last executing test programs: 24.629637103s ago: executing program 1 (id=1147): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x20080522}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_io_uring_setup(0x4491, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000001440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x4, 0x4, 0x43, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r6, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYRESHEX], 0x7c}}, 0x0) 24.160202185s ago: executing program 1 (id=1156): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="005fd9b62a00000000002000000f0100806d5b0f070000002475c62553"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0200", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) 23.12864591s ago: executing program 1 (id=1174): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r0}, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5b9, &(0x7f0000000140)={0x0, 0x91da}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23.09224836s ago: executing program 1 (id=1175): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f00002f2000/0x4000)=nil) shmat(r1, &(0x7f00006a6000/0x2000)=nil, 0x6000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRESDEC], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r2 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x8, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@minixdf}, {@noquota}]}, 0x41, 0x439, &(0x7f00000015c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000440)=@newtaction={0xcc, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_simple={0xb4, 0x1, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x82, 0x3, '\xc7\xd3R\xab\x05\xca\xce\xeb\xbc}\x9d\xb1\x97\x86\xf1yc\x99o\xd7o\x86W:\xd8\xe9\a\x10\xf0\xeb\xd2\x93\xb5.\xf0\x81\x8c\xdf=#v\xd0!\x06\xb0\x9fa\x0f\xac\x91\xb3\xbd\xb7\xbe\xce\x91]\x91y\x05\xf9\x8e9`\xba\xd70\x86\xdfa\xc7&|\xcb\xfa\xa5\xa6\xe6\\\xe2\x16\xc8\xdfZ\xd7\x11\x1a\xc4k\xda\xfa\xd5G\\\xbf\x81\x93\x14\x85h\xc4\xc2d\xc2\xbd\x10\xa2j\xc4\xd7\xa3FS\x82B\xa0\xe6\x96G\xbe@r\xd7\x9f\xfc\xe6'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 22.938100131s ago: executing program 1 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}]}, [{0x3, 0x0, 0x40000000}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {}, {}, {}, {0x0, 0x3254, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 22.662424102s ago: executing program 1 (id=1185): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="005fd9b62a00000000002000000f0100806d5b0f070000002475c62553"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0200", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) 22.630639002s ago: executing program 32 (id=1185): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="005fd9b62a00000000002000000f0100806d5b0f070000002475c62553"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0200", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) 3.383913604s ago: executing program 5 (id=1559): unshare(0x10000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x4000) r2 = syz_io_uring_setup(0x4c88, &(0x7f0000000180)={0x0, 0xbbda, 0x40, 0x0, 0x105, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/6, &(0x7f00000003c0)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x8, 0x0, "646faef7d312bd5048313bd7cb10e873ebff6b5fecffcfd4c37f1e94a8b3d344a6535fbdefaa75ea607d72224114f536db4b07740840510ca83f36f2a18d10ae2cae18b87ddf39a303a13de3a450ed6f"}, 0xd8) r4 = msgget(0x1, 0x528) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000540)=""/132) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600), 0x0) sendmmsg(r3, &(0x7f0000002080)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000006c0)="8238fbd08b5b025aaba3b4047f9611600d3f44d84cb2b11fd649c46dbb2a9fe399c653d10d8b939c7071faf1bed51387d0f2720316fbd0427d55f562bd8114d06e3ab11860c52669bdfd91", 0x4b}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="36cbce890abea7cb93d88de7677be8704bbcab0e7f00d2ae0809b08dcf7ab3b9c5901853a13e0805bd8bc79907191a1a2ad86cc34e7e26079a2e80ee82deb94817160639e9300a262cb201a5efb5e699f7c86fc2cbf48f53c2ca806a08273ce0c1e4c94728895425f1a69e1b9ca90bfa77bdcf7f092b0eaf170f41917830206657a91f6f335aef6a74dea28c27f11dc189f8", 0x92}, {&(0x7f0000001800)="e3012e9233da6126f718a3549b56fa72b29c8e0a6c228dc7c4c7bc45dccc3c0679f7a2d666426c5f1fe1204bbd265c1607480af15b6208a253a9", 0x3a}, {&(0x7f0000001840)="b2f6fd02348a426c63d16abe010da16dd92e7d3e25ef25e0366bf33c5c9d2e91f61f99301fb6e57bb034399a897258ce12e392ee1ca2675416f3677da632", 0x3e}, {&(0x7f0000001880)="43542d2381a06f7cab64a2ab99fb93e72118d338d28a4233027edd8b989fd7eec909e213a33048077397b563fce380dfea74af4fc78c624752cd05468afc4cdbeb3074f095ea2d0178a00f8e8ff5832f906d11754249bb68b7a0943d39925eb3f5e34adcdf97e34458c0704dc44d7a6904f5b9e915a245483e67e8e35239ae6591564fa0a5aef257d7e5e8b2a6cee10b8893d4a7d7fb849ad85be1f398475ef49e7464934320c4953a35b9a46a9591a3fcaad995ebc872693d34c72c", 0xbc}], 0x6, &(0x7f00000019c0)=[{0x78, 0x11, 0xff, "436a7249df6aafee04cd63f85e958ddca75f416c5909d0210b185d5421bf9bcf1e387d7f12f9cfa2c02747c5ddcac38433cc8236db881b8679728498e06b1e8c156b9bbb91f4b297953e86bc7ee37b3b86506abf505f3e43a311a4291a6ff0df7dfdf060cb0972c6"}, {0x38, 0x88, 0x8, "d952588506f7de0ed8d8d89e7de6987d55cad5e6aad740846e781568f38980da4ba092ae903fc07d"}, {0x48, 0x115, 0xffff0000, "eb4f996a5e7d4c72db8b779cb93db7821cc084442333cb1d2130fa6840e84fc26175cd57af98478dcb82a96f3da3d67d22286a"}, {0x28, 0x1, 0x9, "a51d28c98985e9bfe032e340b41c276511"}, {0x98, 0x111, 0xfffffff1, "ffe93e24c5a15dec44bca193a80629cd62a873194db11c96003e5a848da580fbfa9766cbbc6daf168480e1e883638c64144abb1872c645978e89313deaa5a57f8aa892f19063916acde7a083bfc867f5a94db28ef7e622d8abea8ee8a27d4928be44eece9e6433c9f1db940eab4c7cab8ee6806539927cf71813b6b04b334df6f6ec36eb"}], 0x1b8}}, {{&(0x7f0000001b80)=@phonet={0x23, 0x1, 0x5, 0x8}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)="ea23790b9e227c6d32c2aa82c9114abf7ffdc615bcedecdab774bb37478f80e272d11401d5d86ef87ba4b266d2e34ce78c7601d064ab2c46442c19c4b2f760fb582738561c5a772c9ecd10e7f2647125093490373ed055143106896705a820682d17a1a3300401969169076610ce2cf244486bca51a86733657a957365460cdf9b94867c5badf8af6e3106eef588181b9b17b666803ec75aef36db2f50b0d0db1aba17a227cd22f6b84666f208b20d09f7c6660416fb6e4e7a1345e508c8ab80399e89eb0332da3e89b7627dfcb486d0097f1bc54add8a95174ebef0a97c901d139a30deca85fa2ba0df4f08fabac4bcf5dd7a", 0xf3}, {&(0x7f0000001d00)}], 0x2, &(0x7f0000001d80)=[{0x100, 0x11, 0x9, "cc318fb3a62d07c1c2a90bdf9e72ce9eb592ef8c3bbe9200ed25dbb673daeeeda592badd4da6c1e78249e4f20259237cef9ffdb2c15001aaa944e0bc24bf2af3e769e101f71c2ad6f1043765d810c11bc1d7f6a618bf4c5e50a870af6c6d4165e584409a00c6853a75b79e137ee579897c2ea8a1bbd448ec232794134f260f668dfa4c10a81bb43cf6e8329dbc77e22252fe041c355244af29165f2a940b3e184d2836bbd9000d5fa4b8d59990bb4c9e575643f58807656d1f7bb5ae180dd934bc339afb588d9ed8e643f50d6821cc479015d19583b2a305139a93b5c42b8d0dc14546d722fbe20a2ba0"}, {0xf8, 0x84, 0x7ff, "b952164d91484dee33c820d9fe8a78bfc305b5035863057ec61bb33426390158bbffa7e481b6ca2d5a701cffbaadd1298d306520efcd9108e89a3a223d48c3ce0bfa79ff40fc05b9096eaf3c96f49ef73c76cd428b43abf000461600537d1305473ea44ae62b4ffb89ccb9e45364d9da69cf2762f22f2e69345622d2711b527482bd820537818550fa7b5f559da11d5f86afbf06737b9fc528e0ca38269355d43478efed492ef6e3b0393ead7631ba03632ca28e888533c89c76561e7d4aece08a75644cd93ec7a85defcf5c58da87f20fcc7eeea8a8f26179a486649ace60d222123e2c4fd4a8"}, {0xd0, 0x103, 0x8, "91fb9cb2ae50dbe1f48dff0da0c759d6115bdc709b1bcb169d45618e25528a4dab5ac85b9a3f145438de1b484d058c05a80e7eafd99ca308b21fe60f65c2b9ba39fb5c6a52bf494820bbf98a4fc51fe87ddae1b10ce02c38c764bf1c69e8a31e13f433c3fdf2e3343eedb00cc3c61449ad646261698607dbcd78a6b3f9aa1bc60ae8af2a859d1e9a3f5ea8718f236bdb56f4031966091d57d9e9dcafbfc1135c040666f83adaa8ccea1a5c075ef11e092ff49fc3983bcab90f"}], 0x2c8}}], 0x2, 0x4040) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002100)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000002140)="a65a43d34864e2a85ac647ba8ff32f1cc4bae7a1d4b87bca30750157676a6ef48957162db8f86d270f7673a81948116b7916a0dba465ebec038b17fb69eb98c8f07b921766bece", 0x47) timerfd_gettime(r5, &(0x7f00000021c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) 3.314900944s ago: executing program 5 (id=1562): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80200, 0x20) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x400003, 0x20) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="c07788f9a122796586682223e39449e2d1c2ad19dff374934a4de86e9afdc5198dbf1c9eb613c4a4df232872b7fefb8ddf7e", 0x32}, {&(0x7f00000000c0)="dc86142815d3e3ac4069226459fef328859f7beab57e6084bb9fc3", 0x1b}, {&(0x7f0000000100)="7a441fbf16149d11cd0c832fa784c732be82d167c15ca7648f564f47f5cd86a20b88cacbefec2527dad190cd1de13a18f1a4377060d0", 0x36}], 0x3, 0x146, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) syz_io_uring_setup(0x66d4, &(0x7f0000000200)={0x0, 0xdefe, 0x2, 0x3, 0x231, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0)) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)={0x1, 0x0, @c}, 0x29, r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, &(0x7f0000000440), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff00, 0x5, 0x1}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x8, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x8}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x2}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x5}, {0x6, 0x3}, {0x1}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x1}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x2e0}, {0x6, 0xfffffffc}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @struct={0x5, 0x2, 0x0, 0x4, 0x1, 0x1000, [{0x0, 0x0, 0x2}, {0xb, 0x0, 0x3}]}]}, {0x0, [0x61, 0x5f, 0x61, 0x0, 0x5f, 0x0]}}, &(0x7f00000007c0)=""/206, 0xcc, 0xce, 0x0, 0x79, 0x0, @void, @value}, 0x28) timer_create(0x2, &(0x7f0000000980)={0x0, 0x29, 0x1, @thr={&(0x7f0000000900), &(0x7f0000000940)="df98f7cafbf67ef189"}}, &(0x7f00000009c0)=0x0) timer_getoverrun(r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x11c, r6, 0x1, 0x70bd28, 0x3ff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef6c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x888ce5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xace}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6aa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11e9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11c00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84}, 0x4) r7 = getpgid(0xffffffffffffffff) sched_getscheduler(r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0xa1, 0x7, 0x5, 0xffffffff, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x65, 0x0, 0xd, 0x4, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x21, 0x2, [{0x2, 0xd, "d0077eef8b6115d9951621"}, {0x7, 0xe, "b033c137a7702d13684ef220"}]}, @ssrr={0x89, 0x17, 0x37, [@remote, @broadcast, @remote, @empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @generic={0x88, 0x9, "57e467af1819b4"}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000d80)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000e80)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'tunl0\x00', 0x0, 0x8000, 0x746, 0xffffffff, 0x8000, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0xd, [{@remote, 0x6a3}, {@private=0xa010100, 0x32}, {@remote, 0x2ec877bd}]}, @generic={0x83, 0x11, "203ee8df9cd059a7d2641e130d96da"}]}}}}}) r11 = geteuid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r1, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000fc0)=[0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) r13 = geteuid() ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x2f, 0xd, 0xc, 0x0, 0x41, @mcast2, @mcast2, 