+0x34c/0x6b0 [ 60.510108][ T5051] should_failslab+0x8f/0xb0 [ 60.514779][ T5051] kmem_cache_alloc_noprof+0x4c/0x290 [ 60.520298][ T5051] audit_log_start+0x34c/0x6b0 [ 60.525134][ T5051] ? kmem_cache_free+0xdc/0x2d0 [ 60.530074][ T5051] audit_seccomp+0x4b/0x130 [ 60.534749][ T5051] __seccomp_filter+0x6fa/0x1180 [ 60.539737][ T5051] ? avc_has_perm+0xd4/0x160 [ 60.544383][ T5051] __secure_computing+0x9f/0x1c0 [ 60.549407][ T5051] syscall_trace_enter+0xd1/0x1f0 [ 60.554473][ T5051] ? fpregs_assert_state_consistent+0x83/0xa0 [ 60.560625][ T5051] do_syscall_64+0xaa/0x1c0 [ 60.565154][ T5051] ? clear_bhb_loop+0x55/0xb0 [ 60.569964][ T5051] ? clear_bhb_loop+0x55/0xb0 [ 60.574764][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.580772][ T5051] RIP: 0033:0x7fc64c6eca3c [ 60.585219][ T5051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 60.604965][ T5051] RSP: 002b:00007fc64b367030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.613582][ T5051] RAX: ffffffffffffffda RBX: 00007fc64c8a5f80 RCX: 00007fc64c6eca3c [ 60.621598][ T5051] RDX: 000000000000000f RSI: 00007fc64b3670a0 RDI: 0000000000000006 [ 60.629601][ T5051] RBP: 00007fc64b367090 R08: 0000000000000000 R09: 0000000000000000 [ 60.637645][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.645643][ T5051] R13: 0000000000000000 R14: 00007fc64c8a5f80 R15: 00007ffd8ef20598 [ 60.653646][ T5051] [ 60.720839][ T5075] loop3: detected capacity change from 0 to 4096 [ 60.732087][ T5075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.749408][ T5079] loop2: detected capacity change from 0 to 1024 [ 60.858485][ T5087] FAULT_INJECTION: forcing a failure. [ 60.858485][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.871674][ T5087] CPU: 0 UID: 0 PID: 5087 Comm: syz.3.513 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 60.882285][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.892362][ T5087] Call Trace: [ 60.895653][ T5087] [ 60.898598][ T5087] dump_stack_lvl+0xf2/0x150 [ 60.903213][ T5087] dump_stack+0x15/0x20 [ 60.907383][ T5087] should_fail_ex+0x223/0x230 [ 60.912144][ T5087] should_fail+0xb/0x10 [ 60.916587][ T5087] should_fail_usercopy+0x1a/0x20 [ 60.921646][ T5087] _copy_from_user+0x1e/0xd0 [ 60.926333][ T5087] copy_msghdr_from_user+0x54/0x2a0 [ 60.931572][ T5087] __sys_sendmmsg+0x21a/0x500 [ 60.936307][ T5087] __x64_sys_sendmmsg+0x57/0x70 [ 60.941193][ T5087] x64_sys_call+0xa49/0x2d60 [ 60.945834][ T5087] do_syscall_64+0xc9/0x1c0 [ 60.950346][ T5087] ? clear_bhb_loop+0x55/0xb0 [ 60.955051][ T5087] ? clear_bhb_loop+0x55/0xb0 [ 60.959749][ T5087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.965663][ T5087] RIP: 0033:0x7f4cb123dff9 [ 60.970085][ T5087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.989731][ T5087] RSP: 002b:00007f4cafeb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.998198][ T5087] RAX: ffffffffffffffda RBX: 00007f4cb13f5f80 RCX: 00007f4cb123dff9 [ 61.006281][ T5087] RDX: 0000000000000588 RSI: 0000000020001500 RDI: 000000000000000b [ 61.014260][ T5087] RBP: 00007f4cafeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.022235][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.030213][ T5087] R13: 0000000000000000 R14: 00007f4cb13f5f80 R15: 00007ffeca7ad4d8 [ 61.038203][ T5087] [ 61.091953][ T5093] loop4: detected capacity change from 0 to 512 [ 61.134576][ T5096] loop1: detected capacity change from 0 to 1024 [ 61.144620][ T5096] EXT4-fs: Ignoring removed nobh option [ 61.177319][ T5093] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.391675][ T5125] loop2: detected capacity change from 0 to 1024 [ 61.406305][ T35] tipc: Node number set to 2886997162 [ 61.615628][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 61.627519][ T5152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.690374][ T5152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.743863][ T2931] IPVS: starting estimator thread 0... [ 61.745315][ T5156] loop2: detected capacity change from 0 to 128 [ 61.771195][ T5164] tipc: Started in network mode [ 61.776190][ T5164] tipc: Node identity ac1414aa, cluster identity 4711 [ 61.783485][ T5164] tipc: Enabled bearer , priority 10 [ 61.836399][ T5166] IPVS: using max 2496 ests per chain, 124800 per kthread [ 61.868046][ T5159] program syz.0.