last executing test programs: 13.50928174s ago: executing program 1 (id=284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) 13.41349059s ago: executing program 1 (id=288): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 13.284168889s ago: executing program 1 (id=294): syz_mount_image$tmpfs(0x0, &(0x7f00000040c0)='./file0\x00', 0x810000, 0x0, 0x6, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000001b80)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) open(&(0x7f0000000040)='.\x00', 0x418281, 0x8) 13.224893419s ago: executing program 1 (id=296): symlink(0x0, &(0x7f00000017c0)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) creat(&(0x7f0000000240)='./bus\x00', 0xc2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x0, 0x1, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r3 = gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/55, 0x37}], 0x3, 0x0) 12.925819758s ago: executing program 1 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12.764319677s ago: executing program 1 (id=304): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 12.744985147s ago: executing program 32 (id=304): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 3.235841212s ago: executing program 5 (id=510): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r2) 3.214469632s ago: executing program 5 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 3.188965982s ago: executing program 5 (id=513): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23e, &(0x7f0000000780)="$eJzs3TtoNFUYBuB3Znf9zQWJ2gjiBUREAyF2gk1sFAISgoigQkTERkmEmGCXtbKx0FollU0QO6OlpAk2imAVNUVsBA0WBgstVnYnkZgLXjbuyD/PA5OZkz1nvjPsvGe3GTZAY00lmUvSSjKdpJOkON3h7mqbOm5uju0uJb3eEz8Vg35Vu3IybiJJN8lDSXbKIi+1k/XtZw5+2XvsvjfXOve+v/302KB/d5RXmhwe7D9+9N7CGx/NP7j+xVc/LBSZy+SfruvqFRf8r10kt/wXxf4ninbdM+DvWHztw6/7ub81yT2D/HdSpnrz3lq9YaeTB969bOzbP355+yjnCly9Xq/T/wzs9oDGKZNMpihnklTHZTkzU32H/6Y1Xr68svrq9Isra8sv1L1SAVdlMtl/9JNrH0+cyf/3rSr/wPWrn/8nF7e+7R8fteqeDTASd1S7fv6nn9u4P/IPjSP/0FzyD80l/9Bc8g/NJf/QXPIPzSX/0FzyD80l/9Bcp/MPADRL71rdTyADdal7/QEAAAAAAAAAAAAAAAAAAM7bHNtdOtlGVfOzd5LDR5K0L6rfGvwecXLj4O/4z0W/2x+KathQnr1ryBMM6YOan76+6bt6639+Z731N5aT7utJZtvt8/dfcXz//Xs3/8XrneeHLPAPFWfaDz812vpn/bZVb/35veTT/voze9H6U+a2wf7y9aczZP1Xfh3yBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzM7wEAAP//EuJtvQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv2(r0, 0x0, 0x0, 0x4, 0x9d2d, 0xe) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write(r2, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) 3.007329101s ago: executing program 5 (id=523): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') preadv(r1, &(0x7f0000002240)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800090000000000000000001c14"], 0x24}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000200)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 2.450203149s ago: executing program 5 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x48f2, 0x0, 0x3, 0x2089}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r3, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 2.127873868s ago: executing program 5 (id=540): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) mbind(&(0x7f0000579000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000110001000000004003000000002a7b49", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468315f6d616376746170"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='f2fs_background_gc\x00', r2, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000400)=':\x00', 0xfffffffffffffffe) capset(0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) epoll_create1(0x0) 1.294052205s ago: executing program 3 (id=565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f00000001c0)=[{0x8, 0xd, 0xc9, 0x6}, {0x6, 0x5, 0x42, 0xb54}, {0xf06, 0x4, 0x6, 0xfff}]}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000030000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}, {&(0x7f00000000c0)="b67e", 0x2}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r8 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r8, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x8000}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) fsetxattr$security_evm(r7, &(0x7f0000000180), &(0x7f0000000300)=@v1={0x2, 'j1m'}, 0x4, 0x2) 1.128222225s ago: executing program 3 (id=569): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000680), 0x8, 0x3, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.113553745s ago: executing program 3 (id=570): r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000300)={0x200f}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) 998.317514ms ago: executing program 3 (id=572): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000680), 0x8, 0x3, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 994.471424ms ago: executing program 3 (id=573): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x0, 0x31, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x81}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) 749.253144ms ago: executing program 2 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f00000001c0)=[{0x8, 0xd, 0xc9, 0x6}, {0x6, 0x5, 0x42, 0xb54}, {0xf06, 0x4, 0x6, 0xfff}]}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000030000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}, {&(0x7f00000000c0)="b67e", 0x2}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r8 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r8, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x8000}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) fsetxattr$security_evm(r7, &(0x7f0000000180), &(0x7f0000000300)=@v1={0x2, 'j1m'}, 0x4, 0x2) 560.928712ms ago: executing program 4 (id=583): r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000300)={0x200f}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) 410.113982ms ago: executing program 4 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f00000001c0)=[{0x8, 0xd, 0xc9, 0x6}, {0x6, 0x5, 0x42, 0xb54}, {0xf06, 0x4, 0x6, 0xfff}]}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000030000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}, {&(0x7f00000000c0)="b67e", 0x2}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r8 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r8, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x8000}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) fsetxattr$security_evm(r7, &(0x7f0000000180), &(0x7f0000000300)=@v1={0x2, 'j1m'}, 0x4, 0x2) 320.637302ms ago: executing program 2 (id=588): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002"], 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 320.011822ms ago: executing program 2 (id=589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4ff0b372b90bb2fbc73d7374bd7469633a765a83193ebc3b60aa70"]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 277.890221ms ago: executing program 2 (id=590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 251.448681ms ago: executing program 0 (id=591): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), 0x0}, 0x20) 231.126361ms ago: executing program 2 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 225.625781ms ago: executing program 0 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000320000000c"], 0x28}}, 0x0) 200.003881ms ago: executing program 4 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRESOCT], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000004c0)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='devlink_hwerr\x00', r3, 0x0, 0x1000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0x0, &(0x7f00000003c0)=&(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)}, &(0x7f0000001cc0)=0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x400c0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000080a05000000000a01080000000000000000030000000900010073797a310000000020000000020a010400009af6725d6a8dc2dc000009001f0a030000000000000000000300000008000340000000000900010073797a31000000000901020000000000000000000000000400"], 0x9c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x0, 0x34, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) eventfd2(0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4000000000000000, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000040)={0x40, 0x8, 0x1008, 0x5, 0x8, 0x26, 0x38, "195847a0aa45de6ba8ea4130c81b99fe0129f7cf", "39e8599818f836f17fc62a065f77a36d35695c8b"}) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1801) r10 = accept4$packet(r9, &(0x7f0000000000), &(0x7f0000000180)=0x14, 0x80800) accept4$packet(r10, &(0x7f00000001c0), &(0x7f0000000280)=0x14, 0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) 191.339421ms ago: executing program 0 (id=595): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001466000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) 190.479291ms ago: executing program 2 (id=596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x47, &(0x7f0000000380)=""/71, 0xc1100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(0x0) r1 = open(&(0x7f0000000900)='./file0\x00', 0x101080, 0x100) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = msgget(0x0, 0x2c4) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x2000, 0x0) msgctl$IPC_RMID(r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x809404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x302000, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x120b, &(0x7f0000002300)="$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") timer_gettime(0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f00000002c0)}) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0026de28cada21090000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf2501000000080001000b0000000c0099000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) close(0x3) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mq_notify(r5, 0x0) io_setup(0x200, 0x0) 127.381551ms ago: executing program 4 (id=597): r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000300)={0x200f}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) 126.231811ms ago: executing program 0 (id=598): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xf}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000980)=""/221, 0xdd}], 0x5, &(0x7f0000000180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000001280)=[{&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000b00)=""/187, 0xbb}, {&(0x7f0000000bc0)=""/169, 0xa9}, {&(0x7f0000000c80)=""/196, 0xc4}, {&(0x7f0000000d80)=""/97, 0x61}, {&(0x7f0000000e00)=""/135, 0x87}, {&(0x7f0000000ec0)=""/190, 0xbe}, {&(0x7f0000000f80)=""/181, 0xb5}, {&(0x7f0000001040)=""/244, 0xf4}, {&(0x7f0000001180)=""/232, 0xe8}], 0xa, &(0x7f0000001340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000001480)=""/196, 0xc4}], 0x1, &(0x7f0000001580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f0000001740)=""/138, 0x8a}, {&(0x7f0000001800)=""/44, 0x2c}, {&(0x7f0000001840)=""/27, 0x1b}, {&(0x7f0000001880)=""/22, 0x16}, {&(0x7f00000018c0)=""/165, 0xa5}], 0x6}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a00)=""/39, 0x27}, {&(0x7f0000001a40)=""/95, 0x5f}, {&(0x7f0000001ac0)=""/175, 0xaf}, {&(0x7f0000001b80)=""/26, 0x1a}, {&(0x7f0000001bc0)=""/220, 0xdc}, {&(0x7f0000001cc0)=""/164, 0xa4}], 0x6}}], 0x5, 0x2000, &(0x7f0000001f40)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 119.789341ms ago: executing program 3 (id=599): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000041a0c34662000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getresuid(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) fadvise64(r5, 0x80000000, 0x3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r7, 0x0, 0x1b) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x44800000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 67.990281ms ago: executing program 0 (id=600): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000080)}, 0x20) 46.68965ms ago: executing program 0 (id=601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) (fail_nth: 5) 20.49657ms ago: executing program 4 (id=602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 0s ago: executing program 4 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000), 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4aa1", 0x5, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xff2e) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1b, &(0x7f00000000c0)=0x7a, 0x4) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000400)={0xffffffff, 0x4, 0x5, 0x1, 0x10, "90460b8a48917966d89d9069d567ae9713f1fb"}) kernel console output (not intermixed with test programs): 081 - 0 [ 27.027777][ T3301] veth0_macvtap: entered promiscuous mode [ 27.041881][ T3296] veth0_vlan: entered promiscuous mode [ 27.049396][ T3301] veth1_macvtap: entered promiscuous mode [ 27.064765][ T3297] veth0_vlan: entered promiscuous mode [ 27.073003][ T3296] veth1_vlan: entered promiscuous mode [ 27.076418][ T29] audit: type=1400 audit(1738513565.692:110): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.wRU6fR/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.082352][ T3303] veth0_macvtap: entered promiscuous mode [ 27.102710][ T29] audit: type=1400 audit(1738513565.692:111): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.113364][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.130444][ T29] audit: type=1400 audit(1738513565.692:112): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.wRU6fR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.140871][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.166078][ T29] audit: type=1400 audit(1738513565.702:113): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.180341][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.212218][ T3296] veth0_macvtap: entered promiscuous mode [ 27.220007][ T3297] veth1_vlan: entered promiscuous mode [ 27.220252][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.233968][ T3296] veth1_macvtap: entered promiscuous mode [ 27.247091][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.257592][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.268050][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.275821][ T3303] veth1_macvtap: entered promiscuous mode [ 27.282881][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.291636][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.300430][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.309144][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.343398][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.354059][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.364016][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.374540][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.391168][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.403564][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.414062][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.423974][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.434530][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.444328][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.454889][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.458027][ T3438] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 27.468307][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.480927][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.491518][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.501402][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.511891][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.523335][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.532284][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.541025][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.549832][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.558632][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.575490][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.586161][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.596036][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.606467][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.616283][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.626714][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.638260][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.650027][ T3297] veth0_macvtap: entered promiscuous mode [ 27.665111][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.673874][ T3296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.682765][ T3296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.691546][ T3296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.700607][ T3439] loop1: detected capacity change from 0 to 164 [ 27.708059][ T3297] veth1_macvtap: entered promiscuous mode [ 27.722607][ T3439] ISOFS: unable to read i-node block [ 27.727992][ T3439] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 27.756322][ T3443] macvlan0: entered promiscuous mode [ 27.762232][ T3443] ipvlan0: entered promiscuous mode [ 27.771731][ T3443] ipvlan0: left promiscuous mode [ 27.778636][ T3443] macvlan0: left promiscuous mode [ 27.806454][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.816949][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.826839][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.828122][ T3446] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 27.837280][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.854568][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.865001][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.874908][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.885359][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.896071][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.904734][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.915242][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.925060][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.935527][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.945501][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.955965][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.965770][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.976221][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.987167][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.009631][ T3447] vlan2: entered promiscuous mode [ 28.044063][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.052841][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061554][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.070280][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.202367][ T3451] loop3: detected capacity change from 0 to 512 [ 28.222007][ T3474] @: renamed from vlan0 (while UP) [ 28.231695][ T3478] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.323080][ T3451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.336192][ T3451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.357462][ T3475] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 28.357462][ T3475] program syz.0.9 not setting count and/or reply_len properly [ 28.359452][ T3478] vlan2: entered promiscuous mode [ 28.418545][ T3451] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.467102][ T3488] Cannot find add_set index 4 as target [ 28.511518][ T3480] mmap: syz.4.5 (3480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.535366][ T3490] macvlan0: entered promiscuous mode [ 28.550661][ T3490] ipvlan0: entered promiscuous mode [ 28.576413][ T3490] ipvlan0: left promiscuous mode [ 28.588209][ T3451] EXT4-fs (loop3): 1 truncate cleaned up [ 28.594078][ T3490] macvlan0: left promiscuous mode [ 28.657949][ T3451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.697170][ T3498] vlan2: entered promiscuous mode [ 28.718668][ T3502] netlink: 'syz.4.20': attribute type 280 has an invalid length. [ 28.779837][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.942516][ T3518] loop3: detected capacity change from 0 to 128 [ 28.952690][ T3518] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 28.990026][ T3518] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 28.998097][ T3518] FAT-fs (loop3): Filesystem has been set read-only [ 29.021972][ T3518] syz.3.24: attempt to access beyond end of device [ 29.021972][ T3518] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 29.039677][ T3518] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 29.047659][ T3518] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 29.056227][ T3518] syz.3.24: attempt to access beyond end of device [ 29.056227][ T3518] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.071200][ T3518] syz.3.24: attempt to access beyond end of device [ 29.071200][ T3518] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.287660][ T3521] Y4`Ҙ: renamed from lo (while UP) [ 29.577757][ T3535] loop0: detected capacity change from 0 to 256 [ 29.619710][ T3535] vfat: Unknown parameter '4#T/Mֽr' [ 29.622637][ T3537] netlink: 'syz.2.31': attribute type 280 has an invalid length. [ 29.752229][ T3543] loop3: detected capacity change from 0 to 512 [ 29.790739][ T3543] ======================================================= [ 29.790739][ T3543] WARNING: The mand mount option has been deprecated and [ 29.790739][ T3543] and is ignored by this kernel. Remove the mand [ 29.790739][ T3543] option from the mount to silence this warning. [ 29.790739][ T3543] ======================================================= [ 29.847155][ T3543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.859929][ T3543] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.872123][ T3543] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 29.898648][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.001520][ T3561] xt_hashlimit: max too large, truncated to 1048576 [ 30.017065][ T3561] loop1: detected capacity change from 0 to 1024 [ 30.027931][ T3561] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 30.038852][ T3561] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 30.049134][ T3561] JBD2: no valid journal superblock found [ 30.054896][ T3561] EXT4-fs (loop1): Could not load journal inode [ 30.104933][ T3563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.114360][ T3433] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.122296][ T3563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.132962][ T3433] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.605470][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 30.605482][ T29] audit: type=1400 audit(1738513569.232:345): avc: denied { mount } for pid=3567 comm="syz.2.41" name="/" dev="ramfs" ino=4774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 30.674485][ T29] audit: type=1400 audit(1738513569.262:346): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 30.696486][ T29] audit: type=1400 audit(1738513569.262:347): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.718041][ T29] audit: type=1400 audit(1738513569.262:348): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.740460][ T29] audit: type=1400 audit(1738513569.262:349): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.770202][ T29] audit: type=1400 audit(1738513569.392:350): avc: denied { write } for pid=3572 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.790431][ T29] audit: type=1400 audit(1738513569.392:351): avc: denied { read } for pid=3572 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.830934][ T3573] netlink: 'syz.3.43': attribute type 280 has an invalid length. [ 30.939951][ T29] audit: type=1400 audit(1738513569.552:352): avc: denied { write } for pid=3581 comm="syz.1.47" name="event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.963106][ T29] audit: type=1400 audit(1738513569.552:353): avc: denied { open } for pid=3581 comm="syz.1.47" path="/dev/input/event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.986947][ T29] audit: type=1400 audit(1738513569.562:354): avc: denied { read } for pid=3581 comm="syz.1.47" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.125251][ T3596] loop2: detected capacity change from 0 to 128 [ 31.132913][ T3596] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 31.150767][ T3598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'. [ 31.163312][ T3596] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 31.171220][ T3596] FAT-fs (loop2): Filesystem has been set read-only [ 31.190582][ T3596] syz.2.49: attempt to access beyond end of device [ 31.190582][ T3596] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 31.195341][ T3604] FAULT_INJECTION: forcing a failure. [ 31.195341][ T3604] name failslab, interval 1, probability 0, space 0, times 1 [ 31.216788][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.3.53 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 31.216880][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 31.216893][ T3604] Call Trace: [ 31.216898][ T3604] [ 31.216905][ T3604] dump_stack_lvl+0xf2/0x150 [ 31.216931][ T3604] dump_stack+0x15/0x1a [ 31.216949][ T3604] should_fail_ex+0x24a/0x260 [ 31.216998][ T3604] should_failslab+0x8f/0xb0 [ 31.217101][ T3604] __kmalloc_node_noprof+0xad/0x410 [ 31.217127][ T3604] ? __vmalloc_node_range_noprof+0x3dc/0xe70 [ 31.217148][ T3604] __vmalloc_node_range_noprof+0x3dc/0xe70 [ 31.217171][ T3604] ? mntput_no_expire+0x70/0x3d0 [ 31.217222][ T3604] ? selinux_capable+0x1f2/0x260 [ 31.217250][ T3604] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 31.217273][ T3604] __vmalloc_noprof+0x5e/0x70 [ 31.217368][ T3604] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 31.217389][ T3604] bpf_prog_alloc_no_stats+0x49/0x380 [ 31.217409][ T3604] ? bpf_prog_alloc+0x28/0x150 [ 31.217454][ T3604] bpf_prog_alloc+0x3a/0x150 [ 31.217485][ T3604] bpf_prog_load+0x4d0/0x1070 [ 31.217510][ T3604] ? __rcu_read_unlock+0x4e/0x70 [ 31.217534][ T3604] __sys_bpf+0x463/0x7a0 [ 31.217557][ T3604] __x64_sys_bpf+0x43/0x50 [ 31.217637][ T3604] x64_sys_call+0x2914/0x2dc0 [ 31.217657][ T3604] do_syscall_64+0xc9/0x1c0 [ 31.217765][ T3604] ? clear_bhb_loop+0x55/0xb0 [ 31.217786][ T3604] ? clear_bhb_loop+0x55/0xb0 [ 31.217811][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.217838][ T3604] RIP: 0033:0x7f4be924cda9 [ 31.217918][ T3604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.217933][ T3604] RSP: 002b:00007f4be78b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 31.217947][ T3604] RAX: ffffffffffffffda RBX: 00007f4be9465fa0 RCX: 00007f4be924cda9 [ 31.217958][ T3604] RDX: 0000000000000094 RSI: 00000000200005c0 RDI: 0000000000000005 [ 31.217969][ T3604] RBP: 00007f4be78b7090 R08: 0000000000000000 R09: 0000000000000000 [ 31.217979][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.218033][ T3604] R13: 0000000000000000 R14: 00007f4be9465fa0 R15: 00007ffd5066f028 [ 31.218047][ T3604] [ 31.218053][ T3604] syz.3.53: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 31.225482][ T3596] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 31.228278][ T3604] ,cpuset= [ 31.238372][ T3596] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 31.241646][ T3604] /,mems_allowed=0 [ 31.241665][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.3.53 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 31.241684][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 31.241694][ T3604] Call Trace: [ 31.241700][ T3604] [ 31.241779][ T3604] dump_stack_lvl+0xf2/0x150 [ 31.241803][ T3604] dump_stack+0x15/0x1a [ 31.241821][ T3604] warn_alloc+0x145/0x1b0 [ 31.241842][ T3604] __vmalloc_node_range_noprof+0x473/0xe70 [ 31.241940][ T3604] ? selinux_capable+0x1f2/0x260 [ 31.241965][ T3604] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 31.242056][ T3604] __vmalloc_noprof+0x5e/0x70 [ 31.242075][ T3604] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 31.242097][ T3604] bpf_prog_alloc_no_stats+0x49/0x380 [ 31.242118][ T3604] ? bpf_prog_alloc+0x28/0x150 [ 31.242205][ T3604] bpf_prog_alloc+0x3a/0x150 [ 31.242226][ T3604] bpf_prog_load+0x4d0/0x1070 [ 31.242249][ T3604] ? __rcu_read_unlock+0x4e/0x70 [ 31.242273][ T3604] __sys_bpf+0x463/0x7a0 [ 31.242298][ T3604] __x64_sys_bpf+0x43/0x50 [ 31.242349][ T3604] x64_sys_call+0x2914/0x2dc0 [ 31.242449][ T3604] do_syscall_64+0xc9/0x1c0 [ 31.242475][ T3604] ? clear_bhb_loop+0x55/0xb0 [ 31.242499][ T3604] ? clear_bhb_loop+0x55/0xb0 [ 31.242521][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.242556][ T3604] RIP: 0033:0x7f4be924cda9 [ 31.242569][ T3604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.242585][ T3604] RSP: 002b:00007f4be78b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 31.242601][ T3604] RAX: ffffffffffffffda RBX: 00007f4be9465fa0 RCX: 00007f4be924cda9 [ 31.242611][ T3604] RDX: 0000000000000094 RSI: 00000000200005c0 RDI: 0000000000000005 [ 31.242697][ T3604] RBP: 00007f4be78b7090 R08: 0000000000000000 R09: 0000000000000000 [ 31.242708][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.242718][ T3604] R13: 0000000000000000 R14: 00007f4be9465fa0 R15: 00007ffd5066f028 [ 31.242733][ T3604] [ 31.242739][ T3604] Mem-Info: [ 31.264580][ T3596] syz.2.49: attempt to access beyond end of device [ 31.264580][ T3596] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.267869][ T3604] active_anon:9050 inactive_anon:0 isolated_anon:0 [ 31.267869][ T3604] active_file:4501 inactive_file:2021 isolated_file:0 [ 31.267869][ T3604] unevictable:0 dirty:1448 writeback:0 [ 31.267869][ T3604] slab_reclaimable:2685 slab_unreclaimable:13196 [ 31.267869][ T3604] mapped:28468 shmem:240 pagetables:872 [ 31.267869][ T3604] sec_pagetables:0 bounce:0 [ 31.267869][ T3604] kernel_misc_reclaimable:0 [ 31.267869][ T3604] free:1904173 free_pcp:10087 free_cma:0 [ 31.275996][ T3596] syz.2.49: attempt to access beyond end of device [ 31.275996][ T3596] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.279606][ T3604] Node 0 active_anon:36200kB inactive_anon:0kB active_file:18004kB inactive_file:8084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113872kB dirty:5792kB writeback:0kB shmem:960kB writeback_tmp:0kB kernel_stack:2736kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no [ 31.423853][ T3608] loop1: detected capacity change from 0 to 1024 [ 31.427284][ T3604] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 31.450554][ T3608] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 