0x7800, 0x7827, 0x5, 0x81}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)=@polexpire={0x2d4, 0x1b, 0x1, 0x70bd2c, 0x25dfdbfe, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e24, 0xff, 0x4e21, 0x8, 0xa, 0x20, 0x80, 0x1, r8, r9}, {0x7, 0x66a8, 0x2, 0x19, 0x4, 0x8, 0x5}, {0xc10000000000000, 0x5, 0x9, 0xfffffffffffffffa}, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x9}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa, 0x2, 0xff}}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e21, 0x1ff, 0x4e20, 0x7, 0xa, 0x80, 0xe0, 0x6c, r10, r11}, {0x200, 0xd6, 0x3, 0xb14, 0x5, 0xd, 0x8000, 0x4}, {0x1, 0x2, 0x5, 0xd94}, 0x7, 0x6e6bb7, 0x0, 0x1, 0x3, 0x2}}, @sa={0xe4, 0x6, {{@in=@private=0xa010101, @in=@rand_addr=0x64010101, 0x4e20, 0x6, 0x4e21, 0x28, 0xa, 0xa0, 0x20, 0x0, r12, r13}, {@in6=@remote, 0x4d5}, @in=@private=0xa010102, {0x1411, 0xff, 0x2, 0x5, 0x1, 0x7f, 0x29, 0x8}, {0xc, 0x3, 0xb05e, 0x2}, {0x7, 0x7, 0xffffff76}, 0x70bd28, 0x0, 0x2, 0x4, 0x40, 0x8}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2}}, @offload={0xc, 0x1c, {r14, 0x1}}, @lastused={0xc, 0xf, 0xc876}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xbc}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40400e0}, 0x4004) syz_open_dev$usbfs(&(0x7f00000016c0), 0xe95, 0x1c5102) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001740), r4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r15, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000860) clock_getres(0x7, &(0x7f0000001840)) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000001880)=0x9, 0x4) 3.097949715s ago: executing program 5 (id=1567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r2, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x112e, &(0x7f0000002080)=ANY=[], 0x0) (fail_nth: 4) 2.709413037s ago: executing program 5 (id=1570): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x7fff, 0x169c82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 2.627525188s ago: executing program 5 (id=1571): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x0, @perf_config_ext={0x7ffa, 0xaea}, 0x110100, 0x32, 0x0, 0x3, 0x4002, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5850}, 0x0) 2.486270778s ago: executing program 5 (id=1574): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec0600bc0413a1f848100000005e0e0000000000000e0021001500180002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000580)=""/177) splice(r5, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) r6 = dup3(r5, r2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060103000006000000000000000000"], 0x14}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setgid(0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[@ANYBLOB="ac040000", @ANYRES16=r7, @ANYBLOB="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"], 0x4ac}}, 0x80) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.452286823s ago: executing program 4 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c2800005000300"], 0x48}}, 0x40000) 1.411464293s ago: executing program 4 (id=1596): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x62a8, 0x200}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) r4 = eventfd(0xb7) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r4, 0x1) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x13, 0xf8, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x4, 0x6}]}, 0x18}}, 0x2000) 1.410341063s ago: executing program 0 (id=1597): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1.330003554s ago: executing program 4 (id=1598): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedreceive(r2, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x35, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext={0x8e, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000c4c024687e00"/33], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000003c0), 0x0, 0x0) 1.117955835s ago: executing program 0 (id=1599): socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") inotify_init() socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.074110075s ago: executing program 4 (id=1601): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d4, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.046030375s ago: executing program 0 (id=1602): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x13, 0x0, 0x8, 0x2}, 0x10}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) 1.036105535s ago: executing program 2 (id=1603): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setreuid(0x0, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xecf7}, 0x8) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000140)=0x10) 965.646065ms ago: executing program 2 (id=1604): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x7fff, 0x169c82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f80200000044000200300f46036a08b3d336cd5817d30461bc24ee", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 940.872636ms ago: executing program 2 (id=1605): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_per_queue_op={0x4b, 0xf, [0x455a, 0x5, 0x4c84, 0x5, 0x3, 0x2, 0xfffffffa, 0x200, 0x80000000, 0x1, 0x7ff, 0xffffffff, 0x401, 0x9, 0x21, 0x9, 0x2, 0x7f, 0x6, 0x5, 0x1, 0x80000001, 0x400080, 0x8, 0x2, 0xff, 0x0, 0xffffffff, 0x622c, 0x0, 0x4, 0x6, 0x4542, 0x200, 0x1, 0xdb2, 0x80000001, 0x0, 0x9, 0x8, 0x8000, 0x4c7, 0x6, 0x7f, 0xe, 0x3, 0x43f, 0x8, 0x9, 0x79f, 0x4, 0x7f8, 0xfffffff9, 0x7f, 0x18000000, 0x3, 0x80, 0xd18, 0x9, 0x401f, 0x4, 0x8bb, 0x8, 0x3, 0xfea, 0x7, 0x2, 0x9, 0x0, 0x2, 0x7c47d7b5, 0x85, 0x4, 0x7, 0x7fff, 0x7, 0x8001, 0xffffffff, 0x10, 0x4, 0x9, 0x3, 0x5, 0x5e374be4, 0x98f8, 0x8, 0xfff, 0x7, 0x6ed4, 0xffffffff, 0x101, 0x200, 0x7, 0x9, 0x8, 0xe1dc, 0xfffff000, 0x7483, 0x1, 0x7, 0x1, 0xfffffff9, 0x2, 0x80000000, 0x80000000, 0x200, 0xa, 0x0, 0x9, 0x11a94a0c, 0x6, 0x25f7, 0x6, 0x9, 0x9, 0xffff, 0x400, 0xfff, 0x3, 0x7, 0x8001, 0xf8, 0xb4, 0x4, 0x0, 0xab07, 0x7f1faa2f, 0x8]}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x21fb, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 881.037766ms ago: executing program 2 (id=1606): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000005380)=@newtaction={0x1b80, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x80}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}, {0x16f8, 0x1, [@m_ctinfo={0xa8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x73, 0x6, "893c94e3d0faf14aa4b4e3abb4911ad4c09646ef968142a573b223c8e98a618117242139ab28946a057e3509d6a908addbb83b55674bda882776e61da29e8c4710741ad24906bfca3c2c6974953c2ee9d7acaa5e70faefab49c1b74f2899e1d1970d8cfd9e467030980bd2b114eb89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x12c, 0x20, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}]}, {0xa8, 0x6, "ff928bd83d78f038cc203e51c0eb6ffdc247210b134ca6807bfbc572322310d7987c9c0e30f07fd6aeea1b9a2f8a97ff43ee6427264a490ffb07fce5fbf23253c11ea777477970664d4daae12c2d926e3bbe813982c7535739bf01b1b5e80049cf0ad1ff794c506a437dc502ee748f677d4eba766b1783ecbee14d298a0815eff402472786e9fce39c38a2bdc75ab641061b80286d4003d367c20eaee95618e4f724dc2e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x12c, 0x0, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_ACTION={0x6, 0x3, 0x25}, @TCA_CT_LABELS_MASK={0x14, 0x8, "90363743cab1042626b913b77c572cb7"}]}, {0xd8, 0x6, "56c296f764991b58d349487d9d2516785e08ce016bf6931ab2840b61abfcc50fbf141fab28b751a701d04f33cdff9a5c5f13660600c749f3c618b449a60fa34bdfa8aa48becd65984e498364b594609d9263a3ca674569e2d2ace9f07725b65e1ac9ff65de97a4c3ab8028e7cc5e94debff7a1deff62dc5148be246018a4e5fc55ce4e2bf4423f8a0a9231ff3b185eeb5413e0fb89d82efb6ae199a8e17dd7c9752bf1aa8ca6fbec3b5d3a6737751b73aa7c61e8e43f5e75d002c3c3ccbe1fcb7b133438b419c7403d2de81678fd9ffc5fdff8c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x110, 0x1e, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffff19, 0xa6e, 0x5, 0x6, 0x2}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa000}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe7d}]}, {0xa5, 0x6, "0d26cab65c0a74e6134a0ef597d8a538360f00b2fa58c43f90bcc8831f01bdb6a1082d278c29e1b3bfb37d0de3bf91e7a0dd9f192578d3429e9668068d46365438145088aebc9697c3ca94e3b52318a7bb5ee4df75d529983ee7a69b97560d3e46c4e56716a42ae7aa1dab63f13f8b0a68adc3886ece3b411208a4818a267561d297945ca6f51d9aa7ff3c96ffce1584f383bc26997496532d1ce86314fbfcfa66"}, {0xc, 0x7, {0x4e9690bd3e2ca26a, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x168, 0x14, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x101, 0x4, 0x5, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x6, 0x1, 0x2, 0x10001}}, @TCA_GACT_PROB={0xc, 0x3, {0x6048241bb1ed798a, 0x15b0, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1308, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xe31, 0x1, 0x2, 0x800}}]}, {0xc4, 0x6, "aa0a5e294c24deb7fb4528d71dc14eb42708462ac3ffba68d668d20477c2861e4a020a8bc3eb4b1f83003669bd257023ca2f20c3889fe57f272cd9ff77ae5eba6a97d37f45ffc86f0034c6c5cae1ebc4722557542360c7a9d59eaf58ba8fa32788323a12abd26dec217c113914211438e7fecacba76650a6c65ece0adf868902c17f71b1a0aaa761b6a3151f25a352d77cdefd49c92beba91367fde4e19805b4f687f19a5ac4d58f969b838d1cedf79a15f73b6890b4b0a8b3d7b6c3b72789e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x106c, 0x16, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x7, 0x800, 0xfff}, 0x7}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x110, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffc11, 0x10001, 0x7, 0x3, 0x8}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xac, 0x6, "aed6454cb16d1154d8d2d4757c0d27316e1b9cd9b00059100f5cbbceb1bb5691fbaefbea2fda74e174ab7658f62d87f4e2accb2c41c553271d3f3a1cf20225cf5cffd9680eaa6d8fbdd130c87de4424a5837c62e224f001b7fce1d24e61a395b4fd44a535a8488f31aa4bd918d5b4a377343bc5391089e9252e23f8b81870ce3acf0b422ed0c240711ddfd4a0d3ffc75c57b50fbdedb16e4dc55df5bd33f28343487bd2c468d1e6d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1b80}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 789.773156ms ago: executing program 3 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c2800005000300"], 0x48}}, 0x40000) 774.857706ms ago: executing program 3 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x5, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0xd) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0xfffffffc, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xc6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00'}, 0x10) keyctl$join(0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000380)={'c', ' *:* ', 'r\x00'}, 0x8) 735.788327ms ago: executing program 2 (id=1609): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x20080522}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_io_uring_setup(0x4491, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000001440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ac8000/0x2000)=nil, 0x44, 0x0, 0x0, 0x1, 0x4, 0x4, 0x43, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r6, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB, @ANYRES32=r8, @ANYRESHEX=r8], 0x7c}}, 0x0) 680.679007ms ago: executing program 3 (id=1610): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getresgid(0x0, &(0x7f0000000080), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r4, 0x8}, 0x14}}, 0x20000040) setuid(0x0) mbind(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 563.089898ms ago: executing program 3 (id=1611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r1, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sync() ftruncate(r1, 