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.937472][ T5179] TCP: TCP_TX_DELAY enabled [ 61.964471][ T5179] loop3: detected capacity change from 0 to 256 [ 61.991906][ T5179] FAT-fs (loop3): Directory bread(block 64) failed [ 61.998722][ T5179] FAT-fs (loop3): Directory bread(block 65) failed [ 62.005573][ T5179] FAT-fs (loop3): Directory bread(block 66) failed [ 62.012241][ T5179] FAT-fs (loop3): Directory bread(block 67) failed [ 62.019164][ T5179] FAT-fs (loop3): Directory bread(block 68) failed [ 62.025983][ T5179] FAT-fs (loop3): Directory bread(block 69) failed [ 62.033546][ T5179] FAT-fs (loop3): Directory bread(block 70) failed [ 62.040278][ T5179] FAT-fs (loop3): Directory bread(block 71) failed [ 62.048051][ T5179] FAT-fs (loop3): Directory bread(block 72) failed [ 62.055153][ T5179] FAT-fs (loop3): Directory bread(block 73) failed [ 62.067060][ T5193] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.534'. [ 62.304922][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.304922][ T28] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 62.321779][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.321779][ T28] loop3: rw=1, sector=1864, nr_sectors = 2048 limit=256 [ 62.339620][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.339620][ T28] loop3: rw=1, sector=3912, nr_sectors = 2048 limit=256 [ 62.358670][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.358670][ T28] loop3: rw=1, sector=5960, nr_sectors = 2048 limit=256 [ 62.375566][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.375566][ T28] loop3: rw=1, sector=8008, nr_sectors = 2048 limit=256 [ 62.394595][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.394595][ T28] loop3: rw=1, sector=10056, nr_sectors = 3752 limit=256 [ 62.412907][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.412907][ T28] loop3: rw=1, sector=13808, nr_sectors = 2304 limit=256 [ 62.430315][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.430315][ T28] loop3: rw=1, sector=16112, nr_sectors = 2048 limit=256 [ 62.447139][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.447139][ T28] loop3: rw=1, sector=18160, nr_sectors = 2048 limit=256 [ 62.463833][ T28] kworker/u8:1: attempt to access beyond end of device [ 62.463833][ T28] loop3: rw=1, sector=20208, nr_sectors = 2104 limit=256 [ 62.573739][ T5206] loop3: detected capacity change from 0 to 512 [ 62.588055][ T5206] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.756465][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 62.756483][ T29] audit: type=1400 audit(1728451563.696:2931): avc: denied { bind } for pid=5222 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.831211][ T29] audit: type=1326 audit(1728451563.766:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 62.853663][ T5230] loop1: detected capacity change from 0 to 512 [ 62.854807][ T29] audit: type=1326 audit(1728451563.766:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 62.892731][ T29] audit: type=1326 audit(1728451563.766:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 62.916092][ T29] audit: type=1326 audit(1728451563.766:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 62.939637][ T29] audit: type=1326 audit(1728451563.766:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 62.963177][ T29] audit: type=1326 audit(1728451563.766:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 62.986849][ T29] audit: type=1400 audit(1728451563.766:2938): avc: denied { ioctl } for pid=5222 comm="syz.2.550" path="socket:[9143]" dev="sockfs" ino=9143 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.015077][ T3343] tipc: Node number set to 2886997162 [ 63.021910][ T29] audit: type=1326 