31.453167][ T3604] lowmem_reserve[]: [ 31.473124][ T3608] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 31.475543][ T3604] 0 2885 7863 0 [ 31.475567][ T3604] Node 0 DMA32 free:2950968kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954500kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 31.502004][ T3608] jbd2_journal_init_inode: Cannot locate journal superblock [ 31.506727][ T3604] lowmem_reserve[]: [ 31.510762][ T3608] EXT4-fs (loop1): Could not load journal inode [ 31.515160][ T3604] 0 0 4978 0 [ 31.886205][ T3604] Node 0 Normal free:4642248kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:45728kB inactive_anon:0kB active_file:18040kB inactive_file:8132kB unevictable:0kB writepending:5792kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:34944kB local_pcp:29500kB free_cma:0kB [ 31.916684][ T3604] lowmem_reserve[]: 0 0 0 0 [ 31.921213][ T3604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 31.934013][ T3604] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950968kB [ 31.950325][ T3604] Node 0 Normal: 1*4kB (U) 1*8kB (E) 0*16kB 2*32kB (ME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 1133*4096kB (UM) = 4642188kB [ 31.965830][ T3604] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 31.975141][ T3604] 6930 total pagecache pages [ 31.979728][ T3604] 0 pages in swap cache [ 31.983886][ T3604] Free swap = 124516kB [ 31.988092][ T3604] Total swap = 124996kB [ 31.992235][ T3604] 2097051 pages RAM [ 31.996061][ T3604] 0 pages HighMem/MovableOnly [ 31.997345][ T3617] bond_slave_1: entered promiscuous mode [ 32.000716][ T3604] 80034 pages reserved [ 32.006698][ T3619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 32.059113][ T3611] bond_slave_1: left promiscuous mode [ 32.076684][ T3625] netlink: 'syz.0.61': attribute type 61 has an invalid length. [ 32.095180][ T3611] binfmt_misc: register: failed to install interpreter file ./file0 [ 32.168226][ T3633] sd 0:0:1:0: device reset [ 32.277251][ T3641] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 32.323435][ T3647] lo speed is unknown, defaulting to 1000 [ 32.332262][ T3647] lo speed is unknown, defaulting to 1000 [ 32.339837][ T3647] lo speed is unknown, defaulting to 1000 [ 32.363920][ T3647] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.364558][ T3652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 32.374342][ T3647] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 32.394877][ T3654] sd 0:0:1:0: device reset [ 32.401461][ T3647] lo speed is unknown, defaulting to 1000 [ 32.430075][ T3647] lo speed is unknown, defaulting to 1000 [ 32.437668][ T3658] FAULT_INJECTION: forcing a failure. [ 32.437668][ T3658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.450803][ T3658] CPU: 0 UID: 0 PID: 3658 Comm: syz.0.75 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 32.450827][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 32.450838][ T3658] Call Trace: [ 32.450843][ T3658] [ 32.450860][ T3658] dump_stack_lvl+0xf2/0x150 [ 32.450881][ T3658] dump_stack+0x15/0x1a [ 32.450896][ T3658] should_fail_ex+0x24a/0x260 [ 32.450923][ T3658] should_fail+0xb/0x10 [ 32.450984][ T3658] should_fail_usercopy+0x1a/0x20 [ 32.451002][ T3658] _copy_from_iter+0xd5/0xd00 [ 32.451022][ T3658] ? alloc_pages_mpol+0x208/0x260 [ 32.451123][ T3658] copy_page_from_iter+0x14f/0x280 [ 32.451209][ T3658] tun_get_user+0x68b/0x25c0 [ 32.451235][ T3658] ? avc_has_perm+0xd4/0x160 [ 32.451257][ T3658] ? ref_tracker_alloc+0x1f5/0x2f0 [ 32.451322][ T3658] tun_chr_write_iter+0x188/0x240 [ 32.451346][ T3658] vfs_write+0x77b/0x920 [ 32.451370][ T3658] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 32.451397][ T3658] ksys_write+0xe8/0x1b0 [ 32.451413][ T3658] __x64_sys_write+0x42/0x50 [ 32.451553][ T3658] x64_sys_call+0x287e/0x2dc0 [ 32.451648][ T3658] do_syscall_64+0xc9/0x1c0 [ 32.451668][ T3658] ? clear_bhb_loop+0x55/0xb0 [ 32.451690][ T3658] ? clear_bhb_loop+0x55/0xb0 [ 32.451714][ T3658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.451807][ T3658] RIP: 0033:0x7f0bc776b85f [ 32.451819][ T3658] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 32.451834][ T3658] RSP: 002b:00007f0bc5dd1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 32.451922][ T3658] RAX: ffffffffffffffda RBX: 00007f0bc7985fa0 RCX: 00007f0bc776b85f [ 32.451934][ T3658] RDX: 000000000000003e RSI: 0000000020000500 RDI: 00000000000000c8 [ 32.451945][ T3658] RBP: 00007f0bc5dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 32.451956][ T3658] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 32.451965][ T3658] R13: 0000000000000000 R14: 00007f0bc7985fa0 R15: 00007ffcbfd44038 [ 32.451979][ T3658] [ 32.660950][ T3647] lo speed is unknown, defaulting to 1000 [ 32.667035][ T3647] lo speed is unknown, defaulting to 1000 [ 32.674038][ T3647] lo speed is unknown, defaulting to 1000 [ 32.714174][ T3661] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.734054][ T3661] tmpfs: Bad value for 'mpol' [ 32.761637][ T3666] 9pnet_fd: Insufficient options for proto=fd [ 32.792460][ T3670] netlink: 'syz.1.80': attribute type 280 has an invalid length. [ 32.843666][ T3676] pim6reg: entered allmulticast mode [ 32.851784][ T3674] lo speed is unknown, defaulting to 1000 [ 32.899737][ T3683] geneve2: entered promiscuous mode [ 32.905060][ T3683] geneve2: entered allmulticast mode [ 32.943245][ T3685] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 32.999990][ T3672] loop3: detected capacity change from 0 to 32768 [ 33.040975][ T3687] loop1: detected capacity change from 0 to 512 [ 33.049894][ T3687] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.070945][ T3687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 33.079016][ T3687] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.086631][ T3687] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.86: attempt to clear invalid blocks 1024 len 1 [ 33.103916][ T3687] EXT4-fs (loop1): Remounting filesystem read-only [ 33.115327][ T3687] EXT4-fs (loop1): 1 truncate cleaned up [ 33.121374][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 33.133935][ T3687] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 33.140806][ T3687] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 33.261733][ T3705] netlink: 'syz.1.93': attribute type 280 has an invalid length. [ 33.295896][ T3707] vlan2: entered promiscuous mode [ 33.366335][ T3719] macvlan0: entered promiscuous mode [ 33.396854][ T3719] ipvlan0: entered promiscuous mode [ 33.402593][ T3719] ipvlan0: left promiscuous mode [ 33.420168][ T3719] macvlan0: left promiscuous mode [ 33.484275][ T3736] 9pnet_fd: Insufficient options for proto=fd [ 33.502184][ T3738] FAULT_INJECTION: forcing a failure. [ 33.502184][ T3738] name failslab, interval 1, probability 0, space 0, times 0 [ 33.514974][ T3738] CPU: 1 UID: 0 PID: 3738 Comm: syz.2.103 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 33.514997][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 33.515008][ T3738] Call Trace: [ 33.515015][ T3738] [ 33.515022][ T3738] dump_stack_lvl+0xf2/0x150 [ 33.515058][ T3738] dump_stack+0x15/0x1a [ 33.515076][ T3738] should_fail_ex+0x24a/0x260 [ 33.515146][ T3738] should_failslab+0x8f/0xb0 [ 33.515169][ T3738] kmem_cache_alloc_node_noprof+0x59/0x320 [ 33.515239][ T3738] ? __alloc_skb+0x10b/0x310 [ 33.515262][ T3738] __alloc_skb+0x10b/0x310 [ 33.515354][ T3738] netlink_alloc_large_skb+0xad/0xe0 [ 33.515380][ T3738] netlink_sendmsg+0x3b4/0x6e0 [ 33.515410][ T3738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.515475][ T3738] __sock_sendmsg+0x140/0x180 [ 33.515492][ T3738] ____sys_sendmsg+0x312/0x410 [ 33.515599][ T3738] __sys_sendmsg+0x19d/0x230 [ 33.515632][ T3738] __x64_sys_sendmsg+0x46/0x50 [ 33.515656][ T3738] x64_sys_call+0x2734/0x2dc0 [ 33.515678][ T3738] do_syscall_64+0xc9/0x1c0 [ 33.515746][ T3738] ? clear_bhb_loop+0x55/0xb0 [ 33.515845][ T3738] ? clear_bhb_loop+0x55/0xb0 [ 33.515868][ T3738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.515892][ T3738] RIP: 0033:0x7f2aab2dcda9 [ 33.515981][ T3738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.515997][ T3738] RSP: 002b:00007f2aa98ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.516014][ T3738] RAX: ffffffffffffffda RBX: 00007f2aab4f6160 RCX: 00007f2aab2dcda9 [ 33.516026][ T3738] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 33.516051][ T3738] RBP: 00007f2aa98ff090 R08: 0000000000000000 R09: 0000000000000000 [ 33.516063][ T3738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.516074][ T3738] R13: 0000000000000000 R14: 00007f2aab4f6160 R15: 00007ffc36477a38 [ 33.516091][ T3738] [ 33.813407][ T3753] netlink: 'syz.4.111': attribute type 280 has an invalid length. [ 33.854846][ T3756] FAULT_INJECTION: forcing a failure. [ 33.854846][ T3756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.868146][ T3756] CPU: 0 UID: 0 PID: 3756 Comm: syz.4.114 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 33.868166][ T3756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 33.868176][ T3756] Call Trace: [ 33.868182][ T3756] [ 33.868187][ T3756] dump_stack_lvl+0xf2/0x150 [ 33.868214][ T3756] dump_stack+0x15/0x1a [ 33.868231][ T3756] should_fail_ex+0x24a/0x260 [ 33.868323][ T3756] should_fail+0xb/0x10 [ 33.868361][ T3756] should_fail_usercopy+0x1a/0x20 [ 33.868378][ T3756] _copy_from_user+0x1c/0xa0 [ 33.868399][ T3756] __x64_sys_signalfd+0x7c/0xe0 [ 33.868427][ T3756] x64_sys_call+0x2c70/0x2dc0 [ 33.868494][ T3756] do_syscall_64+0xc9/0x1c0 [ 33.868516][ T3756] ? clear_bhb_loop+0x55/0xb0 [ 33.868551][ T3756] ? clear_bhb_loop+0x55/0xb0 [ 33.868573][ T3756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.868597][ T3756] RIP: 0033:0x7fec9ec3cda9 [ 33.868611][ T3756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.868700][ T3756] RSP: 002b:00007fec9d2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 33.868718][ T3756] RAX: ffffffffffffffda RBX: 00007fec9ee55fa0 RCX: 00007fec9ec3cda9 [ 33.868729][ T3756] RDX: 0000000000000008 RSI: 0000000020000280 RDI: ffffffffffffffff [ 33.868741][ T3756] RBP: 00007fec9d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.868752][ T3756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.868764][ T3756] R13: 0000000000000000 R14: 00007fec9ee55fa0 R15: 00007fffe91a33b8 [ 33.868781][ T3756] [ 34.069091][ T3764] vlan2: entered promiscuous mode [ 34.084095][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 34.092365][ T3771] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 34.105251][ T3768] macvlan0: entered promiscuous mode [ 34.111768][ T3768] ipvlan0: entered promiscuous mode [ 34.125720][ T3768] ipvlan0: left promiscuous mode [ 34.131251][ T3768] macvlan0: left promiscuous mode [ 34.160392][ T3776] 9pnet_fd: Insufficient options for proto=fd [ 34.202937][ T3780] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 34.275532][ T3786] netlink: 'syz.4.125': attribute type 280 has an invalid length. [ 34.276134][ T3790] loop3: detected capacity change from 0 to 512 [ 34.323199][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.357102][ T3790] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.374805][ T3790] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 34.406914][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.595734][ T3811] loop3: detected capacity change from 0 to 512 [ 34.606499][ T3811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.619319][ T3811] EXT4-fs (loop3): 1 truncate cleaned up [ 34.626142][ T3811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.649311][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.670558][ T3814] TCP: TCP_TX_DELAY enabled [ 34.727758][ T3818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.139'. [ 34.740636][ T3818] loop1: detected capacity change from 0 to 512 [ 34.750154][ T3820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 34.770643][ T3818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.139: bg 0: block 248: padding at end of block bitmap is not set [ 34.789220][ T3824] netlink: 'syz.3.141': attribute type 280 has an invalid length. [ 34.789255][ T3818] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.139: Failed to acquire dquot type 1 [ 34.809701][ T3818] EXT4-fs (loop1): 1 truncate cleaned up [ 34.817131][ T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.830108][ T3818] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.850609][ T3818] syz.1.139 (3818) used greatest stack depth: 9280 bytes left [ 34.859169][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.890198][ T3833] siw: device registration error -23 [ 34.932039][ T3841] loop1: detected capacity change from 0 to 512 [ 34.939238][ T3841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.950123][ T3841] EXT4-fs (loop1): 1 truncate cleaned up [ 34.956335][ T3841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.977559][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.003549][ T3844] sd 0:0:1:0: device reset [ 35.012774][ T3846] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 35.028735][ T3848] 9pnet_fd: Insufficient options for proto=fd [ 35.047365][ T3850] loop3: detected capacity change from 0 to 512 [ 35.066390][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.079133][ T3850] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.095245][ T3850] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.117458][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.182007][ T3862] capability: warning: `syz.1.154' uses deprecated v2 capabilities in a way that may be insecure [ 35.206527][ T3864] loop2: detected capacity change from 0 to 1024 [ 35.213115][ T3864] EXT4-fs: Ignoring removed orlov option [ 35.213687][ T3433] kernel write not supported for file /92/coredump_filter (pid: 3433 comm: kworker/1:4) [ 35.223674][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.310794][ T3875] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 35.381656][ T3889] 9pnet_fd: Insufficient options for proto=fd [ 35.398054][ T3864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.548108][ T3906] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 35.588314][ T3910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.607143][ T3910] team0: entered promiscuous mode [ 35.612202][ T3910] team_slave_0: entered promiscuous mode [ 35.617913][ T3910] team_slave_1: entered promiscuous mode [ 35.627050][ T3910] team0 (unregistering): left promiscuous mode [ 35.633267][ T3910] team_slave_0: left promiscuous mode [ 35.638824][ T3910] team_slave_1: left promiscuous mode [ 35.645990][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 35.655529][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 35.678944][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 35.678959][ T29] audit: type=1400 audit(1738513574.302:745): avc: denied { create } for pid=3911 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.706165][ T29] audit: type=1400 audit(1738513574.322:746): avc: denied { write } for pid=3911 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.767419][ T29] audit: type=1400 audit(1738513574.382:747): avc: denied { read } for pid=3913 