0x51a9497) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40000000}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setregid(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@lld}, @printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x44a, &(0x7f0000001380)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8cd}) getdents64(r6, &(0x7f0000000000)=""/50, 0x32) 347.764079ms ago: executing program 3 (id=1612): socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") inotify_init() socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 314.699149ms ago: executing program 2 (id=1613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000240)={{0x5c, @remote, 0x4e20, 0x3, 'wlc\x00', 0x24, 0x5, 0x6}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4e23, 0x1, 0x6, 0xffff7399}}, 0x44) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000000000b73e6d8af177bd", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='block_split\x00', r6}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000340)='children\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) io_uring_setup(0x5387, &(0x7f0000000440)={0x0, 0x482c, 0x2, 0x3, 0x150}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r0) 159.261379ms ago: executing program 4 (id=1614): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x62a8, 0x200}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) r4 = eventfd(0xb7) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r4, 0x1) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) write$tun(0xffffffffffffffff, 0x0, 0x46) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x13, 0xf8, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x4, 0x6}]}, 0x18}}, 0x2000) 101.71515ms ago: executing program 0 (id=1615): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x7fff, 0x169c82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f80200000044000200300f46036a08b3d336cd5817d30461bc24ee", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 85.30699ms ago: executing program 3 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 1) 84.55835ms ago: executing program 0 (id=1617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000200)="2c8b23d9e9f34a0379421ff45d0ba004ca77e6946f769bac2be4f6fc", 0x1c, 0x7f}, &(0x7f0000000300)) 32.56057ms ago: executing program 0 (id=1618): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c2800005000300"], 0x48}}, 0x40000) 0s ago: executing program 4 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.089250][ T7105] RSP: 002b:00007f87fcc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.097700][ T7105] RAX: ffffffffffffffda RBX: 00007f87fe765fa0 RCX: 00007f87fe5ae819 [ 83.105743][ T7105] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 83.113816][ T7105] RBP: 00007f87fcc27090 R08: 0000000000000000 R09: 0000000000000000 [ 83.121801][ T7105] R10: 000000008000000d R11: 0000000000000246 R12: 0000000000000001 [ 83.129786][ T7105] R13: 0000000000000000 R14: 00007f87fe765fa0 R15: 00007ffd739331b8 [ 83.137774][ T7105] [ 83.284471][ T7122] x_tables: duplicate underflow at hook 3 [ 83.313664][ T7125] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 83.356009][ T7129] ip6erspan0: entered promiscuous mode [ 83.361893][ T7129] ip6erspan0: entered allmulticast mode [ 83.488432][ T7141] loop2: detected capacity change from 0 to 4096 [ 83.521947][ T7141] Process accounting resumed [ 83.528031][ T7141] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 83.587460][ T7147] FAULT_INJECTION: forcing a failure. [ 83.587460][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.600649][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.1.1042 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 83.611200][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.621451][ T7147] Call Trace: [ 83.624749][ T7147] [ 83.627697][ T7147] dump_stack_lvl+0xf2/0x150 [ 83.632328][ T7147] dump_stack+0x15/0x20 [ 83.636617][ T7147] should_fail_ex+0x223/0x230 [ 83.641323][ T7147] should_fail+0xb/0x10 [ 83.645549][ T7147] should_fail_usercopy+0x1a/0x20 [ 83.650776][ T7147] _copy_from_user+0x1e/0xb0 [ 83.655412][ T7147] copy_msghdr_from_user+0x54/0x2a0 [ 83.660649][ T7147] ? __fget_files+0x17c/0x1c0 [ 83.665786][ T7147] __sys_sendmsg+0x13e/0x230 [ 83.670529][ T7147] __x64_sys_sendmsg+0x46/0x50 [ 83.675370][ T7147] x64_sys_call+0x2734/0x2dc0 [ 83.680124][ T7147] do_syscall_64+0xc9/0x1c0 [ 83.684760][ T7147] ? clear_bhb_loop+0x55/0xb0 [ 83.689677][ T7147] ? clear_bhb_loop+0x55/0xb0 [ 83.694487][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.700445][ T7147] RIP: 0033:0x7fe0dea1e819 [ 83.704881][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.724602][ T7147] RSP: 002b:00007fe0dd097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.733043][ T7147] RAX: ffffffffffffffda RBX: 00007fe0debd5fa0 RCX: 00007fe0dea1e819 [ 83.741035][ T7147] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 83.749019][ T7147] RBP: 00007fe0dd097090 R08: 0000000000000000 R09: 0000000000000000 [ 83.757008][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.765004][ T7147] R13: 0000000000000000 R14: 00007fe0debd5fa0 R15: 00007fff42d58488 [ 83.773047][ T7147] [ 83.818312][ T7150] netlink: 'syz.2.1040': attribute type 33 has an invalid length. [ 83.839074][ T7152] x_tables: duplicate underflow at hook 3 [ 83.916685][ T7158] syzkaller0: entered promiscuous mode [ 83.922321][ T7158] syzkaller0: entered allmulticast mode [ 83.965670][ T7161] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 84.080124][ T7167] loop3: detected capacity change from 0 to 512 [ 84.105400][ T7165] loop4: detected capacity change from 0 to 2048 [ 84.121441][ T7167] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.149016][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 84.149031][ T29] audit: type=1326 audit(1732218060.590:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e06e819 code=0x7ffc0000 [ 84.178813][ T29] audit: type=1326 audit(1732218060.590:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e06e819 code=0x7ffc0000 [ 84.237110][ T7170] loop2: detected capacity change from 0 to 4096 [ 84.270902][ T29] audit: type=1326 audit(1732218060.590:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f749e06e819 code=0x7ffc0000 [ 84.294496][ T29] audit: type=1326 audit(1732218060.590:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e06e819 code=0x7ffc0000 [ 84.317992][ T29] audit: type=1326 audit(1732218060.590:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f749e06e819 code=0x7ffc0000 [ 84.341791][ T29] audit: type=1326 audit(1732218060.590:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749e06e819 code=0x7ffc0000 [ 84.365378][ T29] audit: type=1326 audit(1732218060.590:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f749e070737 code=0x7ffc0000 [ 84.379127][ T7178] loop1: detected capacity change from 0 to 4096 [ 84.388921][ T29] audit: type=1326 audit(1732218060.590:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f749e0706ac code=0x7ffc0000 [ 84.418757][ T29] audit: type=1326 audit(1732218060.590:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f749e0705e4 code=0x7ffc0000 [ 84.442267][ T29] audit: type=1326 audit(1732218060.590:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7166 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f749e0705e4 code=0x7ffc0000 [ 84.483330][ T7170] Process accounting resumed [ 84.499746][ T7178] Process accounting resumed [ 84.504821][ T7170] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 84.519949][ T6770] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.544976][ T7178] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 84.557441][ T3437] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 84.570084][ T3437] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.570084][ T3437] [ 84.579741][ T3437] EXT4-fs (loop4): Total free blocks count 0 [ 84.585859][ T3437] EXT4-fs (loop4): Free/Dirty block details [ 84.591843][ T3437] EXT4-fs (loop4): free_blocks=2415919104 [ 84.597574][ T3437] EXT4-fs (loop4): dirty_blocks=16 [ 84.602770][ T3437] EXT4-fs (loop4): Block reservation details [ 84.608811][ T3437] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 84.739443][ T7192] syzkaller0: entered promiscuous mode [ 84.745141][ T7192] syzkaller0: entered allmulticast mode [ 84.745347][ T7197] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 84.753549][ T7195] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 84.838548][ T7205] loop2: detected capacity change from 0 to 512 [ 84.872423][ T7205] EXT4-fs: Ignoring removed bh option [ 84.878230][ T7205] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 84.888872][ T7205] EXT4-fs (loop2): 1 truncate cleaned up [ 84.939353][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 84.948412][ T7213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1065'. [ 84.989005][ T7211] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 85.005393][ T7220] loop3: detected capacity change from 0 to 4096 [ 85.028817][ T7220] Process accounting resumed [ 85.035919][ T7220] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 85.113266][ T7233] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 85.221286][ T7248] netlink: 'syz.0.1076': attribute type 33 has an invalid length. [ 85.280757][ T7253] syzkaller0: entered promiscuous mode [ 85.286371][ T7253] syzkaller0: entered allmulticast mode [ 85.405191][ T7262] loop4: detected capacity change from 0 to 4096 [ 85.419692][ T7262] FAULT_INJECTION: forcing a failure. [ 85.419692][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 85.432409][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.4.1079 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 85.442766][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 85.452855][ T7262] Call Trace: [ 85.456138][ T7262] [ 85.459084][ T7262] dump_stack_lvl+0xf2/0x150 [ 85.463716][ T7262] dump_stack+0x15/0x20 [ 85.467922][ T7262] should_fail_ex+0x223/0x230 [ 85.472657][ T7262] ? __es_insert_extent+0x563/0xed0 [ 85.477877][ T7262] should_failslab+0x8f/0xb0 [ 85.482530][ T7262] kmem_cache_alloc_noprof+0x4c/0x290 [ 85.487932][ T7262] __es_insert_extent+0x563/0xed0 [ 85.493060][ T7262] ext4_es_cache_extent+0x294/0x3a0 [ 85.498286][ T7262] ext4_find_extent+0x34f/0x7c0 [ 85.503187][ T7262] ext4_ext_map_blocks+0x11f/0x35c0 [ 85.508480][ T7262] ? delete_node+0x40b/0x450 [ 85.513182][ T7262] ? __send_signal_locked+0x655/0x780 [ 85.518624][ T7262] ? send_signal_locked+0x28f/0x3a0 [ 85.523868][ T7262] ? down_read+0x171/0x4b0 [ 85.528342][ T7262] ext4_map_query_blocks+0x71/0x180 [ 85.533999][ T7262] ext4_map_blocks+0x23c/0xd20 [ 85.538848][ T7262] ? bpf_trace_run2+0x123/0x1d0 [ 85.543776][ T7262] ? security_compute_sid+0xda7/0xe10 [ 85.549165][ T7262] ? __traceiter_kfree+0x2b/0x50 [ 85.554160][ T7262] ? security_compute_sid+0xda7/0xe10 [ 85.559711][ T7262] ext4_getblk+0x11f/0x530 [ 85.564271][ T7262] ext4_bread_batch+0x5b/0x360 [ 85.569077][ T7262] __ext4_find_entry+0xa1d/0x1090 [ 85.574174][ T7262] ? avc_has_perm_noaudit+0x1cc/0x210 [ 85.579585][ T7262] ? may_create+0x2b2/0x300 [ 85.584130][ T7262] ext4_lookup+0xba/0x390 [ 85.588543][ T7262] ? __pfx_ext4_lookup+0x10/0x10 [ 85.593613][ T7262] path_openat+0xd40/0x1fa0 [ 85.598206][ T7262] do_filp_open+0x107/0x230 [ 85.602906][ T7262] do_sys_openat2+0xab/0x120 [ 85.607638][ T7262] __x64_sys_openat+0xf3/0x120 [ 85.612604][ T7262] x64_sys_call+0x2b30/0x2dc0 [ 85.617355][ T7262] do_syscall_64+0xc9/0x1c0 [ 85.622145][ T7262] ? clear_bhb_loop+0x55/0xb0 [ 85.626940][ T7262] ? clear_bhb_loop+0x55/0xb0 [ 85.631667][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.637732][ T7262] RIP: 0033:0x7f94ca82e819 [ 85.642234][ T7262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.662673][ T7262] RSP: 002b:00007f94c8ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.671380][ T7262] RAX: ffffffffffffffda RBX: 00007f94ca9e5fa0 RCX: 00007f94ca82e819 [ 85.679523][ T7262] RDX: 0000000000143042 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 85.687665][ T7262] RBP: 00007f94c8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.695667][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.703652][ T7262] R13: 0000000000000000 R14: 00007f94ca9e5fa0 R15: 00007fffff379f08 [ 85.711738][ T7262] [ 85.836496][ T7265] loop1: detected capacity change from 0 to 4096 [ 85.914849][ T7276] x_tables: duplicate underflow at hook 3 [ 85.973903][ T7279] syzkaller0: entered promiscuous mode [ 85.979506][ T7279] syzkaller0: entered allmulticast mode [ 85.999612][ T7265] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 86.064051][ T7285] netlink: 'syz.4.1088': attribute type 33 has an invalid length. [ 86.141411][ T7298] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 86.153547][ T7296] team0: entered promiscuous mode [ 86.169510][ T7295] syzkaller0: entered promiscuous mode [ 86.175122][ T7295] syzkaller0: entered allmulticast mode [ 86.194162][ T7296] team0: left promiscuous mode [ 86.224200][ T7306] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 86.267811][ T7313] x_tables: duplicate underflow at hook 3 [ 86.308493][ T7317] loop3: detected capacity change from 0 to 2048 [ 86.318586][ T7317] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 86.354272][ T7318] syzkaller0: entered promiscuous mode [ 86.359918][ T7318] syzkaller0: entered allmulticast mode [ 86.368658][ T7320] loop1: detected capacity change from 0 to 512 [ 86.386094][ T7320] EXT4-fs: Ignoring removed bh option [ 86.393794][ T7322] FAULT_INJECTION: forcing a failure. [ 86.393794][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 86.406501][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.3.1098 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 86.416935][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 86.427018][ T7322] Call Trace: [ 86.430416][ T7322] [ 86.433391][ T7322] dump_stack_lvl+0xf2/0x150 [ 86.437498][ T7324] loop4: detected capacity change from 0 to 4096 [ 86.438011][ T7322] dump_stack+0x15/0x20 [ 86.448759][ T7322] should_fail_ex+0x223/0x230 [ 86.451386][ T7320] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 86.453459][ T7322] ? dup_task_struct+0x6c/0x710 [ 86.466656][ T7322] should_failslab+0x8f/0xb0 [ 86.471287][ T7322] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 86.477116][ T7322] dup_task_struct+0x6c/0x710 [ 86.481886][ T7322] ? path_openat+0x1a5a/0x1fa0 [ 86.486725][ T7322] copy_process+0x3a9/0x1f90 [ 86.491339][ T7322] ? _copy_from_user+0x8d/0xb0 [ 86.496198][ T7322] kernel_clone+0x167/0x5e0 [ 86.500876][ T7322] __se_sys_clone3+0x1ba/0x200 [ 86.505711][ T7322] ? fpregs_restore_userregs+0x83/0x1b0 [ 86.511350][ T7322] __x64_sys_clone3+0x31/0x40 [ 86.516161][ T7322] x64_sys_call+0x2d56/0x2dc0 [ 86.520873][ T7322] do_syscall_64+0xc9/0x1c0 [ 86.525441][ T7322] ? clear_bhb_loop+0x55/0xb0 [ 86.530269][ T7322] ? clear_bhb_loop+0x55/0xb0 [ 86.534977][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.541185][ T7322] RIP: 0033:0x7f749e06e819 [ 86.545692][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.565377][ T7322] RSP: 002b:00007f749c6e0f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 86.573806][ T7322] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f749e06e819 [ 86.581808][ T7322] RDX: 00007f749c6e0f20 RSI: 0000000000000058 RDI: 00007f749c6e0f20 [ 86.589787][ T7322] RBP: 00007f749c6e1090 R08: 0000000000000000 R09: 0000000000000058 [ 86.597776][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.605753][ T7322] R13: 0000000000000000 R14: 00007f749e225fa0 R15: 00007fff88d12ae8 [ 86.613760][ T7322] [ 86.631323][ T7320] EXT4-fs (loop1): 1 truncate cleaned up [ 86.658400][ T7324] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 86.713660][ T7328] loop3: detected capacity change from 0 to 8192 [ 86.726905][ T7330] loop1: detected capacity change from 0 to 736 [ 86.754976][ T7334] team0: entered promiscuous mode [ 86.788148][ T7334] team0: left promiscuous mode [ 86.798993][ T7330] 9pnet_fd: p9_fd_create_tcp (7330): problem connecting socket to 127.0.0.1 [ 86.869168][ T7340] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 86.956258][ T7351] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 87.040609][ T7361] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 87.082755][ T7357] x_tables: duplicate underflow at hook 3 [ 87.166017][ T7368] loop4: detected capacity change from 0 to 512 [ 87.202628][ T7371] FAULT_INJECTION: forcing a failure. [ 87.202628][ T7371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.215789][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.3.1111 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 87.226347][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 87.236432][ T7371] Call Trace: [ 87.239731][ T7371] [ 87.242692][ T7371] dump_stack_lvl+0xf2/0x150 [ 87.247339][ T7371] dump_stack+0x15/0x20 [ 87.251562][ T7371] should_fail_ex+0x223/0x230 [ 87.256350][ T7371] should_fail+0xb/0x10 [ 87.260529][ T7371] should_fail_usercopy+0x1a/0x20 [ 87.265596][ T7371] _copy_from_user+0x1e/0xb0 [ 87.270381][ T7371] proc_do_submiturb+0x867/0x1de0 [ 87.275461][ T7371] ? path_openat+0x1990/0x1fa0 [ 87.280305][ T7371] usbdev_ioctl+0x1d86/0x3e00 [ 87.285090][ T7371] ? do_vfs_ioctl+0x96e/0x1530 [ 87.290041][ T7371] ? selinux_file_ioctl+0x2f7/0x380 [ 87.295309][ T7371] ? __fget_files+0x17c/0x1c0 [ 87.300031][ T7371] ? __pfx_usbdev_ioctl+0x10/0x10 [ 87.305112][ T7371] __se_sys_ioctl+0xc9/0x140 [ 87.309802][ T7371] __x64_sys_ioctl+0x43/0x50 [ 87.314420][ T7371] x64_sys_call+0x1690/0x2dc0 [ 87.319165][ T7371] do_syscall_64+0xc9/0x1c0 [ 87.323782][ T7371] ? clear_bhb_loop+0x55/0xb0 [ 87.328677][ T7371] ? clear_bhb_loop+0x55/0xb0 [ 87.333460][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.339501][ T7371] RIP: 0033:0x7f749e06e819 [ 87.343968][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.363718][ T7371] RSP: 002b:00007f749c6e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.372176][ T7371] RAX: ffffffffffffffda RBX: 00007f749e225fa0 RCX: 00007f749e06e819 [ 87.380296][ T7371] RDX: 0000000020000000 RSI: 000000008038550a RDI: 0000000000000006 [ 87.388299][ T7371] RBP: 00007f749c6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 87.396617][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.404747][ T7371] R13: 0000000000000000 R14: 00007f749e225fa0 R15: 00007fff88d12ae8 [ 87.413306][ T7371] [ 87.456644][ T7368] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.525212][ T7378] syzkaller0: entered promiscuous mode [ 87.530865][ T7378] syzkaller0: entered allmulticast mode [ 87.633341][ T7381] loop4: detected capacity change from 0 to 2048 [ 87.661075][ T7381] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 87.704666][ T7383] loop3: detected capacity change from 0 to 2048 [ 87.850521][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.871214][ T7391] team0: entered promiscuous mode [ 87.899484][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 87.911931][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.911931][ T50] [ 87.921758][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 87.928161][ T50] EXT4-fs (loop3): Free/Dirty block details [ 87.934100][ T50] EXT4-fs (loop3): free_blocks=2415919104 [ 87.939970][ T50] EXT4-fs (loop3): dirty_blocks=16 [ 87.945242][ T50] EXT4-fs (loop3): Block reservation details [ 87.951259][ T50] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 87.963562][ T7391] team0: left promiscuous mode [ 87.997754][ T7395] FAULT_INJECTION: forcing a failure. [ 87.997754][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 88.010711][ T7395] CPU: 0 UID: 0 PID: 7395 Comm: syz.1.1120 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 88.021069][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 88.031231][ T7395] Call Trace: [ 88.034518][ T7395] [ 88.037466][ T7395] dump_stack_lvl+0xf2/0x150 [ 88.042096][ T7395] dump_stack+0x15/0x20 [ 88.046295][ T7395] should_fail_ex+0x223/0x230 [ 88.051018][ T7395] ? alloc_fs_context+0x44/0x4e0 [ 88.055976][ T7395] should_failslab+0x8f/0xb0 [ 88.060601][ T7395] __kmalloc_cache_noprof+0x4b/0x2a0 [ 88.066017][ T7395] alloc_fs_context+0x44/0x4e0 [ 88.070909][ T7395] ? strncmp+0x34/0x70 [ 88.075020][ T7395] fs_context_for_mount+0x21/0x30 [ 88.080107][ T7395] do_new_mount+0xf3/0x690 [ 88.084605][ T7395] path_mount+0x49b/0xb30 [ 88.088956][ T7395] __se_sys_mount+0x27c/0x2d0 [ 88.093670][ T7395] __x64_sys_mount+0x67/0x80 [ 88.098358][ T7395] x64_sys_call+0x2c84/0x2dc0 [ 88.103055][ T7395] do_syscall_64+0xc9/0x1c0 [ 88.107651][ T7395] ? clear_bhb_loop+0x55/0xb0 [ 88.112462][ T7395] ? clear_bhb_loop+0x55/0xb0 [ 88.117272][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.123213][ T7395] RIP: 0033:0x7fe0dea1e819 [ 88.127684][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.147306][ T7395] RSP: 002b:00007fe0dd097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.155798][ T7395] RAX: ffffffffffffffda RBX: 00007fe0debd5fa0 RCX: 00007fe0dea1e819 [ 88.163777][ T7395] RDX: 0000000020000400 RSI: 00000000200003c0 RDI: 0000000000000000 [ 88.171762][ T7395] RBP: 00007fe0dd097090 R08: 0000000020000440 R09: 0000000000000000 [ 88.179769][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.187751][ T7395] R13: 0000000000000000 R14: 00007fe0debd5fa0 R15: 00007fff42d58488 [ 88.195792][ T7395] [ 88.263011][ T7398] x_tables: duplicate underflow at hook 3 [ 88.279360][ T7410] netlink: 'syz.3.1124': attribute type 33 has an invalid length. [ 88.286354][ T7412] x_tables: duplicate underflow at hook 3 [ 88.300870][ T7410] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 88.352162][ T7420] netlink: 'syz.1.1126': attribute type 33 has an invalid length. [ 88.377514][ T7418] syzkaller0: entered promiscuous mode [ 88.383233][ T7418] syzkaller0: entered allmulticast mode [ 88.392154][ T7425] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 88.485744][ T7410] netlink: 'syz.3.1124': attribute type 3 has an invalid length. [ 88.693659][ T7457] loop4: detected capacity change from 0 to 512 [ 88.767444][ T7457] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.832067][ T7473] x_tables: duplicate underflow at hook 3 [ 89.051179][ T7485] x_tables: duplicate underflow at hook 3 [ 89.196247][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 89.196268][ T29] audit: type=1400 audit(1732218065.640:3899): avc: denied { read } for pid=3056 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 89.304217][ T29] audit: type=1400 audit(1732218065.740:3900): avc: denied { search } for pid=3056 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.326172][ T29] audit: type=1400 audit(1732218065.740:3901): avc: denied { read } for pid=3056 comm="dhcpcd" name="n26" dev="tmpfs" ino=7719 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.348037][ T29] audit: type=1400 audit(1732218065.740:3902): avc: denied { open } for pid=3056 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=7719 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.371340][ T29] audit: type=1400 audit(1732218065.740:3903): avc: denied { getattr } for pid=3056 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=7719 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.520917][ T7522] loop2: detected capacity change from 0 to 2048 [ 89.655255][ T29] audit: type=1400 audit(1732218066.090:3904): avc: denied { read } for pid=7543 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.678725][ T29] audit: type=1400 audit(1732218066.090:3905): avc: denied { open } for pid=7543 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.703925][ T29] audit: type=1400 audit(1732218066.090:3906): avc: denied { getattr } for pid=7543 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.842787][ T7554] 9pnet_fd: Insufficient options for proto=fd [ 89.883734][ T29] audit: type=1400 audit(1732218066.330:3907): avc: denied { write } for pid=7541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.906885][ T29] audit: type=1400 audit(1732218066.330:3908): avc: denied { add_name } for pid=7541 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.943978][ T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.969232][ T7570] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 89.983981][ T7572] vlan1: entered allmulticast mode [ 89.989181][ T7572] bridge_slave_0: entered allmulticast mode [ 89.989890][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 89.998070][ T7572] bridge0: port 1(vlan1) entered blocking state [ 90.007485][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.007485][ T50] [ 90.013793][ T7572] bridge0: port 1(vlan1) entered disabled state [ 90.023491][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 90.023510][ T50] EXT4-fs (loop2): Free/Dirty block details [ 90.023521][ T50] EXT4-fs (loop2): free_blocks=2415919104 [ 90.023535][ T50] EXT4-fs (loop2): dirty_blocks=16 [ 90.023548][ T50] EXT4-fs (loop2): Block reservation details [ 90.042759][ T7572] vlan1: entered promiscuous mode [ 90.047516][ T50] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 90.069940][ T7572] bridge_slave_0: entered promiscuous mode [ 90.096499][ T7572] bridge0: port 1(vlan1) entered blocking state [ 90.102859][ T7572] bridge0: port 1(vlan1) entered forwarding state [ 90.142372][ T7581] x_tables: duplicate underflow at hook 3 [ 90.207914][ T7590] netlink: 'syz.4.1153': attribute type 33 has an invalid length. [ 90.224565][ T7590] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 90.262703][ T7597] SELinux: Context Œ©¿ßXÕ!nzu¼jõ‹8õ)ÄLñ4’;S‹ÁÌÅ]Úi^þŠÚE;Ï«TÀ²²Käp€Å *p–5Ô+¶<=N£}ÙowÎ+ is not valid (left unmapped). [ 90.331928][ T7603] program syz.2.1155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.414187][ T7590] netlink: 'syz.4.1153': attribute type 3 has an invalid length. [ 90.444967][ T7608] loop4: detected capacity change from 0 to 512 [ 90.451598][ T7608] EXT4-fs: Ignoring removed oldalloc option [ 90.459878][ T7608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.473023][ T7608] EXT4-fs (loop4): 1 truncate cleaned up [ 90.542355][ T7612] loop4: detected capacity change from 0 to 512 [ 90.549206][ T7612] EXT4-fs: Ignoring removed bh option [ 90.558837][ T7612] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 90.569118][ T7612] EXT4-fs (loop4): 1 truncate cleaned up [ 90.666507][ T7617] syzkaller0: entered promiscuous mode [ 90.672164][ T7617] syzkaller0: entered allmulticast mode [ 90.778091][ T7619] 9pnet_fd: Insufficient options for proto=fd [ 90.892235][ T7625] x_tables: duplicate underflow at hook 3 [ 90.951110][ T7630] loop4: detected capacity change from 0 to 512 [ 90.959706][ T7630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.982569][ T7630] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.213776][ T7639] loop2: detected capacity change from 0 to 512 [ 91.225807][ T7639] EXT4-fs: Ignoring removed oldalloc option [ 91.243033][ T7639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.260222][ T7639] EXT4-fs (loop2): 1 truncate cleaned up [ 91.357066][ T7646] syzkaller0: entered promiscuous mode [ 91.362648][ T7646] syzkaller0: entered allmulticast mode [ 91.394758][ T7652] loop1: detected capacity change from 0 to 128 [ 91.423074][ T7652] vfat: Unknown parameter 'ÿÿÿ18446744073709551615' [ 91.453218][ T7652] loop1: detected capacity change from 0 to 512 [ 91.454050][ T7656] loop2: detected capacity change from 0 to 2048 [ 91.491067][ T3316] EXT4-fs error (device loop1): ext4_lookup:1813: inode #11: comm syz-executor: iget: bad extended attribute block 11042816 [ 91.504395][ T3316] EXT4-fs error (device loop1): ext4_lookup:1813: inode #11: comm syz-executor: iget: bad extended attribute block 11042816 [ 91.547626][ T7662] x_tables: duplicate underflow at hook 3 [ 91.591617][ T7666] loop4: detected capacity change from 0 to 512 [ 91.609178][ T6955] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.624710][ T6955] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 91.628399][ T7666] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.639073][ T6955] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.639073][ T6955] [ 91.659404][ T6955] EXT4-fs (loop2): Total free blocks count 0 [ 91.665546][ T6955] EXT4-fs (loop2): Free/Dirty block details [ 91.671567][ T6955] EXT4-fs (loop2): free_blocks=2415919104 [ 91.677368][ T6955] EXT4-fs (loop2): dirty_blocks=16 [ 91.682560][ T6955] EXT4-fs (loop2): Block reservation details [ 91.688554][ T6955] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 91.746267][ T7674] loop2: detected capacity change from 0 to 512 [ 91.746512][ T7672] x_tables: duplicate underflow at hook 3 [ 91.760135][ T7674] EXT4-fs: Ignoring removed oldalloc option [ 91.767474][ T7674] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.782690][ T6955] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.783723][ T7674] EXT4-fs (loop2): 1 truncate cleaned up [ 91.882932][ T6955] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.938596][ T6955] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.982350][ T7691] netlink: 'syz.4.1189': attribute type 2 has an invalid length. [ 92.000941][ T6955] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.001666][ T7695] x_tables: duplicate underflow at hook 3 [ 92.030931][ T7697] team0: entered promiscuous mode [ 92.037538][ T7700] loop4: detected capacity change from 0 to 512 [ 92.063610][ T7700] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.092654][ T7697] team0: left promiscuous mode [ 92.144336][ T7711] vlan1: entered allmulticast mode [ 92.149538][ T7711] bridge_slave_0: entered allmulticast mode [ 92.160275][ T7711] bridge0: port 2(vlan1) entered blocking state [ 92.166610][ T7711] bridge0: port 2(vlan1) entered disabled state [ 92.173979][ T7711] vlan1: entered promiscuous mode [ 92.179064][ T7711] bridge_slave_0: entered promiscuous mode [ 92.185718][ T7711] bridge0: port 2(vlan1) entered blocking state [ 92.192056][ T7711] bridge0: port 2(vlan1) entered forwarding state [ 92.217417][ T7715] x_tables: duplicate underflow at hook 3 [ 92.312582][ T6955] bond0 (unregistering): Released all slaves [ 92.357889][ T7722] syzkaller0: entered promiscuous mode [ 92.363496][ T7722] syzkaller0: entered allmulticast mode [ 92.367542][ T7728] loop4: detected capacity change from 0 to 512 [ 92.380878][ T7728] EXT4-fs: Ignoring removed oldalloc option [ 92.389210][ T7728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.407097][ T6955] hsr_slave_0: left promiscuous mode [ 92.412971][ T7728] EXT4-fs (loop4): 1 truncate cleaned up [ 92.412956][ T6955] hsr_slave_1: left promiscuous mode [ 92.424346][ T6955] batman_adv: batadv0: Interface deactivated: dummy0 [ 92.431345][ T6955] batman_adv: batadv0: Removing interface: dummy0 [ 92.440607][ T6955] veth1_macvtap: left promiscuous mode [ 92.446491][ T6955] veth0_macvtap: left promiscuous mode [ 92.452525][ T6955] veth1_vlan: left promiscuous mode [ 92.458169][ T6955] veth0_vlan: left promiscuous mode [ 92.588654][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 92.677457][ T7744] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 92.688275][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.695497][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.721313][ T7733] loop4: detected capacity change from 0 to 8192 [ 92.722617][ T7685] bridge_slave_0: entered allmulticast mode [ 92.746159][ T7685] bridge_slave_0: entered promiscuous mode [ 92.770840][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.778800][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.816645][ T7685] bridge_slave_1: entered allmulticast mode [ 92.823529][ T7685] bridge_slave_1: entered promiscuous mode [ 92.848881][ T7685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.859966][ T7685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.926835][ T7766] x_tables: duplicate underflow at hook 3 [ 92.940003][ T7769] netlink: 'syz.4.1207': attribute type 33 has an invalid length. [ 92.949093][ T7685] team0: Port device team_slave_0 added [ 92.956604][ T7685] team0: Port device team_slave_1 added [ 92.964201][ T7769] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 93.003659][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.011019][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.037303][ T7685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.051049][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.058097][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.084158][ T7685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.155588][ T7789] syzkaller0: entered promiscuous mode [ 93.161186][ T7789] syzkaller0: entered allmulticast mode [ 93.171422][ T7769] netlink: 'syz.4.1207': attribute type 3 has an invalid length. [ 93.198038][ T7788] syzkaller0: entered promiscuous mode [ 93.203674][ T7788] syzkaller0: entered allmulticast mode [ 93.264870][ T7685] hsr_slave_0: entered promiscuous mode [ 93.272379][ T7685] hsr_slave_1: entered promiscuous mode [ 93.278710][ T7685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.287971][ T7685] Cannot create hsr debugfs directory [ 93.341496][ T7810] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 93.449780][ T7819] x_tables: duplicate underflow at hook 3 [ 93.506697][ T7685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.516313][ T7685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.529388][ T7685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.548031][ T7838] team0: entered promiscuous mode [ 93.553393][ T7685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.563413][ T7841] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1220'. [ 93.575715][ T7838] team0: left promiscuous mode [ 93.654191][ T7845] syzkaller0: entered promiscuous mode [ 93.659932][ T7845] syzkaller0: entered allmulticast mode [ 93.697478][ T7847] syzkaller0: entered promiscuous mode [ 93.703107][ T7847] syzkaller0: entered allmulticast mode [ 93.715261][ T7852] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 93.721731][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.798186][ T7685] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.820733][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.827865][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.853457][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.860587][ T6937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.895555][ T7868] x_tables: duplicate underflow at hook 3 [ 94.016415][ T7890] netlink: 'syz.4.1230': attribute type 2 has an invalid length. [ 94.083275][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.467067][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 94.467118][ T29] audit: type=1400 audit(1732218070.910:4256): avc: denied { map } for pid=7910 comm="syz.4.1232" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.511333][ T29] audit: type=1326 audit(1732218070.920:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.535005][ T29] audit: type=1326 audit(1732218070.920:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.558475][ T29] audit: type=1326 audit(1732218070.920:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.581923][ T29] audit: type=1326 audit(1732218070.920:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.598379][ T7685] veth0_vlan: entered