audit(1728451563.826:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe68d074fa7 code=0x7ffc0000 [ 63.045804][ T29] audit: type=1326 audit(1728451563.826:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe68d019959 code=0x7ffc0000 [ 63.496879][ T5255] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.562'. [ 64.034735][ T5318] loop1: detected capacity change from 0 to 512 [ 64.092823][ T5320] gretap0: entered promiscuous mode [ 64.105091][ T5320] vlan2: entered promiscuous mode [ 64.113291][ T5320] gretap0: left promiscuous mode [ 64.143817][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 64.255585][ T5338] syz.0.571[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.257196][ T5338] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 64.278703][ T5338] tipc: Enabled bearer , priority 10 [ 64.390282][ T5346] bridge0: port 3(vlan2) entered blocking state [ 64.396902][ T5346] bridge0: port 3(vlan2) entered disabled state [ 64.411550][ T5346] vlan2: entered allmulticast mode [ 64.418904][ T5346] vlan2: left allmulticast mode [ 64.548697][ T3341] IPVS: starting estimator thread 0... [ 64.558202][ T5352] tipc: Enabled bearer , priority 10 [ 64.646886][ T5353] IPVS: using max 2448 ests per chain, 122400 per kthread [ 64.737754][ T5374] syz.3.581[5374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.737862][ T5374] syz.3.581[5374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.749783][ T5374] syz.3.581[5374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.799529][ T5367] syz.3.581[5367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.811683][ T5367] syz.3.581[5367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.823219][ T5367] syz.3.581[5367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.911827][ T5385] loop3: detected capacity change from 0 to 1024 [ 64.951867][ T5387] loop4: detected capacity change from 0 to 128 [ 65.141375][ T9] IPVS: starting estimator thread 0... [ 65.149239][ T5406] tipc: Started in network mode [ 65.150704][ T5408] loop1: detected capacity change from 0 to 128 [ 65.154185][ T5406] tipc: Node identity ac1414aa, cluster identity 4711 [ 65.154673][ T5406] tipc: Enabled bearer , priority 10 [ 65.240535][ T5407] IPVS: using max 2496 ests per chain, 124800 per kthread [ 65.271786][ T5414] dccp_close: ABORT with 24 bytes unread [ 65.278990][ T5417] loop3: detected capacity change from 0 to 128 [ 65.291894][ T5417] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.324359][ T5419] syzkaller0: entered promiscuous mode [ 65.330037][ T5419] syzkaller0: entered allmulticast mode [ 65.388907][ T5426] FAULT_INJECTION: forcing a failure. [ 65.388907][ T5426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.402233][ T5426] CPU: 1 UID: 0 PID: 5426 Comm: syz.3.599 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 65.413041][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.423115][ T5426] Call Trace: [ 65.426449][ T5426] [ 65.429399][ T5426] dump_stack_lvl+0xf2/0x150 [ 65.434063][ T5426] dump_stack+0x15/0x20 [ 65.438254][ T5426] should_fail_ex+0x223/0x230 [ 65.443100][ T5426] should_fail+0xb/0x10 [ 65.447282][ T5426] should_fail_usercopy+0x1a/0x20 [ 65.452377][ T5426] _copy_from_user+0x1e/0xd0 [ 65.456992][ T5426] copy_msghdr_from_user+0x54/0x2a0 [ 65.462241][ T5426] __sys_sendmsg+0x171/0x270 [ 65.466956][ T5426] __x64_sys_sendmsg+0x46/0x50 [ 65.471869][ T5426] x64_sys_call+0x2689/0x2d60 [ 65.476638][ T5426] do_syscall_64+0xc9/0x1c0 [ 65.481151][ T5426] ? clear_bhb_loop+0x55/0xb0 [ 65.485903][ T5426] ? clear_bhb_loop+0x55/0xb0 [ 65.490609][ T5426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.496558][ T5426] RIP: 0033:0x7f4cb123dff9 [ 65.501086][ T5426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.520705][ T5426] RSP: 002b:00007f4cafeb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.529129][ T5426] RAX: ffffffffffffffda RBX: 00007f4cb13f5f80 RCX: 00007f4cb123dff9 [ 65.537107][ T5426] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 