comm="syz.3.177" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.788514][ T29] audit: type=1400 audit(1738513574.382:748): avc: denied { open } for pid=3913 comm="syz.3.177" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.811594][ T29] audit: type=1400 audit(1738513574.392:749): avc: denied { create } for pid=3913 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.832006][ T29] audit: type=1400 audit(1738513574.392:750): avc: denied { write } for pid=3913 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.852277][ T29] audit: type=1400 audit(1738513574.392:751): avc: denied { read } for pid=3913 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.853101][ T3917] 9pnet_fd: Insufficient options for proto=fd [ 35.874373][ T29] audit: type=1400 audit(1738513574.482:752): avc: denied { mounton } for pid=3916 comm="syz.3.178" path="/49/file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.901616][ T29] audit: type=1400 audit(1738513574.532:753): avc: denied { create } for pid=3911 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.906488][ T3918] xt_hashlimit: max too large, truncated to 1048576 [ 35.927779][ T29] audit: type=1400 audit(1738513574.532:754): avc: denied { setopt } for pid=3911 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.975792][ T3920] loop0: detected capacity change from 0 to 256 [ 35.982426][ T3920] vfat: Unknown parameter 'noail' [ 36.020676][ T3926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'. [ 36.040023][ T3928] 9pnet_fd: Insufficient options for proto=fd [ 36.145148][ T3940] macvlan0: entered promiscuous mode [ 36.165330][ T3940] ipvlan0: entered promiscuous mode [ 36.171070][ T3940] ipvlan0: left promiscuous mode [ 36.177600][ T3940] macvlan0: left promiscuous mode [ 36.182828][ T3918] loop4: detected capacity change from 0 to 1024 [ 36.210445][ T3918] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.221492][ T3918] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.240755][ T3918] JBD2: no valid journal superblock found [ 36.246548][ T3918] EXT4-fs (loop4): Could not load journal inode [ 36.293246][ T3372] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.302141][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.314703][ T3372] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.328247][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.353629][ T3955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'. [ 36.413535][ T3960] FAULT_INJECTION: forcing a failure. [ 36.413535][ T3960] name failslab, interval 1, probability 0, space 0, times 0 [ 36.426228][ T3960] CPU: 1 UID: 0 PID: 3960 Comm: syz.2.198 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 36.426248][ T3960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.426285][ T3960] Call Trace: [ 36.426292][ T3960] [ 36.426299][ T3960] dump_stack_lvl+0xf2/0x150 [ 36.426389][ T3960] dump_stack+0x15/0x1a [ 36.426405][ T3960] should_fail_ex+0x24a/0x260 [ 36.426430][ T3960] should_failslab+0x8f/0xb0 [ 36.426452][ T3960] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 36.426512][ T3960] ? shmem_alloc_inode+0x34/0x50 [ 36.426547][ T3960] shmem_alloc_inode+0x34/0x50 [ 36.426570][ T3960] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 36.426594][ T3960] alloc_inode+0x3c/0x160 [ 36.426647][ T3960] new_inode+0x1e/0x100 [ 36.426711][ T3960] shmem_get_inode+0x24e/0x730 [ 36.426737][ T3960] shmem_mknod+0x44/0x180 [ 36.426753][ T3960] vfs_mknod+0x2d4/0x310 [ 36.426770][ T3960] do_mknodat+0x270/0x420 [ 36.426897][ T3960] __x64_sys_mknod+0x51/0x60 [ 36.426935][ T3960] x64_sys_call+0x16be/0x2dc0 [ 36.427032][ T3960] do_syscall_64+0xc9/0x1c0 [ 36.427049][ T3960] ? clear_bhb_loop+0x55/0xb0 [ 36.427073][ T3960] ? clear_bhb_loop+0x55/0xb0 [ 36.427096][ T3960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.427135][ T3960] RIP: 0033:0x7f2aab2dcda9 [ 36.427149][ T3960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.427163][ T3960] RSP: 002b:00007f2aa9941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 36.427184][ T3960] RAX: ffffffffffffffda RBX: 00007f2aab4f5fa0 RCX: 00007f2aab2dcda9 [ 36.427195][ T3960] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020000000 [ 36.427205][ T3960] RBP: 00007f2aa9941090 R08: 0000000000000000 R09: 0000000000000000 [ 36.427217][ T3960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.427227][ T3960] R13: 0000000000000000 R14: 00007f2aab4f5fa0 R15: 00007ffc36477a38 [ 36.427243][ T3960] [ 36.691117][ T3971] vlan0: entered promiscuous mode [ 36.715921][ T3973] loop3: detected capacity change from 0 to 512 [ 36.728551][ T3973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.729583][ T3977] FAULT_INJECTION: forcing a failure. [ 36.729583][ T3977] name failslab, interval 1, probability 0, space 0, times 0 [ 36.750295][ T3973] EXT4-fs (loop3): 1 truncate cleaned up [ 36.751090][ T3977] CPU: 0 UID: 0 PID: 3977 Comm: syz.4.206 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 36.751112][ T3977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.751122][ T3977] Call Trace: [ 36.751129][ T3977] [ 36.751137][ T3977] dump_stack_lvl+0xf2/0x150 [ 36.751160][ T3977] dump_stack+0x15/0x1a [ 36.751178][ T3977] should_fail_ex+0x24a/0x260 [ 36.751242][ T3977] should_failslab+0x8f/0xb0 [ 36.751306][ T3977] kmem_cache_alloc_noprof+0x52/0x320 [ 36.751333][ T3977] ? sk_prot_alloc+0x41/0x190 [ 36.751357][ T3977] sk_prot_alloc+0x41/0x190 [ 36.751444][ T3977] sk_alloc+0x33/0x360 [ 36.751466][ T3977] unix_create1+0xa6/0x400 [ 36.751543][ T3977] ? release_sock+0x117/0x150 [ 36.751559][ T3977] unix_stream_connect+0x16c/0x9a0 [ 36.751580][ T3977] ? selinux_socket_connect+0x57/0x70 [ 36.751604][ T3977] ? __pfx_unix_stream_connect+0x10/0x10 [ 36.751640][ T3977] __sys_connect+0x18f/0x1b0 [ 36.751664][ T3977] __x64_sys_connect+0x41/0x50 [ 36.751684][ T3977] x64_sys_call+0x22a7/0x2dc0 [ 36.751750][ T3977] do_syscall_64+0xc9/0x1c0 [ 36.751771][ T3977] ? clear_bhb_loop+0x55/0xb0 [ 36.751793][ T3977] ? clear_bhb_loop+0x55/0xb0 [ 36.751815][ T3977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.751885][ T3977] RIP: 0033:0x7fec9ec3cda9 [ 36.751898][ T3977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.751914][ T3977] RSP: 002b:00007fec9d2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 36.751930][ T3977] RAX: ffffffffffffffda RBX: 00007fec9ee55fa0 RCX: 00007fec9ec3cda9 [ 36.751941][ T3977] RDX: 0000000000000025 RSI: 0000000020000000 RDI: 0000000000000004 [ 36.751951][ T3977] RBP: 00007fec9d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.751962][ T3977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.751972][ T3977] R13: 0000000000000000 R14: 00007fec9ee55fa0 R15: 00007fffe91a33b8 [ 36.751988][ T3977] [ 36.877178][ T3983] macvlan0: entered promiscuous mode [ 36.879788][ T3973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.904185][ T3983] ipvlan0: entered promiscuous mode [ 36.983224][ T3983] ipvlan0: left promiscuous mode [ 36.988485][ T3983] macvlan0: left promiscuous mode [ 36.994283][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.262880][ T4002] netlink: 108 bytes leftover after parsing attributes in process `syz.3.209'. [ 37.271906][ T4002] netlink: 108 bytes leftover after parsing attributes in process `syz.3.209'. [ 37.280870][ T4002] netlink: 108 bytes leftover after parsing attributes in process `syz.3.209'. [ 37.322203][ T4003] loop2: detected capacity change from 0 to 512 [ 37.379600][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.454981][ T4003] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.517620][ T4014] loop0: detected capacity change from 0 to 256 [ 37.542030][ T4003] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 37.573535][ T4014] FAT-fs (loop0): Directory bread(block 64) failed [ 37.580455][ T4014] FAT-fs (loop0): Directory bread(block 65) failed [ 37.587687][ T4014] FAT-fs (loop0): Directory bread(block 66) failed [ 37.594285][ T4014] FAT-fs (loop0): Directory bread(block 67) failed [ 37.601146][ T4014] FAT-fs (loop0): Directory bread(block 68) failed [ 37.607804][ T4014] FAT-fs (loop0): Directory bread(block 69) failed [ 37.614770][ T4014] FAT-fs (loop0): Directory bread(block 70) failed [ 37.621690][ T4014] FAT-fs (loop0): Directory bread(block 71) failed [ 37.628549][ T4014] FAT-fs (loop0): Directory bread(block 72) failed [ 37.637894][ T4014] FAT-fs (loop0): Directory bread(block 73) failed [ 37.645179][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.701491][ T4021] macvlan0: entered promiscuous mode [ 37.707990][ T4021] ipvlan0: entered promiscuous mode [ 37.713697][ T4021] ipvlan0: left promiscuous mode [ 37.720960][ T4021] macvlan0: left promiscuous mode [ 37.755883][ T4026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 37.773359][ T4030] 9pnet_fd: Insufficient options for proto=fd [ 37.802353][ T4034] loop0: detected capacity change from 0 to 128 [ 37.858125][ T4034] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 37.926930][ T1426] kworker/u8:5: attempt to access beyond end of device [ 37.926930][ T1426] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 38.064620][ C1] hrtimer: interrupt took 37174 ns [ 38.149607][ T4047] loop0: detected capacity change from 0 to 512 [ 38.212807][ T4047] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.376958][ T3296] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 38.411363][ T4067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 38.462589][ T4069] 9pnet_fd: Insufficient options for proto=fd [ 38.493994][ T4071] vlan2: entered promiscuous mode [ 38.651342][ T4073] lo speed is unknown, defaulting to 1000 [ 38.794377][ T4090] vlan0: entered promiscuous mode [ 38.839403][ T4093] vlan2: entered promiscuous mode [ 38.935568][ T4097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 39.011131][ T4101] loop4: detected capacity change from 0 to 512 [ 39.015564][ T4103] lo speed is unknown, defaulting to 1000 [ 39.068722][ T4107] vlan2: entered promiscuous mode [ 39.086760][ T4101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.108048][ T4101] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.224002][ T4125] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 39.268611][ T4131] 9pnet_fd: Insufficient options for proto=fd [ 39.284942][ T4128] loop2: detected capacity change from 0 to 512 [ 39.330908][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.350510][ T4128] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.408057][ T4140] xt_hashlimit: max too large, truncated to 1048576 [ 39.421954][ T4143] loop1: detected capacity change from 0 to 512 [ 39.434119][ T4143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.447080][ T4143] EXT4-fs (loop1): 1 truncate cleaned up [ 39.453466][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.454146][ T4146] macvlan0: entered promiscuous mode [ 39.472688][ T4146] ipvlan0: entered promiscuous mode [ 39.478341][ T4146] ipvlan0: left promiscuous mode [ 39.483776][ T4146] macvlan0: left promiscuous mode [ 39.491934][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.517305][ T4148] xt_hashlimit: max too large, truncated to 1048576 [ 39.531017][ T4148] loop1: detected capacity change from 0 to 1024 [ 39.538171][ T4148] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.549090][ T4148] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.559960][ T4148] JBD2: no valid journal superblock found [ 39.565731][ T4148] EXT4-fs (loop1): Could not load journal inode [ 39.661255][ T4152] 9pnet_fd: Insufficient options for proto=fd [ 39.673841][ T4152] loop0: detected capacity change from 0 to 512 [ 39.691045][ T4152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.703707][ T4152] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.724747][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.818687][ T4163] 9pnet_fd: Insufficient options for proto=fd [ 39.846475][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.871321][ T4167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 39.924551][ T4157] FAULT_INJECTION: forcing a failure. [ 39.924551][ T4157] name failslab, interval 1, probability 0, space 0, times 0 [ 39.937213][ T4157] CPU: 1 UID: 0 PID: 4157 Comm: syz.1.274 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 39.937236][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.937246][ T4157] Call Trace: [ 39.937252][ T4157] [ 39.937259][ T4157] dump_stack_lvl+0xf2/0x150 [ 39.937308][ T4157] dump_stack+0x15/0x1a [ 39.937324][ T4157] should_fail_ex+0x24a/0x260 [ 39.937354][ T4157] should_failslab+0x8f/0xb0 [ 39.937377][ T4157] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 39.937404][ T4157] ? __d_alloc+0x3d/0x340 [ 39.937478][ T4157] __d_alloc+0x3d/0x340 [ 39.937504][ T4157] d_alloc_parallel+0x54/0xc80 [ 39.937522][ T4157] ? __rcu_read_unlock+0x4e/0x70 [ 39.937542][ T4157] ? __d_lookup+0x342/0x370 [ 39.937558][ T4157] ? inode_permission+0xbf/0x300 [ 39.937671][ T4157] __lookup_slow+0x8d/0x250 [ 39.937695][ T4157] lookup_one_len+0xf1/0x1c0 [ 39.937720][ T4157] start_creating+0x139/0x230 [ 39.937777][ T4157] debugfs_create_dir+0x21/0x2b0 [ 39.937801][ T4157] ldisc_open+0x1c2/0x530 [ 39.937827][ T4157] ? up_write+0x30/0xf0 [ 39.937870][ T4157] tty_ldisc_open+0x65/0xb0 [ 39.937923][ T4157] tty_set_ldisc+0x205/0x3b0 [ 39.937944][ T4157] tiocsetd+0x52/0x60 [ 39.937964][ T4157] tty_ioctl+0xa94/0xbe0 [ 39.937983][ T4157] ? __pfx_tty_ioctl+0x10/0x10 [ 39.938042][ T4157] __se_sys_ioctl+0xc9/0x140 [ 39.938061][ T4157] __x64_sys_ioctl+0x43/0x50 [ 39.938080][ T4157] x64_sys_call+0x1690/0x2dc0 [ 39.938101][ T4157] do_syscall_64+0xc9/0x1c0 [ 39.938119][ T4157] ? clear_bhb_loop+0x55/0xb0 [ 39.938185][ T4157] ? clear_bhb_loop+0x55/0xb0 [ 39.938205][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.938225][ T4157] RIP: 0033:0x7f0b144bcda9 [ 39.938240][ T4157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.938261][ T4157] RSP: 002b:00007f0b12b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.938279][ T4157] RAX: ffffffffffffffda RBX: 00007f0b146d5fa0 RCX: 00007f0b144bcda9 [ 39.938291][ T4157] RDX: 00000000200003c0 RSI: 0000000000005423 RDI: 0000000000000004 [ 39.938302][ T4157] RBP: 00007f0b12b27090 R08: 0000000000000000 R09: 0000000000000000 [ 39.938313][ T4157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.938324][ T4157] R13: 0000000000000000 R14: 00007f0b146d5fa0 R15: 00007fffde628f88 [ 39.938341][ T4157] [ 40.226672][ T4174] sd 0:0:1:0: device reset [ 40.258574][ T4179] netlink: 'syz.4.282': attribute type 280 has an invalid length. [ 40.291789][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.347741][ T4191] xt_hashlimit: max too large, truncated to 1048576 [ 40.362029][ T4192] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 40.410455][ T4191] loop0: detected capacity change from 0 to 1024 [ 40.422199][ T4202] 9pnet_fd: Insufficient options for proto=fd [ 40.452528][ T4191] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.463512][ T4191] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.559336][ T4191] JBD2: no valid journal superblock found [ 40.565127][ T4191] EXT4-fs (loop0): Could not load journal inode [ 40.686745][ T4231] loop1: detected capacity change from 0 to 