65.545155][ T5426] RBP: 00007f4cafeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.553133][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.561114][ T5426] R13: 0000000000000000 R14: 00007f4cb13f5f80 R15: 00007ffeca7ad4d8 [ 65.569162][ T5426] [ 65.573636][ T3340] tipc: Node number set to 4278190081 [ 65.616066][ T5429] loop2: detected capacity change from 0 to 1024 [ 65.638347][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 65.647243][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.654815][ T5435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.663652][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.671297][ T5435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.680648][ T5440] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.604'. [ 65.767923][ T5444] pim6reg1: entered promiscuous mode [ 65.773280][ T5444] pim6reg1: entered allmulticast mode [ 65.780935][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 65.789793][ T5444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.797370][ T5444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.805056][ T5444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.812644][ T5444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.969039][ T5453] loop4: detected capacity change from 0 to 128 [ 66.020498][ T5460] FAULT_INJECTION: forcing a failure. [ 66.020498][ T5460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.033843][ T5460] CPU: 1 UID: 0 PID: 5460 Comm: syz.4.610 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 66.044538][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.054605][ T5460] Call Trace: [ 66.057969][ T5460] [ 66.060904][ T5460] dump_stack_lvl+0xf2/0x150 [ 66.065528][ T5460] dump_stack+0x15/0x20 [ 66.069717][ T5460] should_fail_ex+0x223/0x230 [ 66.074422][ T5460] should_fail_alloc_page+0xfd/0x110 [ 66.079802][ T5460] __alloc_pages_noprof+0x109/0x360 [ 66.085304][ T5460] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 66.090755][ T5460] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 66.096299][ T5460] handle_mm_fault+0xdbe/0x2a80 [ 66.101223][ T5460] exc_page_fault+0x3b9/0x650 [ 66.105952][ T5460] asm_exc_page_fault+0x26/0x30 [ 66.110857][ T5460] RIP: 0033:0x7fe68d02b31b [ 66.115274][ T5460] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 66.134904][ T5460] RSP: 002b:00007fe68bceee10 EFLAGS: 00010246 [ 66.140978][ T5460] RAX: 00007fe68bcf0f30 RBX: 00007fe68d20b620 RCX: 0000000000000000 [ 66.149018][ T5460] RDX: 00007fe68bcf0f78 RSI: 00007fe68d0dc980 RDI: 00007fe68bceee30 [ 66.157029][ T5460] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 66.165010][ T5460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.173003][ T5460] R13: 0000000000000000 R14: 00007fe68d235f80 R15: 00007ffd0b187818 [ 66.180996][ T5460] [ 66.184123][ T5460] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.215810][ T5462] loop4: detected capacity change from 0 to 2048 [ 66.232048][ T5462] 9pnet_virtio: no channels available for device [ 66.266008][ T9] tipc: Node number set to 2886997162 [ 66.301470][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.304715][ T5472] loop4: detected capacity change from 0 to 2048 [ 66.315092][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.326225][ T5470] bridge0: entered allmulticast mode [ 66.352998][ T5472] 9pnet: Could not find request transport: tcptVcf_|Wm>H1ޚȦ|}zWVrrJ-ef=rO^z|| [ 66.361434][ T5473] bridge_slave_1: left allmulticast mode [ 66.372900][ T5473] bridge_slave_1: left promiscuous mode [ 66.378814][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.387165][ T5473] bridge_slave_0: left allmulticast mode [ 66.393009][ T5473] bridge_slave_0: left promiscuous mode [ 66.398970][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.553719][ T5488] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 66.560366][ T5488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.568047][ T5488] vhci_hcd vhci_hcd.0: Device attached [ 66.575606][ T5489] vhci_hcd: connection closed [ 66.575882][ T5299] vhci_hcd: stop threads [ 66.585152][ T5299] vhci_hcd: release socket [ 66.589634][ T5299] vhci_hcd: disconnect device [ 66.659627][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 66.675403][ T5495] team0 (unregistering): Port device team_slave_0 removed [ 66.687609][ T5495] team0 (unregistering): Port device team_slave_1 removed [ 66.748126][ T5501] 9pnet_virtio: no channels available for device [ 66.776787][ T5503] loop2: detected capacity change from 0 to 512 [ 66.807988][ T5505] netlink: 124 bytes leftover after parsing attributes in process `syz.1.626'. [ 66.834460][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 66.883425][ T5516] loop2: detected capacity change from 0 to 512 [ 66.890428][ T5516] ext4: Unknown parameter 'fsuuid' [ 66.910816][ T5517] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.630'. [ 66.922285][ T5516] netlink: 48 bytes leftover after parsing attributes in process `syz.2.631'. [ 67.084130][ T5523] loop2: detected capacity change from 0 to 1024 [ 67.104092][ T5523] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 67.116247][ T5523] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.126965][ T5523] xt_NFQUEUE: number of total queues is 0 [ 67.135657][ T5523] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.633: corrupted in-inode xattr: bad magic number in in-inode xattr [ 67.177036][ T3269] EXT4-fs unmount: 28 callbacks suppressed [ 67.177054][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.233311][ T5534] loop2: detected capacity change from 0 to 1024 [ 67.244593][ T5534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.272593][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.288898][ T5537] FAULT_INJECTION: forcing a failure. [ 67.288898][ T5537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.302204][ T5537] CPU: 0 UID: 0 PID: 5537 Comm: syz.0.639 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 67.312826][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.323408][ T5537] Call Trace: [ 67.326948][ T5537] [ 67.329909][ T5537] dump_stack_lvl+0xf2/0x150 [ 67.334162][ T5541] loop2: detected capacity change from 0 to 512 [ 67.334528][ T5537] dump_stack+0x15/0x20 [ 67.345248][ T5537] should_fail_ex+0x223/0x230 [ 67.350018][ T5537] should_fail+0xb/0x10 [ 67.354227][ T5537] should_fail_usercopy+0x1a/0x20 [ 67.359311][ T5537] _copy_to_user+0x1e/0xa0 [ 67.363782][ T5537] simple_read_from_buffer+0xa0/0x110 [ 67.369202][ T5537] proc_fail_nth_read+0xf9/0x140 [ 67.374156][ T5537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.380458][ T5537] vfs_read+0x195/0x720 [ 67.385269][ T5537] ? __rcu_read_unlock+0x4e/0x70 [ 67.390260][ T5537] ? __fget_files+0x1d4/0x210 [ 67.395077][ T5537] ksys_read+0xeb/0x1b0 [ 67.399412][ T5537] __x64_sys_read+0x42/0x50 [ 67.403971][ T5537] x64_sys_call+0x27d3/0x2d60 [ 67.408742][ T5537] do_syscall_64+0xc9/0x1c0 [ 67.413302][ T5537] ? clear_bhb_loop+0x55/0xb0 [ 67.418297][ T5537] ? clear_bhb_loop+0x55/0xb0 [ 67.423029][ T5537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.429031][ T5537] RIP: 0033:0x7fc64c6eca3c [ 67.433484][ T5537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 67.453104][ T5537] RSP: 002b:00007fc64b367030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.461696][ T5537] RAX: ffffffffffffffda RBX: 00007fc64c8a5f80 RCX: 00007fc64c6eca3c [ 67.469676][ T5537] RDX: 000000000000000f RSI: 00007fc64b3670a0 RDI: 0000000000000004 [ 67.477838][ T5537] RBP: 00007fc64b367090 R08: 0000000000000000 R09: 0000000000000000 [ 67.485816][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.493798][ T5537] R13: 0000000000000000 R14: 00007fc64c8a5f80 R15: 00007ffd8ef20598 [ 67.502022][ T5537] [ 67.544786][ T5556] loop4: detected capacity change from 0 to 128 [ 67.551361][ T5551] bond1: entered promiscuous mode [ 67.556561][ T5551] bond1: entered allmulticast mode [ 67.562159][ T5551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.572637][ T5556] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.573893][ T5551] bond1 (unregistering): Released all slaves [ 67.588123][ T5556] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.623263][ T5563] loop2: detected capacity change from 0 to 128 [ 67.630734][ T5563] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.644432][ T5563] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.689412][ T5571] syz.4.644[5571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.689537][ T5571] syz.4.644[5571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.710957][ T5571] syz.4.644[5571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.737190][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 67.743721][ T5577] loop1: detected capacity change from 0 to 1024 [ 67.807460][ T29] kauditd_printk_skb: 1479 callbacks suppressed [ 67.807477][ T29] audit: type=1326 audit(1728451568.746:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 67.838368][ T29] audit: type=1326 audit(1728451568.746:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 67.861857][ T29] audit: type=1326 audit(1728451568.746:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 67.885476][ T29] audit: type=1326 audit(1728451568.746:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c6edff9 code=0x7ffc0000 [ 67.909180][ T29] audit: type=1326 audit(1728451568.816:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 67.932764][ T29] audit: type=1326 audit(1728451568.816:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd12aadff9 code=0x7ffc0000 [ 67.956500][ T29] audit: type=1326 audit(1728451568.816:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 67.980089][ T29] audit: type=1326 audit(1728451568.816:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68d07dff9 code=0x7ffc0000 [ 68.003652][ T29] audit: type=1326 audit(1728451568.826:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc64c6e4fa7 code=0x7ffc0000 [ 68.027068][ T29] audit: type=1326 audit(1728451568.826:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc64c689959 code=0x7ffc0000 [ 68.059966][ T3269] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.108142][ T3265] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.140604][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 68.162275][ T5596] loop4: detected capacity change from 0 to 128 [ 68.206888][ T5596] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.229823][ T5596] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.283002][ T5594] bridge: RTM_NEWNEIGH with invalid ether address [ 68.589555][ T3265] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.747683][ T5623] FAULT_INJECTION: forcing a failure. [ 68.747683][ T5623] name failslab, interval 1, probability 0, space 0, times 0 [ 68.760579][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz.4.657 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 68.771246][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.781430][ T5623] Call Trace: [ 68.784752][ T5623] [ 68.787691][ T5623] dump_stack_lvl+0xf2/0x150 [ 68.792323][ T5623] dump_stack+0x15/0x20 [ 68.796522][ T5623] should_fail_ex+0x223/0x230 [ 68.801310][ T5623] ? __kvmalloc_node_noprof+0x72/0x170 [ 68.806842][ T5623] should_failslab+0x8f/0xb0 [ 68.811445][ T5623] __kmalloc_node_noprof+0xa8/0x380 [ 68.816765][ T5623] __kvmalloc_node_noprof+0x72/0x170 [ 68.822234][ T5623] alloc_netdev_mqs+0x9d/0x8e0 [ 68.827041][ T5623] ? __pfx_vlan_setup+0x10/0x10 [ 68.831999][ T5623] rtnl_create_link+0x233/0x680 [ 68.836955][ T5623] rtnl_newlink+0xe12/0x1690 [ 68.841834][ T5623] ? packet_rcv+0xd4/0x990 [ 68.846314][ T5623] ? selinux_capable+0x1f2/0x260 [ 68.851454][ T5623] ? security_capable+0x81/0x90 [ 68.856323][ T5623] ? ns_capable+0x7d/0xb0 [ 68.860743][ T5623] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.865819][ T5623] rtnetlink_rcv_msg+0x6aa/0x710 [ 68.870792][ T5623] ? ref_tracker_free+0x3a5/0x410 [ 68.875840][ T5623] ? __dev_queue_xmit+0x161/0x2040 [ 68.881035][ T5623] netlink_rcv_skb+0x12c/0x230 [ 68.885838][ T5623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.891404][ T5623] rtnetlink_rcv+0x1c/0x30 [ 68.895845][ T5623] netlink_unicast+0x599/0x670 [ 68.900803][ T5623] netlink_sendmsg+0x5cc/0x6e0 [ 68.905695][ T5623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.911014][ T5623] __sock_sendmsg+0x140/0x180 [ 68.915876][ T5623] ____sys_sendmsg+0x312/0x410 [ 68.920715][ T5623] __sys_sendmsg+0x1d9/0x270 [ 68.925434][ T5623] __x64_sys_sendmsg+0x46/0x50 [ 68.930332][ T5623] x64_sys_call+0x2689/0x2d60 [ 68.935169][ T5623] do_syscall_64+0xc9/0x1c0 [ 68.939687][ T5623] ? clear_bhb_loop+0x55/0xb0 [ 68.944593][ T5623] ? clear_bhb_loop+0x55/0xb0 [ 68.949330][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.955277][ T5623] RIP: 0033:0x7fe68d07dff9 [ 68.959732][ T5623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.979352][ T5623] RSP: 002b:00007fe68bcf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.987876][ T5623] RAX: ffffffffffffffda RBX: 00007fe68d235f80 RCX: 00007fe68d07dff9 [ 68.995853][ T5623] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 69.003891][ T5623] RBP: 00007fe68bcf1090 R08: 0000000000000000 R09: 0000000000000000 [ 69.011869][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.019849][ T5623] R13: 0000000000000000 R14: 00007fe68d235f80 R15: 00007ffd0b187818 [ 69.027873][ T5623] [ 69.105387][ T5633] netem: unknown loss type 5 [ 69.110084][ T5633] netem: change failed [ 69.126150][ T5629] loop4: detected capacity change from 0 to 8192 [ 69.127347][ T5634] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.659'. [ 69.209534][ T5637] vlan2: entered promiscuous mode [ 69.306360][ T5639] loop3: detected capacity change from 0 to 1024 [ 69.367355][ T5629] ================================================================== [ 69.375939][ T5629] BUG: KCSAN: data-race in dio_bio_end_io / dio_new_bio [ 69.383125][ T5629] [ 69.385453][ T5629] read-write to 0xffff88810b474058 of 8 bytes by interrupt on cpu 0: [ 69.393532][ T5629] dio_bio_end_io+0x53/0xd0 [ 69.398082][ T5629] bio_endio+0x369/0x410 [ 69.402350][ T5629] blk_update_request+0x382/0x880 [ 69.407390][ T5629] blk_mq_end_request+0x26/0x50 [ 69.412251][ T5629] lo_complete_rq+0xce/0x180 [ 69.416866][ T5629] blk_done_softirq+0x74/0xb0 [ 69.421567][ T5629] handle_softirqs+0xbf/0x280 [ 69.426272][ T5629] run_ksoftirqd+0x1c/0x30 [ 69.430704][ T5629] smpboot_thread_fn+0x31c/0x4c0 [ 69.435650][ T5629] kthread+0x1d1/0x210 [ 69.439732][ T5629] ret_from_fork+0x4b/0x60 [ 69.444164][ T5629] ret_from_fork_asm+0x1a/0x30 [ 69.448943][ T5629] [ 69.451279][ T5629] read to 0xffff88810b474058 of 8 bytes by task 5629 on cpu 1: [ 69.458833][ T5629] dio_new_bio+0x249/0x460 [ 69.463273][ T5629] dio_send_cur_page+0x1f2/0x7a0 [ 69.468238][ T5629] submit_page_section+0x1a3/0x5b0 [ 69.473634][ T5629] __blockdev_direct_IO+0x11bb/0x1e80 [ 69.479030][ T5629] fat_direct_IO+0x10a/0x1d0 [ 69.483738][ T5629] generic_file_direct_write+0xf7/0x250 [ 69.489314][ T5629] __generic_file_write_iter+0xae/0x120 [ 69.494963][ T5629] generic_file_write_iter+0x77/0x1c0 [ 69.500359][ T5629] do_iter_readv_writev+0x394/0x450 [ 69.505606][ T5629] vfs_writev+0x2d4/0x880 [ 69.509950][ T5629] __se_sys_pwritev2+0x10c/0x1d0 [ 69.514908][ T5629] __x64_sys_pwritev2+0x78/0x90 [ 69.519771][ T5629] x64_sys_call+0x271f/0x2d60 [ 69.524465][ T5629] do_syscall_64+0xc9/0x1c0 [ 69.528987][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.534904][ T5629] [ 69.537228][ T5629] value changed: 0xffff88810f284300 -> 0xffff888114c15540 [ 69.544340][ T5629] [ 69.546703][ T5629] Reported by Kernel Concurrency Sanitizer on: [ 69.552872][ T5629] CPU: 1 UID: 0 PID: 5629 Comm: syz.4.660 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 69.563476][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.573547][ T5629] ==================================================================