8192 [ 40.714478][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 40.714492][ T29] audit: type=1400 audit(1738513579.332:1200): avc: denied { mount } for pid=4226 comm="syz.1.296" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.742527][ T29] audit: type=1400 audit(1738513579.332:1201): avc: denied { read } for pid=4226 comm="syz.1.296" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.763591][ T29] audit: type=1400 audit(1738513579.332:1202): avc: denied { open } for pid=4226 comm="syz.1.296" path="net:[4026532511]" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.786730][ T29] audit: type=1400 audit(1738513579.332:1203): avc: denied { create } for pid=4226 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.821090][ T29] audit: type=1400 audit(1738513579.442:1204): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.842793][ T3300] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 40.850811][ T3300] FAT-fs (loop1): Filesystem has been set read-only [ 40.858432][ T4228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.871977][ T29] audit: type=1326 audit(1738513579.472:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be924cda9 code=0x7ffc0000 [ 40.892546][ T4228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.895323][ T29] audit: type=1326 audit(1738513579.472:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be924cda9 code=0x7ffc0000 [ 40.926372][ T29] audit: type=1326 audit(1738513579.492:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4be924b710 code=0x7ffc0000 [ 40.949733][ T29] audit: type=1326 audit(1738513579.492:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4be924c9ab code=0x7ffc0000 [ 40.972988][ T29] audit: type=1400 audit(1738513579.492:1209): avc: denied { ioctl } for pid=4224 comm="syz.3.297" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.007371][ T4244] sd 0:0:1:0: device reset [ 41.041176][ T4228] loop3: detected capacity change from 0 to 2048 [ 41.052105][ T3382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.082935][ T4249] macvlan0: entered promiscuous mode [ 41.123595][ T4249] ipvlan0: entered promiscuous mode [ 41.141426][ T4249] ipvlan0: left promiscuous mode [ 41.147328][ T4249] macvlan0: left promiscuous mode [ 41.157931][ T3382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.170945][ T4254] vlan2: entered allmulticast mode [ 41.218899][ T3382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.250191][ T4251] lo speed is unknown, defaulting to 1000 [ 41.259862][ T3382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.278111][ T4268] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 41.312380][ T4271] vlan2: entered promiscuous mode [ 41.323010][ T4273] team0: entered promiscuous mode [ 41.328153][ T4273] team_slave_0: entered promiscuous mode [ 41.333892][ T4273] team_slave_1: entered promiscuous mode [ 41.345576][ T4273] team0 (unregistering): left promiscuous mode [ 41.351769][ T4273] team_slave_0: left promiscuous mode [ 41.357311][ T4273] team_slave_1: left promiscuous mode [ 41.366044][ T4273] team0 (unregistering): Port device team_slave_0 removed [ 41.375686][ T4273] team0 (unregistering): Port device team_slave_1 removed [ 41.434034][ T3382] bridge_slave_1: left allmulticast mode [ 41.439747][ T3382] bridge_slave_1: left promiscuous mode [ 41.445487][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.464326][ T3382] bridge_slave_0: left allmulticast mode [ 41.470128][ T3382] bridge_slave_0: left promiscuous mode [ 41.475947][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.500159][ T4278] loop4: detected capacity change from 0 to 764 [ 41.545554][ T4278] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.560826][ T4278] usb usb7: usbfs: process 4278 (syz.4.313) did not claim interface 0 before use [ 41.603511][ T4284] loop0: detected capacity change from 0 to 8192 [ 41.616738][ T4284] Zero length message leads to an empty skb [ 41.623094][ T3382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.640575][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.652117][ T3382] bond0 (unregistering): Released all slaves [ 41.686946][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 41.700218][ T4282] lo speed is unknown, defaulting to 1000 [ 41.771070][ T4291] loop4: detected capacity change from 0 to 8192 [ 41.792984][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.800263][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.818072][ T4251] bridge_slave_0: entered allmulticast mode [ 41.831953][ T4251] bridge_slave_0: entered promiscuous mode [ 41.841654][ T3382] hsr_slave_0: left promiscuous mode [ 41.849447][ T3382] hsr_slave_1: left promiscuous mode [ 41.855659][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.863275][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.886634][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.894076][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.903324][ T3382] veth1_macvtap: left promiscuous mode [ 41.909642][ T3382] veth0_macvtap: left promiscuous mode [ 41.915494][ T3382] veth1_vlan: left promiscuous mode [ 41.920959][ T3382] veth0_vlan: left promiscuous mode [ 41.970957][ T3382] pim6reg (unregistering): left allmulticast mode [ 42.007151][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 42.016549][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 42.052429][ T4314] vlan2: entered promiscuous mode [ 42.059462][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.066622][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.073850][ T4251] bridge_slave_1: entered allmulticast mode [ 42.080161][ T4251] bridge_slave_1: entered promiscuous mode [ 42.099930][ T4301] syzkaller0: entered promiscuous mode [ 42.105526][ T4301] syzkaller0: entered allmulticast mode [ 42.119150][ T3433] lo speed is unknown, defaulting to 1000 [ 42.124948][ T3433] infiniband syz0: ib_query_port failed (-19) [ 42.193841][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.210639][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.246271][ T4251] team0: Port device team_slave_0 added [ 42.252732][ T4251] team0: Port device team_slave_1 added [ 42.328908][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.335924][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.361898][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.374632][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.381587][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.407593][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.416617][ T4350] loop4: detected capacity change from 0 to 4096 [ 42.443478][ T4251] hsr_slave_0: entered promiscuous mode [ 42.449658][ T4251] hsr_slave_1: entered promiscuous mode [ 42.459555][ T4350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.472445][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.481395][ T4251] Cannot create hsr debugfs directory [ 42.567171][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.589796][ T4368] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 42.668294][ T4381] loop4: detected capacity change from 0 to 128 [ 42.679273][ T4381] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 42.704495][ T4381] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 42.712412][ T4381] FAT-fs (loop4): Filesystem has been set read-only [ 42.725842][ T4251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.733317][ T4381] syz.4.336: attempt to access beyond end of device [ 42.733317][ T4381] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 42.755346][ T4251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.798433][ T4251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.804515][ T4381] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 42.812954][ T4381] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 42.822715][ T4251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.845369][ T4404] xt_hashlimit: max too large, truncated to 1048576 [ 42.869512][ T4404] loop2: detected capacity change from 0 to 1024 [ 42.895006][ T4381] syz.4.336: attempt to access beyond end of device [ 42.895006][ T4381] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.917959][ T4404] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.926340][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.928851][ T4404] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.954795][ T4381] syz.4.336: attempt to access beyond end of device [ 42.954795][ T4381] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.963307][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.985389][ T4404] JBD2: no valid journal superblock found [ 42.991177][ T4404] EXT4-fs (loop2): Could not load journal inode [ 43.005343][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.012459][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.087840][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.094961][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.131288][ T4433] FAULT_INJECTION: forcing a failure. [ 43.131288][ T4433] name failslab, interval 1, probability 0, space 0, times 0 [ 43.143944][ T4433] CPU: 0 UID: 0 PID: 4433 Comm: syz.4.346 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 43.143963][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 43.143972][ T4433] Call Trace: [ 43.143978][ T4433] [ 43.143984][ T4433] dump_stack_lvl+0xf2/0x150 [ 43.144005][ T4433] dump_stack+0x15/0x1a [ 43.144021][ T4433] should_fail_ex+0x24a/0x260 [ 43.144047][ T4433] should_failslab+0x8f/0xb0 [ 43.144067][ T4433] kmem_cache_alloc_noprof+0x52/0x320 [ 43.144094][ T4433] ? mas_alloc_nodes+0x1e3/0x490 [ 43.144118][ T4433] mas_alloc_nodes+0x1e3/0x490 [ 43.144141][ T4433] mas_preallocate+0x44a/0x650 [ 43.144160][ T4433] __split_vma+0x244/0x6a0 [ 43.144188][ T4433] vma_modify+0xd3/0x1e0 [ 43.144212][ T4433] vma_modify_flags+0xf1/0x120 [ 43.144237][ T4433] mlock_fixup+0x113/0x450 [ 43.144256][ T4433] apply_vma_lock_flags+0x194/0x240 [ 43.144275][ T4433] do_mlock+0x3f4/0x570 [ 43.144291][ T4433] ? __secure_computing+0x9f/0x1c0 [ 43.144309][ T4433] __x64_sys_mlock+0x36/0x40 [ 43.144324][ T4433] x64_sys_call+0x26b2/0x2dc0 [ 43.144342][ T4433] do_syscall_64+0xc9/0x1c0 [ 43.144359][ T4433] ? clear_bhb_loop+0x55/0xb0 [ 43.144381][ T4433] ? clear_bhb_loop+0x55/0xb0 [ 43.144402][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.144428][ T4433] RIP: 0033:0x7fec9ec3cda9 [ 43.144441][ T4433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.144456][ T4433] RSP: 002b:00007fec9d2a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 43.144470][ T4433] RAX: ffffffffffffffda RBX: 00007fec9ee55fa0 RCX: 00007fec9ec3cda9 [ 43.144480][ T4433] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 43.144490][ T4433] RBP: 00007fec9d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.144502][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.144511][ T4433] R13: 0000000000000000 R14: 00007fec9ee55fa0 R15: 00007fffe91a33b8 [ 43.144524][ T4433] [ 43.384832][ T4251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.395421][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.542301][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.687351][ T4479] bond_slave_0: entered promiscuous mode [ 43.693034][ T4479] bond_slave_1: entered promiscuous mode [ 43.712290][ T4484] loop4: detected capacity change from 0 to 512 [ 43.725400][ T4484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.749525][ T4473] bond_slave_0: left promiscuous mode [ 43.754987][ T4473] bond_slave_1: left promiscuous mode [ 43.774365][ T4484] EXT4-fs (loop4): 1 truncate cleaned up [ 43.785035][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.819434][ T4251] veth0_vlan: entered promiscuous mode [ 43.825923][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.826948][ T4251] veth1_vlan: entered promiscuous mode [ 43.859824][ T4251] veth0_macvtap: entered promiscuous mode [ 43.876249][ T4251] veth1_macvtap: entered promiscuous mode [ 43.908783][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.919293][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.929188][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.939772][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.949712][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.960194][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.970061][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.980521][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.991297][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.006104][ T4516] FAULT_INJECTION: forcing a failure. [ 44.006104][ T4516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.019277][ T4516] CPU: 1 UID: 0 PID: 4516 Comm: syz.0.362 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 44.019378][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.019387][ T4516] Call Trace: [ 44.019422][ T4516] [ 44.019427][ T4516] dump_stack_lvl+0xf2/0x150 [ 44.019449][ T4516] dump_stack+0x15/0x1a [ 44.019464][ T4516] should_fail_ex+0x24a/0x260 [ 44.019489][ T4516] should_fail+0xb/0x10 [ 44.019573][ T4516] should_fail_usercopy+0x1a/0x20 [ 44.019588][ T4516] strncpy_from_user+0x25/0x210 [ 44.019609][ T4516] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 44.019633][ T4516] ? getname_flags+0x81/0x3b0 [ 44.019731][ T4516] getname_flags+0xb0/0x3b0 [ 44.019756][ T4516] user_path_at+0x26/0x120 [ 44.019771][ T4516] __x64_sys_fchmodat+0x75/0x120 [ 44.019795][ T4516] x64_sys_call+0x2be4/0x2dc0 [ 44.019819][ T4516] do_syscall_64+0xc9/0x1c0 [ 44.019861][ T4516] ? clear_bhb_loop+0x55/0xb0 [ 44.019882][ T4516] ? clear_bhb_loop+0x55/0xb0 [ 44.019909][ T4516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.019934][ T4516] RIP: 0033:0x7f0bc776cda9 [ 44.019949][ T4516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.019965][ T4516] RSP: 002b:00007f0bc5dd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 44.019982][ T4516] RAX: ffffffffffffffda RBX: 00007f0bc7985fa0 RCX: 00007f0bc776cda9 [ 44.019994][ T4516] RDX: 00000000ffffffd3 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 44.020005][ T4516] RBP: 00007f0bc5dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 44.020036][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.020046][ T4516] R13: 0000000000000000 R14: 00007f0bc7985fa0 R15: 00007ffcbfd44038 [ 44.020059][ T4516] [ 44.024038][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.059727][ T4510] loop2: detected capacity change from 0 to 1024 [ 44.064126][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.064142][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.098072][ T4510] EXT4-fs: Ignoring removed bh option [ 44.102465][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.102477][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.175777][ T4525] loop3: detected capacity change from 0 to 512 [ 44.176123][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.186722][ T4519] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 44.191944][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.231100][ T4529] loop0: detected capacity change from 0 to 512 [ 44.240011][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.254067][ T4529] ext4: Unknown parameter 'measure' [ 44.263776][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.282142][ T4510] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 44.293846][ T4251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.345073][ T4251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.353792][ T4251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.362601][ T4251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.388060][ T4525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.414093][ T4525] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.478367][ T4525] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.512208][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.536841][ T4556] loop3: detected capacity change from 0 to 512 [ 44.581190][ T4556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.595557][ T4560] FAULT_INJECTION: forcing a failure. [ 44.595557][ T4560] name failslab, interval 1, probability 0, space 0, times 0 [ 44.608237][ T4560] CPU: 0 UID: 0 PID: 4560 Comm: syz.5.305 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 44.608261][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.608294][ T4560] Call Trace: [ 44.608299][ T4560] [ 44.608305][ T4560] dump_stack_lvl+0xf2/0x150 [ 44.608334][ T4560] dump_stack+0x15/0x1a [ 44.608353][ T4560] should_fail_ex+0x24a/0x260 [ 44.608383][ T4560] should_failslab+0x8f/0xb0 [ 44.608405][ T4560] kmem_cache_alloc_node_noprof+0x59/0x320 [ 44.608509][ T4560] ? __alloc_skb+0x10b/0x310 [ 44.608531][ T4560] __alloc_skb+0x10b/0x310 [ 44.608560][ T4560] netlink_alloc_large_skb+0xad/0xe0 [ 44.608650][ T4560] netlink_sendmsg+0x3b4/0x6e0 [ 44.608680][ T4560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.608770][ T4560] __sock_sendmsg+0x140/0x180 [ 44.608788][ T4560] ____sys_sendmsg+0x312/0x410 [ 44.608813][ T4560] __sys_sendmsg+0x19d/0x230 [ 44.608847][ T4560] __x64_sys_sendmsg+0x46/0x50 [ 44.608871][ T4560] x64_sys_call+0x2734/0x2dc0 [ 44.608939][ T4560] do_syscall_64+0xc9/0x1c0 [ 44.608961][ T4560] ? clear_bhb_loop+0x55/0xb0 [ 44.608984][ T4560] ? clear_bhb_loop+0x55/0xb0 [ 44.609066][ T4560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.609090][ T4560] RIP: 0033:0x7f285e89cda9 [ 44.609104][ T4560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.609121][ T4560] RSP: 002b:00007f285cf07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.609138][ T4560] RAX: ffffffffffffffda RBX: 00007f285eab5fa0 RCX: 00007f285e89cda9 [ 44.609207][ T4560] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 44.609290][ T4560] RBP: 00007f285cf07090 R08: 0000000000000000 R09: 0000000000000000 [ 44.609301][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.609312][ T4560] R13: 0000000000000000 R14: 00007f285eab5fa0 R15: 00007ffe377f27e8 [ 44.609328][ T4560] [ 44.614189][ T4556] EXT4-fs (loop3): 1 truncate cleaned up [ 44.816246][ T4556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.838167][ T4565] loop4: detected capacity change from 0 to 128 [ 44.862312][ T4565] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 44.873219][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.900231][ T4565] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 44.908154][ T4565] FAT-fs (loop4): Filesystem has been set read-only [ 44.930379][ T4589] loop2: detected capacity change from 0 to 512 [ 44.936827][ T4565] syz.4.369: attempt to access beyond end of device [ 44.936827][ T4565] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 44.954867][ T4565] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 44.962723][ T4565] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 44.971500][ T4565] syz.4.369: attempt to access beyond end of device [ 44.971500][ T4565] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.995336][ T4565] syz.4.369: attempt to access beyond end of device [ 44.995336][ T4565] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.995752][ T4589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.032240][ T4589] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.063525][ T4601] macvlan0: entered promiscuous mode [ 45.070281][ T4601] ipvlan0: entered promiscuous mode [ 45.074057][ T4589] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 45.076907][ T4601] ipvlan0: left promiscuous mode [ 45.090940][ T4601] macvlan0: left promiscuous mode [ 45.100931][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.179809][ T4610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.379'. [ 45.222955][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 45.265990][ T4627] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 45.266151][ T4624] IPVS: stopping master sync thread 4627 ... [ 45.377442][ T4641] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 45.378193][ T4639] macvlan0: entered promiscuous mode [ 45.402610][ T4639] ipvlan0: entered promiscuous mode [ 45.408495][ T4639] ipvlan0: left promiscuous mode [ 45.413586][ T4639] macvlan0: left promiscuous mode [ 45.428107][ T4633] loop3: detected capacity change from 0 to 512 [ 45.446737][ T4633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.458095][ T4633] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.387: corrupted in-inode xattr: e_name out of bounds [ 45.473888][ T4633] EXT4-fs (loop3): Remounting filesystem read-only [ 45.480811][ T4633] EXT4-fs (loop3): 1 truncate cleaned up [ 45.487386][ T4633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.499577][ T4633] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 45.509125][ T4633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.606000][ T4658] team0 (unregistering): Port device team_slave_0 removed [ 45.614306][ T4660] loop3: detected capacity change from 0 to 128 [ 45.626532][ T4658] team0 (unregistering): Port device team_slave_1 removed [ 45.634263][ T4660] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 45.646967][ T4660] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 45.654944][ T4660] FAT-fs (loop3): Filesystem has been set read-only [ 45.667030][ T4660] syz.3.398: attempt to access beyond end of device [ 45.667030][ T4660] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 45.680720][ T4660] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 45.688618][ T4660] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 45.698058][ T4660] syz.3.398: attempt to access beyond end of device [ 45.698058][ T4660] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.716446][ T4660] syz.3.398: attempt to access beyond end of device [ 45.716446][ T4660] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.732268][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 45.732281][ T29] audit: type=1326 audit(1738513584.352:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4659 comm="syz.3.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be924cda9 code=0x7ffc0000 [ 45.767343][ T4668] FAULT_INJECTION: forcing a failure. [ 45.767343][ T4668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.768788][ T4667] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 45.780546][ T4668] CPU: 1 UID: 0 PID: 4668 Comm: syz.4.401 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 45.780568][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.780578][ T4668] Call Trace: [ 45.780583][ T4668] [ 45.780589][ T4668] dump_stack_lvl+0xf2/0x150 [ 45.780664][ T4668] dump_stack+0x15/0x1a [ 45.780731][ T4668] should_fail_ex+0x24a/0x260 [ 45.780759][ T4668] should_fail+0xb/0x10 [ 45.780783][ T4668] should_fail_usercopy+0x1a/0x20 [ 45.780882][ T4668] _copy_from_iter+0xd5/0xd00 [ 45.780899][ T4668] ? selinux_file_open+0x34a/0x3b0 [ 45.780947][ T4668] ? should_fail_ex+0xd7/0x260 [ 45.780972][ T4668] ? __virt_addr_valid+0x1ed/0x250 [ 45.780992][ T4668] ? __check_object_size+0x364/0x520 [ 45.781022][ T4668] skb_copy_datagram_from_iter+0xb3/0x460 [ 45.781171][ T4668] tun_get_user+0x1132/0x25c0 [ 45.781201][ T4668] ? _parse_integer+0x27/0x30 [ 45.781235][ T4668] ? ref_tracker_alloc+0x1f5/0x2f0 [ 45.781317][ T4668] tun_chr_write_iter+0x188/0x240 [ 45.781345][ T4668] vfs_write+0x77b/0x920 [ 45.781363][ T4668] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 45.781460][ T4668] ksys_write+0xe8/0x1b0 [ 45.781479][ T4668] __x64_sys_write+0x42/0x50 [ 45.781498][ T4668] x64_sys_call+0x287e/0x2dc0 [ 45.781520][ T4668] do_syscall_64+0xc9/0x1c0 [ 45.781554][ T4668] ? clear_bhb_loop+0x55/0xb0 [ 45.781577][ T4668] ? clear_bhb_loop+0x55/0xb0 [ 45.781599][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.781622][ T4668] RIP: 0033:0x7fec9ec3cda9 [ 45.781649][ T4668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.781664][ T4668] RSP: 002b:00007fec9d2a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.781723][ T4668] RAX: ffffffffffffffda RBX: 00007fec9ee55fa0 RCX: 00007fec9ec3cda9 [ 45.781734][ T4668] RDX: 0000000000000046 RSI: 0000000020000040 RDI: 0000000000000005 [ 45.781745][ T4668] RBP: 00007fec9d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.781755][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.781766][ T4668] R13: 0000000000000000 R14: 00007fec9ee55fa0 R15: 00007fffe91a33b8 [ 45.781781][ T4668] [ 45.782086][ T29] audit: type=1326 audit(1738513584.392:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4659 comm="syz.3.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be924cda9 code=0x7ffc0000 [ 46.064298][ T4681] macvlan0: entered promiscuous mode [ 46.069893][ T29] audit: type=1400 audit(1738513584.682:1866): avc: denied { create } for pid=4678 comm="syz.5.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.071984][ T4681] ipvlan0: entered promiscuous mode [ 46.098860][ T4679] loop5: detected capacity change from 0 to 512 [ 46.105771][ T4679] EXT4-fs: Ignoring removed i_version option [ 46.111805][ T4679] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.121047][ T4681] ipvlan0: left promiscuous mode [ 46.137838][ T29] audit: type=1400 audit(1738513584.692:1867): avc: denied { write } for pid=4678 comm="syz.5.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.157416][ T29] audit: type=1400 audit(1738513584.752:1868): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.177486][ T4681] macvlan0: left promiscuous mode [ 46.183841][ T4679] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.206222][ T4679] EXT4-fs (loop5): 1 truncate cleaned up [ 46.218645][ T4679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.241504][ T29] audit: type=1400 audit(1738513584.862:1869): avc: denied { ioctl } for pid=4691 comm="syz.0.412" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.255267][ T4679] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.282822][ T29] audit: type=1400 audit(1738513584.862:1870): avc: denied { create } for pid=4692 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.302294][ T29] audit: type=1400 audit(1738513584.862:1871): avc: denied { mac_admin } for pid=4678 comm="syz.5.408" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.323360][ T29] audit: type=1400 audit(1738513584.902:1872): avc: denied { relabelto } for pid=4678 comm="syz.5.408" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 46.357112][ T29] audit: type=1326 audit(1738513584.932:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc776cda9 code=0x7ffc0000 [ 46.381535][ T4699] xt_hashlimit: max too large, truncated to 1048576 [ 46.404223][ T4679] netlink: 'syz.5.408': attribute type 1 has an invalid length. [ 46.412655][ T4699] loop2: detected capacity change from 0 to 1024 [ 46.445904][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.487686][ T4702] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 46.495746][ T4699] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.506663][ T4699] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.531448][ T4699] JBD2: no valid journal superblock found [ 46.537262][ T4699] EXT4-fs (loop2): Could not load journal inode [ 46.626673][ T4706] netlink: 87 bytes leftover after parsing attributes in process `syz.0.417'. [ 46.680818][ T4717] bridge0: entered promiscuous mode [ 46.704570][ T4717] macvlan2: entered promiscuous mode [ 46.718311][ T4717] bridge0: port 3(macvlan2) entered blocking state [ 46.724878][ T4717] bridge0: port 3(macvlan2) entered disabled state [ 46.751900][ T4717] macvlan2: entered allmulticast mode [ 46.757440][ T4717] bridge0: entered allmulticast mode [ 46.762983][ T4706] loop0: detected capacity change from 0 to 512 [ 46.776175][ T4716] loop5: detected capacity change from 0 to 512 [ 46.795842][ T4706] EXT4-fs: Ignoring removed nobh option [ 46.798315][ T4716] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.844882][ T4717] macvlan2: left allmulticast mode [ 46.850063][ T4717] bridge0: left allmulticast mode [ 46.857195][ T4717] bridge0: left promiscuous mode [ 46.921123][ T4706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.969030][ T4706] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.110443][ T4731] loop2: detected capacity change from 0 to 128 [ 47.111019][ T4733] sd 0:0:1:0: device reset [ 47.121804][ T4731] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 47.131486][ T4251] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 47.157315][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.159732][ T4731] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 47.174266][ T4731] FAT-fs (loop2): Filesystem has been set read-only [ 47.182520][ T4731] syz.2.424: attempt to access beyond end of device [ 47.182520][ T4731] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 47.196480][ T4731] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 47.204384][ T4731] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 47.226786][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.426'. [ 47.259446][ T4731] syz.2.424: attempt to access beyond end of device [ 47.259446][ T4731] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.279118][ T4731] syz.2.424: attempt to access beyond end of device [ 47.279118][ T4731] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.394934][ T4751] loop0: detected capacity change from 0 to 512 [ 47.404499][ T4751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.420064][ T4751] EXT4-fs (loop0): 1 truncate cleaned up [ 47.426587][ T4751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.453040][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.484851][ T4761] Unknown options in mask 5 [ 47.496782][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.435'. [ 47.656917][ T4775] loop2: detected capacity change from 0 to 512 [ 47.682619][ T4775] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.441: corrupted in-inode xattr: invalid ea_ino [ 47.715696][ T4775] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.441: couldn't read orphan inode 15 (err -117) [ 47.747661][ T4775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.793135][ T4775] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.441: deleted inode referenced: 15 [ 47.823594][ T4775] process 'syz.2.441' launched '/dev/fd/11' with NULL argv: empty string added [ 47.854100][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.886413][ T4789] xt_hashlimit: max too large, truncated to 1048576 [ 47.932682][ T4792] loop2: detected capacity change from 0 to 128 [ 48.003558][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'. [ 48.042160][ T4801] Falling back ldisc for ttyS3. [ 48.156183][ T4810] loop4: detected capacity change from 0 to 128 [ 48.167288][ T4810] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 48.192757][ T4810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.200648][ T4810] FAT-fs (loop4): Filesystem has been set read-only [ 48.207588][ T4810] syz.4.454: attempt to access beyond end of device [ 48.207588][ T4810] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.222176][ T4810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.230187][ T4810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.238654][ T4810] syz.4.454: attempt to access beyond end of device [ 48.238654][ T4810] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.269461][ T4810] syz.4.454: attempt to access beyond end of device [ 48.269461][ T4810] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.648306][ T4826] loop2: detected capacity change from 0 to 128 [ 48.665088][ T4826] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 48.689309][ T4826] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.689918][ T4831] loop3: detected capacity change from 0 to 512 [ 48.697234][ T4826] FAT-fs (loop2): Filesystem has been set read-only [ 48.698254][ T4826] syz.2.458: attempt to access beyond end of device [ 48.698254][ T4826] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.735562][ T4836] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 48.768052][ T4826] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.775941][ T4826] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.787830][ T4826] syz.2.458: attempt to access beyond end of device [ 48.787830][ T4826] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.806885][ T4826] syz.2.458: attempt to access beyond end of device [ 48.806885][ T4826] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.851224][ T4845] loop4: detected capacity change from 0 to 512 [ 48.881358][ T4848] vlan0: entered promiscuous mode [ 48.901708][ T4845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.915786][ T4845] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.943008][ T4860] netlink: 87 bytes leftover after parsing attributes in process `syz.5.474'. [ 48.955198][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.022612][ T4865] macvlan0: entered promiscuous mode [ 49.030242][ T4865] ipvlan0: entered promiscuous mode [ 49.038213][ T4865] ipvlan0: left promiscuous mode [ 49.045151][ T4865] macvlan0: left promiscuous mode [ 49.061623][ T4860] bridge0: entered promiscuous mode [ 49.067020][ T4860] macvlan0: entered promiscuous mode [ 49.073851][ T4860] bridge0: port 3(macvlan0) entered blocking state [ 49.080579][ T4860] bridge0: port 3(macvlan0) entered disabled state [ 49.090110][ T4860] macvlan0: entered allmulticast mode [ 49.095667][ T4860] bridge0: entered allmulticast mode [ 49.102959][ T4860] macvlan0: left allmulticast mode [ 49.108130][ T4860] bridge0: left allmulticast mode [ 49.123746][ T4875] xt_hashlimit: max too large, truncated to 1048576 [ 49.124845][ T4860] bridge0: left promiscuous mode [ 49.143056][ T4875] loop3: detected capacity change from 0 to 1024 [ 49.154485][ T4875] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.165415][ T4875] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.188680][ T4877] FAULT_INJECTION: forcing a failure. [ 49.188680][ T4877] name failslab, interval 1, probability 0, space 0, times 0 [ 49.201502][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.4.480 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 49.201523][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 49.201534][ T4877] Call Trace: [ 49.201539][ T4877] [ 49.201546][ T4877] dump_stack_lvl+0xf2/0x150 [ 49.201572][ T4877] dump_stack+0x15/0x1a [ 49.201590][ T4877] should_fail_ex+0x24a/0x260 [ 49.201630][ T4877] should_failslab+0x8f/0xb0 [ 49.201649][ T4877] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 49.201755][ T4877] ? sidtab_sid2str_get+0xb8/0x140 [ 49.201776][ T4877] kmemdup_noprof+0x2a/0x60 [ 49.201797][ T4877] sidtab_sid2str_get+0xb8/0x140 [ 49.201830][ T4877] security_sid_to_context_core+0x1eb/0x2f0 [ 49.201894][ T4877] security_sid_to_context+0x27/0x30 [ 49.201920][ T4877] selinux_lsmprop_to_secctx+0x68/0xf0 [ 49.201978][ T4877] security_lsmprop_to_secctx+0x40/0x80 [ 49.202000][ T4877] audit_log_task_context+0x76/0x180 [ 49.202027][ T4877] audit_log_task+0xf9/0x1c0 [ 49.202051][ T4877] audit_seccomp+0x68/0x130 [ 49.202144][ T4877] __seccomp_filter+0x6fa/0x1180 [ 49.202163][ T4877] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.202183][ T4877] ? vfs_write+0x644/0x920 [ 49.202198][ T4877] ? radix_tree_lookup+0x144/0x150 [ 49.202295][ T4877] ? idr_find+0x2c/0x40 [ 49.202319][ T4877] __secure_computing+0x9f/0x1c0 [ 49.202338][ T4877] syscall_trace_enter+0xd1/0x1f0 [ 49.202356][ T4877] ? fpregs_assert_state_consistent+0x83/0xa0 [ 49.202419][ T4877] do_syscall_64+0xaa/0x1c0 [ 49.202501][ T4877] ? clear_bhb_loop+0x55/0xb0 [ 49.202524][ T4877] ? clear_bhb_loop+0x55/0xb0 [ 49.202544][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.202567][ T4877] RIP: 0033:0x7fec9ec3b7bc [ 49.202581][ T4877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.202674][ T4877] RSP: 002b:00007fec9d2a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.202692][ T4877] RAX: ffffffffffffffda RBX: 00007fec9ee55fa0 RCX: 00007fec9ec3b7bc [ 49.202714][ T4877] RDX: 000000000000000f RSI: 00007fec9d2a70a0 RDI: 0000000000000006 [ 49.202725][ T4877] RBP: 00007fec9d2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.202736][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.202746][ T4877] R13: 0000000000000000 R14: 00007fec9ee55fa0 R15: 00007fffe91a33b8 [ 49.202804][ T4877] [ 49.442825][ T4875] JBD2: no valid journal superblock found [ 49.449092][ T4875] EXT4-fs (loop3): Could not load journal inode [ 49.465708][ T4879] loop2: detected capacity change from 0 to 128 [ 49.487767][ T4879] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 49.502882][ T4885] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 49.513368][ T4879] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 49.521271][ T4879] FAT-fs (loop2): Filesystem has been set read-only [ 49.533710][ T4885] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.567949][ T4879] syz.2.481: attempt to access beyond end of device [ 49.567949][ T4879] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 49.588797][ T4885] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.605358][ T4879] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 49.613198][ T4879] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 49.640794][ T4879] syz.2.481: attempt to access beyond end of device [ 49.640794][ T4879] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.656584][ T4879] syz.2.481: attempt to access beyond end of device [ 49.656584][ T4879] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.679874][ T4885] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.693253][ T4897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.489'. [ 49.749613][ T4901] loop2: detected capacity change from 0 to 1024 [ 49.767622][ T4885] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.784647][ T4901] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.795601][ T4901] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 49.826019][ T4901] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 49.844868][ T4885] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.865189][ T4885] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.894866][ T4901] EXT4-fs (loop2): invalid journal inode [ 49.914005][ T4911] macvlan0: entered promiscuous mode [ 49.922672][ T4911] ipvlan0: entered promiscuous mode [ 49.940597][ T4911] ipvlan0: left promiscuous mode [ 49.946760][ T4913] loop7: detected capacity change from 0 to 16384 [ 49.958892][ T4911] macvlan0: left promiscuous mode [ 49.985984][ T4885] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.002956][ T4885] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.087632][ T4923] syz.0.499 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.132475][ T4928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 50.150759][ T4930] loop2: detected capacity change from 0 to 512 [ 50.166221][ T4930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.192792][ T4935] FAULT_INJECTION: forcing a failure. [ 50.192792][ T4935] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.206142][ T4935] CPU: 0 UID: 0 PID: 4935 Comm: syz.5.503 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 50.206161][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.206172][ T4935] Call Trace: [ 50.206179][ T4935] [ 50.206266][ T4935] dump_stack_lvl+0xf2/0x150 [ 50.206290][ T4935] dump_stack+0x15/0x1a [ 50.206315][ T4935] should_fail_ex+0x24a/0x260 [ 50.206344][ T4935] should_fail_alloc_page+0xfd/0x110 [ 50.206366][ T4935] __alloc_frozen_pages_noprof+0x109/0x340 [ 50.206432][ T4935] alloc_pages_mpol+0xb4/0x260 [ 50.206463][ T4935] vma_alloc_folio_noprof+0x1a0/0x310 [ 50.206495][ T4935] handle_mm_fault+0xdd7/0x2ac0 [ 50.206527][ T4935] exc_page_fault+0x296/0x650 [ 50.206580][ T4935] asm_exc_page_fault+0x26/0x30 [ 50.206603][ T4935] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 50.206628][ T4935] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 50.206642][ T4935] RSP: 0018:ffffc9001166fd58 EFLAGS: 00050206 [ 50.206653][ T4935] RAX: ffff88810324dd08 RBX: 000000002001b238 RCX: 0000000000000238 [ 50.206663][ T4935] RDX: 0000000000000000 RSI: ffff88811873fdc0 RDI: 000000002001b000 [ 50.206680][ T4935] RBP: 0000000000000ff8 R08: 0000000080000000 R09: 0000000000000000 [ 50.206692][ T4935] R10: 000188811873f000 R11: 000188811873fff7 R12: 0000000000000ff8 [ 50.206704][ T4935] R13: 00007ffffffff000 R14: 000000002001a240 R15: ffff88811873f000 [ 50.206721][ T4935] _copy_to_user+0x7c/0xa0 [ 50.206788][ T4935] pagemap_read+0x3af/0x610 [ 50.206812][ T4935] ? __pfx_pagemap_read+0x10/0x10 [ 50.206849][ T4935] vfs_read+0x19b/0x6f0 [ 50.206863][ T4935] ? __fget_files+0x17c/0x1c0 [ 50.206883][ T4935] ? __rcu_read_unlock+0x4e/0x70 [ 50.206899][ T4935] ? __fget_files+0x17c/0x1c0 [ 50.206949][ T4935] __x64_sys_pread64+0xf6/0x150 [ 50.207034][ T4935] x64_sys_call+0x26ee/0x2dc0 [ 50.207056][ T4935] do_syscall_64+0xc9/0x1c0 [ 50.207077][ T4935] ? clear_bhb_loop+0x55/0xb0 [ 50.207106][ T4935] ? clear_bhb_loop+0x55/0xb0 [ 50.207134][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.207157][ T4935] RIP: 0033:0x7f285e89cda9 [ 50.207170][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.207185][ T4935] RSP: 002b:00007f285cf07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 50.207210][ T4935] RAX: ffffffffffffffda RBX: 00007f285eab5fa0 RCX: 00007f285e89cda9 [ 50.207220][ T4935] RDX: 0000000000018ff8 RSI: 000000002001a240 RDI: 0000000000000003 [ 50.207229][ T4935] RBP: 00007f285cf07090 R08: 0000000000000000 R09: 0000000000000000 [ 50.207240][ T4935] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000001 [ 50.207251][ T4935] R13: 0000000000000000 R14: 00007f285eab5fa0 R15: 00007ffe377f27e8 [ 50.207267][ T4935] [ 50.212714][ T4930] EXT4-fs (loop2): 1 truncate cleaned up [ 50.503426][ T4930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.553994][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.609346][ T4961] loop5: detected capacity change from 0 to 128 [ 50.635551][ T4961] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 50.653397][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 50.732674][ T4985] loop2: detected capacity change from 0 to 512 [ 50.740483][ T4985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.755562][ T4985] EXT4-fs (loop2): 1 truncate cleaned up [ 50.771726][ T4985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.802858][ T4993] netlink: 87 bytes leftover after parsing attributes in process `syz.5.523'. [ 50.826588][ T4993] bridge0: entered promiscuous mode [ 50.831943][ T4993] macvlan0: entered promiscuous mode [ 50.840615][ T4993] bridge0: port 3(macvlan0) entered blocking state [ 50.847425][ T4993] bridge0: port 3(macvlan0) entered disabled state [ 50.855813][ T4998] FAULT_INJECTION: forcing a failure. [ 50.855813][ T4998] name failslab, interval 1, probability 0, space 0, times 0 [ 50.856285][ T4993] macvlan0: entered allmulticast mode [ 50.868474][ T4998] CPU: 1 UID: 0 PID: 4998 Comm: syz.0.525 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 50.868497][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 50.868508][ T4998] Call Trace: [ 50.868514][ T4998] [ 50.868521][ T4998] dump_stack_lvl+0xf2/0x150 [ 50.868545][ T4998] dump_stack+0x15/0x1a [ 50.868563][ T4998] should_fail_ex+0x24a/0x260 [ 50.868633][ T4998] should_failslab+0x8f/0xb0 [ 50.868655][ T4998] kmem_cache_alloc_noprof+0x52/0x320 [ 50.868681][ T4998] ? security_file_alloc+0x32/0x100 [ 50.868709][ T4998] security_file_alloc+0x32/0x100 [ 50.868802][ T4998] init_file+0x5b/0x1a0 [ 50.868833][ T4998] alloc_empty_file+0xea/0x200 [ 50.868858][ T4998] path_openat+0x6a/0x1fc0 [ 50.868952][ T4998] ? mntput+0x49/0x70 [ 50.868967][ T4998] ? terminate_walk+0x260/0x280 [ 50.868991][ T4998] ? path_openat+0x1a78/0x1fc0 [ 50.869008][ T4998] ? _parse_integer_limit+0x167/0x180 [ 50.869034][ T4998] do_filp_open+0x107/0x230 [ 50.869057][ T4998] do_open_execat+0xd0/0x280 [ 50.869126][ T4998] alloc_bprm+0x2a/0x680 [ 50.869145][ T4998] do_execveat_common+0x12b/0x7e0 [ 50.869166][ T4998] ? getname_flags+0x15a/0x3b0 [ 50.869190][ T4998] __x64_sys_execveat+0x75/0x90 [ 50.869211][ T4998] x64_sys_call+0x291e/0x2dc0 [ 50.869256][ T4998] do_syscall_64+0xc9/0x1c0 [ 50.869288][ T4998] ? clear_bhb_loop+0x55/0xb0 [ 50.869311][ T4998] ? clear_bhb_loop+0x55/0xb0 [ 50.869352][ T4998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.869375][ T4998] RIP: 0033:0x7f0bc776cda9 [ 50.869389][ T4998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.869405][ T4998] RSP: 002b:00007f0bc5dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 50.869421][ T4998] RAX: ffffffffffffffda RBX: 00007f0bc7985fa0 RCX: 00007f0bc776cda9 [ 50.869432][ T4998] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 50.869443][ T4998] RBP: 00007f0bc5dd1090 R08: 0000000000001000 R09: 0000000000000000 [ 50.869453][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.869520][ T4998] R13: 0000000000000000 R14: 00007f0bc7985fa0 R15: 00007ffcbfd44038 [ 50.869536][ T4998] [ 50.907138][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.909103][ T4993] bridge0: entered allmulticast mode [ 50.925798][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 51.054450][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 51.054464][ T29] audit: type=1400 audit(1738513589.672:2132): avc: denied { unlink } for pid=3297 comm="syz-executor" name="file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.100326][ T5006] loop2: detected capacity change from 0 to 128 [ 51.114726][ T4993] macvlan0: left allmulticast mode [ 51.157981][ T4993] bridge0: left allmulticast mode [ 51.173077][ T4993] bridge0: left promiscuous mode [ 51.193005][ T5014] loop4: detected capacity change from 0 to 128 [ 51.199638][ T5012] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = -3, id = 0 [ 51.219608][ T5014] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 51.253429][ T5021] team0 (unregistering): Port device team_slave_0 removed [ 51.261495][ T5014] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 51.269357][ T5014] FAT-fs (loop4): Filesystem has been set read-only [ 51.295218][ T5021] team0 (unregistering): Port device team_slave_1 removed [ 51.303535][ T5014] syz.4.532: attempt to access beyond end of device [ 51.303535][ T5014] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 51.324136][ T5026] loop3: detected capacity change from 0 to 512 [ 51.325331][ T5014] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 51.338320][ T5014] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 51.348822][ T5026] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.361857][ T5027] netlink: 60 bytes leftover after parsing attributes in process `syz.0.536'. [ 51.371177][ T5027] unsupported nlmsg_type 40 [ 51.384291][ T5027] geneve2: entered promiscuous mode [ 51.389556][ T5027] geneve2: entered allmulticast mode [ 51.406300][ T5026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.420752][ T5026] FAULT_INJECTION: forcing a failure. [ 51.420752][ T5026] name failslab, interval 1, probability 0, space 0, times 0 [ 51.433482][ T5026] CPU: 0 UID: 0 PID: 5026 Comm: syz.3.537 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 51.433573][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.433583][ T5026] Call Trace: [ 51.433589][ T5026] [ 51.433597][ T5026] dump_stack_lvl+0xf2/0x150 [ 51.433622][ T5026] dump_stack+0x15/0x1a [ 51.433707][ T5026] should_fail_ex+0x24a/0x260 [ 51.433733][ T5026] should_failslab+0x8f/0xb0 [ 51.433753][ T5026] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 51.433780][ T5026] ? __d_alloc+0x3d/0x340 [ 51.433840][ T5026] __d_alloc+0x3d/0x340 [ 51.433911][ T5026] ? security_inode_permission+0x4e/0xc0 [ 51.433935][ T5026] d_alloc+0x2e/0x100 [ 51.434002][ T5026] vfs_tmpfile+0xf1/0x4d0 [ 51.434050][ T5026] do_tmpfile+0xa9/0x190 [ 51.434073][ T5026] path_openat+0x1c6a/0x1fc0 [ 51.434088][ T5026] ? _parse_integer_limit+0x167/0x180 [ 51.434114][ T5026] ? kstrtoull+0x110/0x140 [ 51.434188][ T5026] ? kstrtouint+0x77/0xc0 [ 51.434212][ T5026] ? kstrtouint_from_user+0xb0/0xe0 [ 51.434239][ T5026] do_filp_open+0x107/0x230 [ 51.434262][ T5026] do_sys_openat2+0xab/0x120 [ 51.434287][ T5026] __x64_sys_open+0xe6/0x110 [ 51.434336][ T5026] x64_sys_call+0x13e1/0x2dc0 [ 51.434359][ T5026] do_syscall_64+0xc9/0x1c0 [ 51.434382][ T5026] ? clear_bhb_loop+0x55/0xb0 [ 51.434422][ T5026] ? clear_bhb_loop+0x55/0xb0 [ 51.434441][ T5026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.434463][ T5026] RIP: 0033:0x7f4be924cda9 [ 51.434508][ T5026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.434524][ T5026] RSP: 002b:00007f4be78b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 51.434541][ T5026] RAX: ffffffffffffffda RBX: 00007f4be9465fa0 RCX: 00007f4be924cda9 [ 51.434552][ T5026] RDX: 0000000000000008 RSI: 0000000000418601 RDI: 0000000020000040 [ 51.434562][ T5026] RBP: 00007f4be78b7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.434571][ T5026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.434582][ T5026] R13: 0000000000000000 R14: 00007f4be9465fa0 R15: 00007ffd5066f028 [ 51.434598][ T5026] [ 51.667125][ T29] audit: type=1400 audit(1738513590.282:2133): avc: denied { write } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.688695][ T29] audit: type=1400 audit(1738513590.282:2134): avc: denied { remove_name } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.711355][ T29] audit: type=1400 audit(1738513590.282:2135): avc: denied { rename } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.733659][ T29] audit: type=1400 audit(1738513590.282:2136): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.756459][ T29] audit: type=1400 audit(1738513590.282:2137): avc: denied { unlink } for pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.778957][ T29] audit: type=1400 audit(1738513590.282:2138): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.830625][ T5050] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 51.849380][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.892342][ T5047] loop2: detected capacity change from 0 to 164 [ 51.921550][ T5047] Unable to read rock-ridge attributes [ 51.939870][ T5063] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 51.947772][ T29] audit: type=1400 audit(1738513590.552:2139): avc: denied { mount } for pid=5046 comm="syz.2.542" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 51.970096][ T29] audit: type=1400 audit(1738513590.552:2140): avc: denied { write } for pid=5046 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.989711][ T29] audit: type=1400 audit(1738513590.562:2141): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 52.144552][ T5074] loop7: detected capacity change from 16384 to 16383 [ 52.166080][ T5074] I/O error, dev loop7, sector 3328 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 52.174261][ T5071] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.175846][ T5074] Buffer I/O error on dev loop7, logical block 416, lost async page write [ 52.175869][ T5074] Buffer I/O error on dev loop7, logical block 417, lost async page write [ 52.202751][ T5074] Buffer I/O error on dev loop7, logical block 418, lost async page write [ 52.211389][ T5074] Buffer I/O error on dev loop7, logical block 419, lost async page write [ 52.219925][ T5074] Buffer I/O error on dev loop7, logical block 420, lost async page write [ 52.225108][ T5071] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.228516][ T5074] Buffer I/O error on dev loop7, logical block 421, lost async page write [ 52.237883][ T5071] Buffer I/O error on dev loop7, logical block 576, async page read [ 52.246357][ T5074] Buffer I/O error on dev loop7, logical block 422, lost async page write [ 52.246376][ T5074] Buffer I/O error on dev loop7, logical block 423, lost async page write [ 52.268009][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 52.271351][ T5074] Buffer I/O error on dev loop7, logical block 424, lost async page write [ 52.316178][ T5074] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.330752][ T5088] loop2: detected capacity change from 0 to 512 [ 52.341171][ T5074] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.350376][ T5074] loop7: unable to read partition table [ 52.357148][ T5088] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.360400][ T5074] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 52.410906][ T5088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.433148][ T5079] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0 [ 52.446187][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.517051][ T5104] vlan2: entered promiscuous mode [ 52.629825][ T5113] loop2: detected capacity change from 0 to 512 [ 52.639464][ T5113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.654735][ T5113] EXT4-fs (loop2): 1 truncate cleaned up [ 52.664903][ T5113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.689600][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.710847][ T5120] bridge0: entered promiscuous mode [ 52.716223][ T5120] macvlan2: entered promiscuous mode [ 52.722614][ T5120] bridge0: port 3(macvlan2) entered blocking state [ 52.729230][ T5120] bridge0: port 3(macvlan2) entered disabled state [ 52.735842][ T5120] macvlan2: entered allmulticast mode [ 52.741242][ T5120] bridge0: entered allmulticast mode [ 52.747270][ T5120] macvlan2: left allmulticast mode [ 52.752505][ T5120] bridge0: left allmulticast mode [ 52.759166][ T5120] bridge0: left promiscuous mode [ 52.810774][ T5131] loop3: detected capacity change from 0 to 2048 [ 52.868391][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.878387][ T5142] netlink: 'syz.2.577': attribute type 3 has an invalid length. [ 53.061747][ T5157] vlan0: entered promiscuous mode [ 53.149097][ T5131] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.168555][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 53.177537][ T5131] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 53.189982][ T5131] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.189982][ T5131] [ 53.199885][ T5131] EXT4-fs (loop3): Total free blocks count 0 [ 53.205896][ T5131] EXT4-fs (loop3): Free/Dirty block details [ 53.211785][ T5131] EXT4-fs (loop3): free_blocks=2415919104 [ 53.217575][ T5131] EXT4-fs (loop3): dirty_blocks=8192 [ 53.217587][ T5131] EXT4-fs (loop3): Block reservation details [ 53.217597][ T5131] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 53.253345][ T5160] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 53.303130][ T5171] bridge0: entered promiscuous mode [ 53.303161][ T5171] macvlan2: entered promiscuous mode [ 53.304251][ T5171] bridge0: port 3(macvlan2) entered blocking state [ 53.304348][ T5171] bridge0: port 3(macvlan2) entered disabled state [ 53.304962][ T5171] macvlan2: entered allmulticast mode [ 53.304976][ T5171] bridge0: entered allmulticast mode [ 53.305508][ T5171] macvlan2: left allmulticast mode [ 53.305521][ T5171] bridge0: left allmulticast mode [ 53.305772][ T5171] bridge0: left promiscuous mode [ 53.406769][ T5183] vlan2: entered promiscuous mode [ 53.462963][ T5190] tmpfs: Unknown parameter 'Or ' [ 53.580630][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 53.612965][ T5200] macvlan0: entered promiscuous mode [ 53.621904][ T5200] ipvlan0: entered promiscuous mode [ 53.628674][ T5200] ipvlan0: left promiscuous mode [ 53.633933][ T5200] macvlan0: left promiscuous mode [ 53.681034][ T5204] loop2: detected capacity change from 0 to 512 [ 53.782458][ T5204] loop2: detected capacity change from 0 to 8192 [ 53.796526][ T5224] loop0: detected capacity change from 0 to 512 [ 53.824991][ T5224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.849963][ T5224] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.864090][ T3382] ================================================================== [ 53.866245][ T5224] FAULT_INJECTION: forcing a failure. [ 53.866245][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 53.872176][ T3382] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 53.884759][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: syz.0.601 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 53.884869][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 53.884886][ T5224] Call Trace: [ 53.884892][ T5224] [ 53.884899][ T5224] dump_stack_lvl+0xf2/0x150 [ 53.884922][ T5224] dump_stack+0x15/0x1a [ 53.884994][ T5224] should_fail_ex+0x24a/0x260 [ 53.885021][ T5224] should_failslab+0x8f/0xb0 [ 53.885044][ T5224] __kmalloc_noprof+0xab/0x3f0 [ 53.885070][ T5224] ? ext4_find_extent+0x172/0x7c0 [ 53.885157][ T5224] ext4_find_extent+0x172/0x7c0 [ 53.885218][ T5224] ? ext4_ext_map_blocks+0x2af9/0x35c0 [ 53.885286][ T5224] ext4_ext_map_blocks+0x11f/0x35c0 [ 53.885315][ T5224] ? __list_del_entry_valid_or_report+0x66/0x130 [ 53.885366][ T5224] ? __rmqueue_pcplist+0xf7e/0x1110 [ 53.885386][ T5224] ? number+0x9b7/0xac0 [ 53.885415][ T5224] ? ext4_map_query_blocks+0x10e/0x180 [ 53.885436][ T5224] ext4_map_blocks+0x5aa/0xd20 [ 53.885460][ T5224] _ext4_get_block+0x104/0x370 [ 53.885484][ T5224] ext4_get_block_unwritten+0x2c/0xb0 [ 53.885504][ T5224] ext4_block_write_begin+0x34f/0x9c0 [ 53.885634][ T5224] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 53.885655][ T5224] ? ext4_inode_journal_mode+0xdf/0x1d0 [ 53.885703][ T5224] ext4_write_begin+0x426/0xc30 [ 53.885732][ T5224] ? fault_in_readable+0x9a/0x1b0 [ 53.885748][ T5224] ? fault_in_readable+0xec/0x1b0 [ 53.885766][ T5224] ext4_da_write_begin+0x1b6/0x540 [ 53.885839][ T5224] generic_perform_write+0x1a8/0x4a0 [ 53.885860][ T5224] ext4_buffered_write_iter+0x1ed/0x3c0 [ 53.885889][ T5224] ext4_file_write_iter+0x383/0xf20 [ 53.885913][ T5224] ? kstrtouint_from_user+0xb0/0xe0 [ 53.885979][ T5224] ? avc_policy_seqno+0x15/0x20 [ 53.886000][ T5224] ? selinux_file_permission+0x22a/0x360 [ 53.886022][ T5224] vfs_write+0x77b/0x920 [ 53.886040][ T5224] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 53.886147][ T5224] ksys_write+0xe8/0x1b0 [ 53.886239][ T5224] __x64_sys_write+0x42/0x50 [ 53.886258][ T5224] x64_sys_call+0x287e/0x2dc0 [ 53.886359][ T5224] do_syscall_64+0xc9/0x1c0 [ 53.886380][ T5224] ? clear_bhb_loop+0x55/0xb0 [ 53.886483][ T5224] ? clear_bhb_loop+0x55/0xb0 [ 53.886505][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.886545][ T5224] RIP: 0033:0x7f0bc776cda9 [ 53.886566][ T5224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.886582][ T5224] RSP: 002b:00007f0bc5dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.886612][ T5224] RAX: ffffffffffffffda RBX: 00007f0bc7985fa0 RCX: 00007f0bc776cda9 [ 53.886623][ T5224] RDX: 000000000208e24b RSI: 00000000200004c0 RDI: 0000000000000006 [ 53.886634][ T5224] RBP: 00007f0bc5dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 53.886644][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.886655][ T5224] R13: 0000000000000000 R14: 00007f0bc7985fa0 R15: 00007ffcbfd44038 [ 53.886670][ T5224] [ 54.184733][ T3382] [ 54.187045][ T3382] write to 0xffff888116f4bd21 of 1 bytes by task 5229 on cpu 0: [ 54.194655][ T3382] tty_set_termios+0x480/0x8b0 [ 54.199406][ T3382] set_termios+0x497/0x4e0 [ 54.203810][ T3382] tty_mode_ioctl+0x391/0x5d0 [ 54.208471][ T3382] n_tty_ioctl_helper+0x8d/0x240 [ 54.213397][ T3382] n_tty_ioctl+0xfd/0x200 [ 54.217715][ T3382] tty_ioctl+0x87a/0xbe0 [ 54.221943][ T3382] __se_sys_ioctl+0xc9/0x140 [ 54.226517][ T3382] __x64_sys_ioctl+0x43/0x50 [ 54.231089][ T3382] x64_sys_call+0x1690/0x2dc0 [ 54.235755][ T3382] do_syscall_64+0xc9/0x1c0 [ 54.240243][ T3382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.246124][ T3382] [ 54.248430][ T3382] read to 0xffff888116f4bd21 of 1 bytes by task 3382 on cpu 1: [ 54.255954][ T3382] n_tty_receive_char_flow_ctrl+0x22/0x1a0 [ 54.261745][ T3382] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 54.267274][ T3382] tty_port_default_lookahead_buf+0x8a/0xc0 [ 54.273169][ T3382] flush_to_ldisc+0x31c/0x410 [ 54.277850][ T3382] process_scheduled_works+0x483/0x9a0 [ 54.283302][ T3382] worker_thread+0x51d/0x6f0 [ 54.287885][ T3382] kthread+0x4ae/0x520 [ 54.291944][ T3382] ret_from_fork+0x4b/0x60 [ 54.296354][ T3382] ret_from_fork_asm+0x1a/0x30 [ 54.301108][ T3382] [ 54.303415][ T3382] value changed: 0x11 -> 0xd8 [ 54.308073][ T3382] [ 54.310377][ T3382] Reported by Kernel Concurrency Sanitizer on: [ 54.316509][ T3382] CPU: 1 UID: 0 PID: 3382 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-10003-ga86bf2283d2c #0 [ 54.327002][ T3382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 54.337057][ T3382] Workqueue: events_unbound flush_to_ldisc [ 54.342863][ T3382] ================================================================== [ 54.378694][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.