promiscuous mode [ 94.605517][ T29] audit: type=1326 audit(1732218070.920:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.634421][ T29] audit: type=1326 audit(1732218070.920:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.647903][ T7685] veth1_vlan: entered promiscuous mode [ 94.657984][ T29] audit: type=1326 audit(1732218070.920:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.687146][ T29] audit: type=1326 audit(1732218070.920:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.711058][ T29] audit: type=1326 audit(1732218070.920:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 94.752634][ T7685] veth0_macvtap: entered promiscuous mode [ 94.760820][ T7685] veth1_macvtap: entered promiscuous mode [ 94.772338][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.782058][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.791327][ T7685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800251][ T7685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.808965][ T7685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817842][ T7685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899721][ T7997] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 94.999402][ T8010] loop3: detected capacity change from 0 to 132 [ 95.032341][ T8007] syzkaller0: entered promiscuous mode [ 95.037890][ T8007] syzkaller0: entered allmulticast mode [ 95.102108][ T8017] x_tables: duplicate underflow at hook 3 [ 95.202782][ T8026] netlink: 'syz.5.1241': attribute type 2 has an invalid length. [ 95.287247][ T8059] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 95.322095][ T8049] syzkaller0: entered promiscuous mode [ 95.327739][ T8049] syzkaller0: entered allmulticast mode [ 95.338279][ T8058] loop3: detected capacity change from 0 to 2048 [ 95.380557][ T8055] team0: entered promiscuous mode [ 95.385757][ T8055] team_slave_0: entered promiscuous mode [ 95.391605][ T8055] team_slave_1: entered promiscuous mode [ 95.456800][ T8064] team0: left promiscuous mode [ 95.461738][ T8064] team_slave_0: left promiscuous mode [ 95.467322][ T8064] team_slave_1: left promiscuous mode [ 95.506184][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.548414][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 95.560783][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.560783][ T50] [ 95.570479][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 95.576488][ T50] EXT4-fs (loop3): Free/Dirty block details [ 95.582573][ T50] EXT4-fs (loop3): free_blocks=2415919104 [ 95.588322][ T50] EXT4-fs (loop3): dirty_blocks=16 [ 95.593644][ T50] EXT4-fs (loop3): Block reservation details [ 95.599719][ T50] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 95.628140][ T8088] syzkaller0: entered promiscuous mode [ 95.633895][ T8088] syzkaller0: entered allmulticast mode [ 95.648894][ T8091] x_tables: duplicate underflow at hook 3 [ 95.697971][ T8096] x_tables: duplicate underflow at hook 3 [ 95.712325][ T8098] FAULT_INJECTION: forcing a failure. [ 95.712325][ T8098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.725503][ T8098] CPU: 1 UID: 0 PID: 8098 Comm: syz.4.1256 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 95.735883][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 95.745969][ T8098] Call Trace: [ 95.749315][ T8098] [ 95.752257][ T8098] dump_stack_lvl+0xf2/0x150 [ 95.757006][ T8098] dump_stack+0x15/0x20 [ 95.761206][ T8098] should_fail_ex+0x223/0x230 [ 95.765919][ T8098] should_fail+0xb/0x10 [ 95.770103][ T8098] should_fail_usercopy+0x1a/0x20 [ 95.775235][ T8098] _copy_from_user+0x1e/0xb0 [ 95.779863][ T8098] snd_seq_ioctl+0x11b/0x2a0 [ 95.784533][ T8098] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 95.789666][ T8098] __se_sys_ioctl+0xc9/0x140 [ 95.794278][ T8098] __x64_sys_ioctl+0x43/0x50 [ 95.798974][ T8098] x64_sys_call+0x1690/0x2dc0 [ 95.803923][ T8098] do_syscall_64+0xc9/0x1c0 [ 95.808580][ T8098] ? clear_bhb_loop+0x55/0xb0 [ 95.813394][ T8098] ? clear_bhb_loop+0x55/0xb0 [ 95.818100][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.824093][ T8098] RIP: 0033:0x7f94ca82e819 [ 95.828577][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.848286][ T8098] RSP: 002b:00007f94c8ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.856711][ T8098] RAX: ffffffffffffffda RBX: 00007f94ca9e5fa0 RCX: 00007f94ca82e819 [ 95.864785][ T8098] RDX: 0000000020000000 RSI: 0000000040a85321 RDI: 0000000000000003 [ 95.872777][ T8098] RBP: 00007f94c8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.880754][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.888747][ T8098] R13: 0000000000000000 R14: 00007f94ca9e5fa0 R15: 00007fffff379f08 [ 95.896734][ T8098] [ 95.975348][ T8115] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 96.016565][ T8117] loop4: detected capacity change from 0 to 512 [ 96.032418][ T8117] EXT4-fs: Ignoring removed oldalloc option [ 96.065445][ T8124] loop5: detected capacity change from 0 to 512 [ 96.078918][ T8117] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.090709][ T8124] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.111018][ T8124] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 96.127518][ T8117] EXT4-fs (loop4): 1 truncate cleaned up [ 96.131462][ T8124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 96.144282][ T8124] System zones: 1-12 [ 96.170095][ T8124] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1258: corrupted in-inode xattr: e_value size too large [ 96.192711][ T8124] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1258: couldn't read orphan inode 15 (err -117) [ 96.389438][ T8153] syzkaller0: entered promiscuous mode [ 96.395075][ T8153] syzkaller0: entered allmulticast mode [ 96.405117][ T8162] loop5: detected capacity change from 0 to 512 [ 96.423403][ T8162] EXT4-fs: Ignoring removed oldalloc option [ 96.446308][ T8162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.498418][ T8162] EXT4-fs (loop5): 1 truncate cleaned up [ 96.614254][ T8178] x_tables: duplicate underflow at hook 3 [ 96.655035][ T8189] FAULT_INJECTION: forcing a failure. [ 96.655035][ T8189] name failslab, interval 1, probability 0, space 0, times 0 [ 96.667947][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.4.1271 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 96.678378][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 96.688499][ T8189] Call Trace: [ 96.691866][ T8189] [ 96.694814][ T8189] dump_stack_lvl+0xf2/0x150 [ 96.699453][ T8189] dump_stack+0x15/0x20 [ 96.703656][ T8189] should_fail_ex+0x223/0x230 [ 96.708364][ T8189] ? __alloc_skb+0x10b/0x310 [ 96.712991][ T8189] should_failslab+0x8f/0xb0 [ 96.717737][ T8189] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 96.723587][ T8189] __alloc_skb+0x10b/0x310 [ 96.728098][ T8189] sock_wmalloc+0x7b/0xc0 [ 96.732474][ T8189] pppoe_sendmsg+0x15d/0x3a0 [ 96.737120][ T8189] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 96.742324][ T8189] __sock_sendmsg+0x140/0x180 [ 96.747042][ T8189] sock_write_iter+0x15e/0x1a0 [ 96.751902][ T8189] vfs_write+0x77f/0x920 [ 96.756181][ T8189] ? __pfx_sock_write_iter+0x10/0x10 [ 96.761561][ T8189] ksys_write+0xe8/0x1b0 [ 96.765845][ T8189] __x64_sys_write+0x42/0x50 [ 96.770476][ T8189] x64_sys_call+0x287e/0x2dc0 [ 96.775269][ T8189] do_syscall_64+0xc9/0x1c0 [ 96.779810][ T8189] ? clear_bhb_loop+0x55/0xb0 [ 96.784578][ T8189] ? clear_bhb_loop+0x55/0xb0 [ 96.789325][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.795310][ T8189] RIP: 0033:0x7f94ca82e819 [ 96.799737][ T8189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.819550][ T8189] RSP: 002b:00007f94c8ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.828053][ T8189] RAX: ffffffffffffffda RBX: 00007f94ca9e5fa0 RCX: 00007f94ca82e819 [ 96.836084][ T8189] RDX: 00000000000005ea RSI: 0000000020001640 RDI: 0000000000000004 [ 96.844135][ T8189] RBP: 00007f94c8ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.852151][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.860159][ T8189] R13: 0000000000000000 R14: 00007f94ca9e5fa0 R15: 00007fffff379f08 [ 96.868149][ T8189] [ 96.902406][ T8198] loop5: detected capacity change from 0 to 512 [ 97.014157][ T8247] x_tables: duplicate underflow at hook 3 [ 97.207616][ T8266] FAULT_INJECTION: forcing a failure. [ 97.207616][ T8266] name failslab, interval 1, probability 0, space 0, times 0 [ 97.220400][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.5.1278 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 97.230763][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.240847][ T8266] Call Trace: [ 97.244205][ T8266] [ 97.247222][ T8266] dump_stack_lvl+0xf2/0x150 [ 97.251847][ T8266] dump_stack+0x15/0x20 [ 97.256088][ T8266] should_fail_ex+0x223/0x230 [ 97.260784][ T8266] ? __kvmalloc_node_noprof+0x72/0x170 [ 97.266285][ T8266] should_failslab+0x8f/0xb0 [ 97.271130][ T8266] __kmalloc_node_noprof+0xa8/0x380 [ 97.276381][ T8266] __kvmalloc_node_noprof+0x72/0x170 [ 97.281689][ T8266] xt_alloc_table_info+0x3d/0x80 [ 97.286638][ T8266] do_ipt_set_ctl+0x66f/0x8b0 [ 97.291458][ T8266] ? tcp_release_cb+0xfe/0x380 [ 97.296398][ T8266] nf_setsockopt+0x195/0x1b0 [ 97.301008][ T8266] ip_setsockopt+0xea/0x100 [ 97.305613][ T8266] tcp_setsockopt+0x93/0xb0 [ 97.310145][ T8266] sock_common_setsockopt+0x64/0x80 [ 97.315375][ T8266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 97.321314][ T8266] smc_setsockopt+0x182/0x7a0 [ 97.326019][ T8266] ? __pfx_smc_setsockopt+0x10/0x10 [ 97.331239][ T8266] __sys_setsockopt+0x187/0x200 [ 97.336160][ T8266] __x64_sys_setsockopt+0x66/0x80 [ 97.341251][ T8266] x64_sys_call+0x282e/0x2dc0 [ 97.346057][ T8266] do_syscall_64+0xc9/0x1c0 [ 97.350602][ T8266] ? clear_bhb_loop+0x55/0xb0 [ 97.355399][ T8266] ? clear_bhb_loop+0x55/0xb0 [ 97.360125][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.366109][ T8266] RIP: 0033:0x7f005e05e819 [ 97.370541][ T8266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.390170][ T8266] RSP: 002b:00007f005c6d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.398603][ T8266] RAX: ffffffffffffffda RBX: 00007f005e215fa0 RCX: 00007f005e05e819 [ 97.406581][ T8266] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 97.414579][ T8266] RBP: 00007f005c6d1090 R08: 00000000000002c0 R09: 0000000000000000 [ 97.422563][ T8266] R10: 0000000020000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 97.430629][ T8266] R13: 0000000000000000 R14: 00007f005e215fa0 R15: 00007ffc2d8c7198 [ 97.438623][ T8266] [ 97.447806][ T8268] pim6reg1: entered promiscuous mode [ 97.453218][ T8268] pim6reg1: entered allmulticast mode [ 97.554254][ T8280] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 97.586311][ T8277] loop2: detected capacity change from 0 to 4096 [ 97.605830][ T8277] Process accounting resumed [ 97.633377][ T8277] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 97.697840][ T8295] team0: entered promiscuous mode [ 97.734304][ T8295] team0: left promiscuous mode [ 97.787516][ T8303] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1289'. [ 97.802190][ T8309] FAULT_INJECTION: forcing a failure. [ 97.802190][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.815317][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.0.1290 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 97.825776][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.835936][ T8309] Call Trace: [ 97.839310][ T8309] [ 97.842265][ T8309] dump_stack_lvl+0xf2/0x150 [ 97.847011][ T8309] dump_stack+0x15/0x20 [ 97.851309][ T8309] should_fail_ex+0x223/0x230 [ 97.856002][ T8309] should_fail+0xb/0x10 [ 97.860203][ T8309] should_fail_usercopy+0x1a/0x20 [ 97.865276][ T8309] _copy_from_user+0x1e/0xb0 [ 97.869896][ T8309] copy_msghdr_from_user+0x54/0x2a0 [ 97.875259][ T8309] ? __fget_files+0x17c/0x1c0 [ 97.879965][ T8309] __sys_sendmsg+0x13e/0x230 [ 97.884668][ T8309] __x64_sys_sendmsg+0x46/0x50 [ 97.889453][ T8309] x64_sys_call+0x2734/0x2dc0 [ 97.894217][ T8309] do_syscall_64+0xc9/0x1c0 [ 97.898891][ T8309] ? clear_bhb_loop+0x55/0xb0 [ 97.903591][ T8309] ? clear_bhb_loop+0x55/0xb0 [ 97.908327][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.914336][ T8309] RIP: 0033:0x7f87fe5ae819 [ 97.918827][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.938498][ T8309] RSP: 002b:00007f87fcc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.947033][ T8309] RAX: ffffffffffffffda RBX: 00007f87fe765fa0 RCX: 00007f87fe5ae819 [ 97.955190][ T8309] RDX: 0000000000000000 RSI: 00000000200029c0 RDI: 0000000000000005 [ 97.963173][ T8309] RBP: 00007f87fcc27090 R08: 0000000000000000 R09: 0000000000000000 [ 97.971166][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.979175][ T8309] R13: 0000000000000000 R14: 00007f87fe765fa0 R15: 00007ffd739331b8 [ 97.987188][ T8309] [ 98.019880][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.051199][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.075420][ T8316] syzkaller0: entered promiscuous mode [ 98.081098][ T8316] syzkaller0: entered allmulticast mode [ 98.132024][ T8328] loop3: detected capacity change from 0 to 512 [ 98.139796][ T8328] EXT4-fs: Ignoring removed oldalloc option [ 98.160158][ T8328] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.175031][ T8330] team0: entered promiscuous mode [ 98.180224][ T8330] team_slave_0: entered promiscuous mode [ 98.186097][ T8330] team_slave_1: entered promiscuous mode [ 98.194321][ T8328] EXT4-fs (loop3): 1 truncate cleaned up [ 98.210492][ T8330] team0: left promiscuous mode [ 98.215305][ T8330] team_slave_0: left promiscuous mode [ 98.220828][ T8330] team_slave_1: left promiscuous mode [ 98.452867][ T8364] loop2: detected capacity change from 0 to 736 [ 98.477100][ T8364] ISOFS: Logical zone size(8) < hardware blocksize(1024) [ 98.521348][ T8370] FAULT_INJECTION: forcing a failure. [ 98.521348][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.527796][ T8372] team0: entered promiscuous mode [ 98.534477][ T8370] CPU: 1 UID: 0 PID: 8370 Comm: syz.3.1314 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 98.549880][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.559976][ T8370] Call Trace: [ 98.563285][ T8370] [ 98.566273][ T8370] dump_stack_lvl+0xf2/0x150 [ 98.570917][ T8370] dump_stack+0x15/0x20 [ 98.575183][ T8370] should_fail_ex+0x223/0x230 [ 98.579933][ T8370] should_fail+0xb/0x10 [ 98.584195][ T8370] should_fail_usercopy+0x1a/0x20 [ 98.589280][ T8370] _copy_from_user+0x1e/0xb0 [ 98.593945][ T8370] kstrtouint_from_user+0x76/0xe0 [ 98.599029][ T8370] ? 0xffffffff81000000 [ 98.603197][ T8370] ? selinux_file_permission+0x22a/0x360 [ 98.608885][ T8370] proc_fail_nth_write+0x4f/0x150 [ 98.614014][ T8370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.619665][ T8370] vfs_write+0x281/0x920 [ 98.624064][ T8370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.629705][ T8370] ? __fget_files+0x17c/0x1c0 [ 98.634482][ T8370] ksys_write+0xe8/0x1b0 [ 98.638986][ T8370] __x64_sys_write+0x42/0x50 [ 98.643640][ T8370] x64_sys_call+0x287e/0x2dc0 [ 98.648506][ T8370] do_syscall_64+0xc9/0x1c0 [ 98.653035][ T8370] ? clear_bhb_loop+0x55/0xb0 [ 98.657779][ T8370] ? clear_bhb_loop+0x55/0xb0 [ 98.662663][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.668609][ T8370] RIP: 0033:0x7f749e06d2ff [ 98.673052][ T8370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 98.692748][ T8370] RSP: 002b:00007f749c6e1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.701227][ T8370] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f749e06d2ff [ 98.709253][ T8370] RDX: 0000000000000001 RSI: 00007f749c6e10a0 RDI: 0000000000000005 [ 98.717393][ T8370] RBP: 00007f749c6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 98.725368][ T8370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 98.733382][ T8370] R13: 0000000000000000 R14: 00007f749e225fa0 R15: 00007fff88d12ae8 [ 98.741434][ T8370] [ 98.744668][ T8372] team0: left promiscuous mode [ 98.789126][ T8380] loop4: detected capacity change from 0 to 1764 [ 98.814513][ T8380] netlink: 'syz.4.1319': attribute type 4 has an invalid length. [ 98.907103][ T8390] netlink: 'syz.4.1323': attribute type 33 has an invalid length. [ 98.973524][ T8396] vlan1: entered allmulticast mode [ 98.978730][ T8396] bridge_slave_0: entered allmulticast mode [ 99.037555][ T8402] team0: entered promiscuous mode [ 99.051589][ T8402] team0: left promiscuous mode [ 99.098723][ T8409] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 99.109564][ T8406] loop3: detected capacity change from 0 to 2048 [ 99.157972][ T8406] EXT4-fs mount: 88 callbacks suppressed [ 99.157988][ T8406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.176745][ T8411] syzkaller0: entered promiscuous mode [ 99.182395][ T8411] syzkaller0: entered allmulticast mode [ 99.321416][ T5783] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.355410][ T5783] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 99.367893][ T5783] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.367893][ T5783] [ 99.377663][ T5783] EXT4-fs (loop3): Total free blocks count 0 [ 99.383841][ T5783] EXT4-fs (loop3): Free/Dirty block details [ 99.390119][ T5783] EXT4-fs (loop3): free_blocks=2415919104 [ 99.395988][ T5783] EXT4-fs (loop3): dirty_blocks=16 [ 99.401191][ T5783] EXT4-fs (loop3): Block reservation details [ 99.407190][ T5783] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 99.423094][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.494347][ T8450] x_tables: duplicate underflow at hook 3 [ 99.502106][ T8453] x_tables: duplicate underflow at hook 3 [ 99.672873][ T8465] x_tables: duplicate underflow at hook 3 [ 99.824456][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1350'. [ 99.951375][ T8498] loop3: detected capacity change from 0 to 512 [ 99.959206][ T8498] EXT4-fs: Ignoring removed bh option [ 99.978943][ T8498] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.996174][ T8498] EXT4-fs (loop3): 1 truncate cleaned up [ 100.005745][ T8498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.044848][ T8511] netlink: 'syz.4.1358': attribute type 33 has an invalid length. [ 100.053549][ T8511] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 100.294126][ T8511] netlink: 'syz.4.1358': attribute type 3 has an invalid length. [ 100.332431][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.420490][ T8577] netlink: 'syz.3.1360': attribute type 33 has an invalid length. [ 100.460010][ T8584] netlink: 'syz.4.1362': attribute type 33 has an invalid length. [ 100.476479][ T8577] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 100.547607][ T8596] FAULT_INJECTION: forcing a failure. [ 100.547607][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 100.560506][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.0.1367 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 100.570911][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.581179][ T8596] Call Trace: [ 100.584467][ T8596] [ 100.587407][ T8596] dump_stack_lvl+0xf2/0x150 [ 100.592096][ T8596] dump_stack+0x15/0x20 [ 100.596339][ T8596] should_fail_ex+0x223/0x230 [ 100.601061][ T8596] ? io_ring_ctx_alloc+0x38/0xcc0 [ 100.606164][ T8596] should_failslab+0x8f/0xb0 [ 100.610776][ T8596] __kmalloc_cache_noprof+0x4b/0x2a0 [ 100.616079][ T8596] io_ring_ctx_alloc+0x38/0xcc0 [ 100.621061][ T8596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.626715][ T8596] ? io_uring_fill_params+0x2a7/0x330 [ 100.632104][ T8596] io_uring_create+0x40/0x6d0 [ 100.636889][ T8596] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 100.642425][ T8596] __x64_sys_io_uring_setup+0x31/0x40 [ 100.647864][ T8596] x64_sys_call+0x270c/0x2dc0 [ 100.652601][ T8596] do_syscall_64+0xc9/0x1c0 [ 100.657259][ T8596] ? clear_bhb_loop+0x55/0xb0 [ 100.661997][ T8596] ? clear_bhb_loop+0x55/0xb0 [ 100.666790][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.672787][ T8596] RIP: 0033:0x7f87fe5ae819 [ 100.677209][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.696830][ T8596] RSP: 002b:00007f87fcc27038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 100.705252][ T8596] RAX: ffffffffffffffda RBX: 00007f87fe765fa0 RCX: 00007f87fe5ae819 [ 100.713319][ T8596] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000000015f6 [ 100.721396][ T8596] RBP: 00007f87fcc27090 R08: 0000000000000000 R09: 0000000000000000 [ 100.729491][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.737470][ T8596] R13: 0000000000000000 R14: 00007f87fe765fa0 R15: 00007ffd739331b8 [ 100.745455][ T8596] [ 100.770086][ T8601] x_tables: duplicate underflow at hook 3 [ 100.785007][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 100.785022][ T29] audit: type=1326 audit(1732218077.230:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.815210][ T29] audit: type=1326 audit(1732218077.230:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.839123][ T8591] mmap: syz.2.1359 (8591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.840331][ T29] audit: type=1326 audit(1732218077.230:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.874697][ T29] audit: type=1326 audit(1732218077.230:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.876979][ T8577] netlink: 'syz.3.1360': attribute type 3 has an invalid length. [ 100.898576][ T29] audit: type=1326 audit(1732218077.230:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.929472][ T29] audit: type=1326 audit(1732218077.230:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.952998][ T29] audit: type=1326 audit(1732218077.240:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 100.976416][ T29] audit: type=1326 audit(1732218077.240:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 101.048504][ T29] audit: type=1326 audit(1732218077.360:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 101.072733][ T29] audit: type=1326 audit(1732218077.370:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca82e819 code=0x7ffc0000 [ 101.261448][ T8623] loop3: detected capacity change from 0 to 512 [ 101.328355][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 101.423925][ T8632] netlink: 'syz.4.1378': attribute type 33 has an invalid length. [ 101.433959][ T8635] loop2: detected capacity change from 0 to 132 [ 101.458207][ T8637] x_tables: duplicate underflow at hook 3 [ 101.531964][ T8647] loop3: detected capacity change from 0 to 1024 [ 101.542225][ T8647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.555629][ T8647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.573170][ T8647] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.3.1385: corrupted in-inode xattr: bad e_name length [ 101.574424][ T8649] syzkaller0: entered promiscuous mode [ 101.589328][ T8647] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #2: comm syz.3.1385: corrupted in-inode xattr: bad e_name length [ 101.592748][ T8649] syzkaller0: entered allmulticast mode [ 101.625712][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.665879][ T8654] loop3: detected capacity change from 0 to 512 [ 101.677505][ T8654] EXT4-fs: Ignoring removed oldalloc option [ 101.688370][ T8654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.700834][ T8654] EXT4-fs (loop3): 1 truncate cleaned up [ 101.706887][ T8654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.759200][ T8659] loop4: detected capacity change from 0 to 512 [ 101.794630][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.815857][ T8663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1390'. [ 101.816748][ T8659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.839267][ T8659] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.866667][ T8663] can0: slcan on ttyS3. [ 101.929963][ T8662] can0 (unregistered): slcan off ttyS3. [ 101.944562][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.019546][ T8680] loop5: detected capacity change from 0 to 512 [ 102.033455][ T8680] EXT4-fs: Ignoring removed bh option [ 102.053622][ T8680] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 102.071393][ T8687] netlink: 'syz.3.1395': attribute type 33 has an invalid length. [ 102.091478][ T8680] EXT4-fs (loop5): 1 truncate cleaned up [ 102.112078][ T8687] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 102.137667][ T8680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.166116][ T8685] loop2: detected capacity change from 0 to 4096 [ 102.174850][ T8686] loop4: detected capacity change from 0 to 8192 [ 102.177313][ T8692] netlink: 'syz.0.1396': attribute type 33 has an invalid length. [ 102.249482][ T8685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.273174][ T7685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.300809][ T8685] Process accounting resumed [ 102.310754][ T8685] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.359035][ T8717] x_tables: duplicate underflow at hook 3 [ 102.387813][ T8727] loop4: detected capacity change from 0 to 512 [ 102.395480][ T8727] EXT4-fs: Ignoring removed bh option [ 102.401932][ T8727] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 102.446300][ T8732] syzkaller0: entered promiscuous mode [ 102.448363][ T8727] EXT4-fs (loop4): 1 truncate cleaned up [ 102.451992][ T8732] syzkaller0: entered allmulticast mode [ 102.465256][ T8727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.502967][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.514303][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.657227][ T8749] loop5: detected capacity change from 0 to 512 [ 102.665660][ T8749] EXT4-fs: Ignoring removed bh option [ 102.674643][ T8749] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 102.686211][ T8749] EXT4-fs (loop5): 1 truncate cleaned up [ 102.693180][ T8749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.731244][ T7685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.837282][ T8759] loop5: detected capacity change from 0 to 2048 [ 102.872299][ T8759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.949093][ T8771] wireguard0: entered promiscuous mode [ 102.954746][ T8771] wireguard0: entered allmulticast mode [ 102.990453][ T8775] loop2: detected capacity change from 0 to 512 [ 103.003490][ T6935] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.023060][ T8775] EXT4-fs: Ignoring removed bh option [ 103.034881][ T6935] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 103.047340][ T6935] EXT4-fs (loop5): This should not happen!! Data will be lost [ 103.047340][ T6935] [ 103.057034][ T6935] EXT4-fs (loop5): Total free blocks count 0 [ 103.058659][ T8775] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 103.064001][ T6935] EXT4-fs (loop5): Free/Dirty block details [ 103.077372][ T6935] EXT4-fs (loop5): free_blocks=2415919104 [ 103.082460][ T8775] EXT4-fs (loop2): 1 truncate cleaned up [ 103.083169][ T6935] EXT4-fs (loop5): dirty_blocks=16 [ 103.090498][ T8775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.094584][ T6935] EXT4-fs (loop5): Block reservation details [ 103.112027][ T6935] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 103.142178][ T7685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.168627][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.312225][ T8798] loop3: detected capacity change from 0 to 1764 [ 103.327015][ T8792] loop2: detected capacity change from 0 to 4096 [ 103.352330][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.370881][ T8803] loop4: detected capacity change from 0 to 1764 [ 103.403910][ T8805] loop3: detected capacity change from 0 to 512 [ 103.410102][ T8792] Process accounting resumed [ 103.413059][ T8805] EXT4-fs: Ignoring removed oldalloc option [ 103.422490][ T8805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.454302][ T8805] EXT4-fs (loop3): 1 truncate cleaned up [ 103.461891][ T8805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.525245][ T8792] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 103.551039][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.603307][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.653491][ T8823] loop3: detected capacity change from 0 to 512 [ 103.667987][ T8826] loop5: detected capacity change from 0 to 512 [ 103.707639][ T8823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.730448][ T8826] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1434: corrupted in-inode xattr: invalid ea_ino [ 103.744060][ T8826] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1434: couldn't read orphan inode 15 (err -117) [ 103.749000][ T8823] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.757507][ T8826] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.817099][ T8834] FAULT_INJECTION: forcing a failure. [ 103.817099][ T8834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.830464][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.2.1435 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 103.840939][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.851022][ T8834] Call Trace: [ 103.854319][ T8834] [ 103.857256][ T8834] dump_stack_lvl+0xf2/0x150 [ 103.861939][ T8834] dump_stack+0x15/0x20 [ 103.866122][ T8834] should_fail_ex+0x223/0x230 [ 103.870819][ T8834] should_fail_alloc_page+0xfd/0x110 [ 103.876163][ T8834] __alloc_pages_noprof+0x109/0x340 [ 103.881390][ T8834] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 103.886925][ T8834] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 103.892433][ T8834] handle_mm_fault+0xdbe/0x2aa0 [ 103.897429][ T8834] exc_page_fault+0x3b9/0x650 [ 103.902133][ T8834] asm_exc_page_fault+0x26/0x30 [ 103.907105][ T8834] RIP: 0033:0x7f7bda4c1853 [ 103.911569][ T8834] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 103.931361][ T8834] RSP: 002b:00007f7bd8c764a0 EFLAGS: 00010202 [ 103.937436][ T8834] RAX: 0000000000008000 RBX: 00007f7bd8c76540 RCX: 00007f7bd0857000 [ 103.945436][ T8834] RDX: 00007f7bd8c766e0 RSI: 000000000000000d RDI: 00007f7bd8c765e0 [ 103.953436][ T8834] RBP: 0000000000000102 R08: 0000000000000007 R09: 000000000000003f [ 103.961475][ T8834] R10: 0000000000000054 R11: 00007f7bd8c76540 R12: 0000000000000001 [ 103.969458][ T8834] R13: 00007f7bda685fa0 R14: 0000000000000001 R15: 00007f7bd8c765e0 [ 103.977487][ T8834] [ 103.981375][ T8834] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 103.999264][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.010686][ T8834] loop2: detected capacity change from 0 to 132 [ 104.021135][ T7685] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 104.074843][ T8840] loop3: detected capacity change from 0 to 1764 [ 104.083695][ T8843] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 104.085221][ T8844] x_tables: duplicate underflow at hook 3 [ 104.110839][ T8846] validate_nla: 3 callbacks suppressed [ 104.110854][ T8846] netlink: 'syz.4.1436': attribute type 3 has an invalid length. [ 104.130791][ T8848] loop2: detected capacity change from 0 to 512 [ 104.132835][ T8846] bridge0: port 2(syz_tun) entered blocking state [ 104.143648][ T8846] bridge0: port 2(syz_tun) entered disabled state [ 104.152515][ T8846] syz_tun: entered allmulticast mode [ 104.158657][ T8848] EXT4-fs: Ignoring removed oldalloc option [ 104.160780][ T8846] syz_tun: entered promiscuous mode [ 104.175362][ T8848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.187092][ T8846] bridge0: port 2(syz_tun) entered blocking state [ 104.193680][ T8846] bridge0: port 2(syz_tun) entered forwarding state [ 104.201272][ T8850] netlink: 'syz.5.1441': attribute type 33 has an invalid length. [ 104.210915][ T8848] EXT4-fs (loop2): 1 truncate cleaned up [ 104.216694][ T8850] team0: entered allmulticast mode [ 104.217060][ T8848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.221892][ T8850] team_slave_0: entered allmulticast mode [ 104.221920][ T8850] team_slave_1: entered allmulticast mode [ 104.228040][ T8852] netlink: 'syz.3.1442': attribute type 33 has an invalid length. [ 104.257259][ T8852] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 104.283570][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.434127][ T8852] netlink: 'syz.3.1442': attribute type 3 has an invalid length. [ 104.486842][ T8867] loop2: detected capacity change from 0 to 512 [ 104.498512][ T8867] EXT4-fs: Ignoring removed bh option [ 104.509141][ T8867] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 104.528546][ T8872] SET target dimension over the limit! [ 104.537854][ T8867] EXT4-fs (loop2): 1 truncate cleaned up [ 104.545351][ T8872] loop5: detected capacity change from 0 to 128 [ 104.555601][ T8867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.586111][ T8877] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 104.606016][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.649326][ T8883] x_tables: duplicate underflow at hook 3 [ 104.701107][ T8881] loop5: detected capacity change from 0 to 2048 [ 104.747838][ T8894] netlink: 'syz.2.1457': attribute type 33 has an invalid length. [ 104.756399][ T8894] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 104.774679][ T8881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.799056][ T8898] loop3: detected capacity change from 0 to 512 [ 104.806521][ T8898] EXT4-fs: Ignoring removed nobh option [ 104.823454][ T8898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.836823][ T8898] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.863684][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.897795][ T378] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.914386][ T378] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 104.926740][ T378] EXT4-fs (loop5): This should not happen!! Data will be lost [ 104.926740][ T378] [ 104.936881][ T378] EXT4-fs (loop5): Total free blocks count 0 [ 104.943058][ T378] EXT4-fs (loop5): Free/Dirty block details [ 104.948969][ T378] EXT4-fs (loop5): free_blocks=2415919104 [ 104.954748][ T378] EXT4-fs (loop5): dirty_blocks=16 [ 104.956840][ T8894] netlink: 'syz.2.1457': attribute type 3 has an invalid length. [ 104.959980][ T378] EXT4-fs (loop5): Block reservation details [ 104.973786][ T378] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 104.984309][ T7685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.044811][ T8915] pim6reg1: entered promiscuous mode [ 105.050327][ T8915] pim6reg1: entered allmulticast mode [ 105.090246][ T8914] loop5: detected capacity change from 0 to 4096 [ 105.107175][ T8919] FAULT_INJECTION: forcing a failure. [ 105.107175][ T8919] name failslab, interval 1, probability 0, space 0, times 0 [ 105.120102][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.0.1464 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 105.130596][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 105.140780][ T8919] Call Trace: [ 105.144088][ T8919] [ 105.147023][ T8919] dump_stack_lvl+0xf2/0x150 [ 105.151711][ T8919] dump_stack+0x15/0x20 [ 105.155897][ T8919] should_fail_ex+0x223/0x230 [ 105.160582][ T8919] ? __alloc_skb+0x10b/0x310 [ 105.165227][ T8919] should_failslab+0x8f/0xb0 [ 105.169846][ T8919] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 105.175688][ T8919] __alloc_skb+0x10b/0x310 [ 105.180135][ T8919] audit_log_start+0x368/0x6b0 [ 105.184912][ T8919] ? kmem_cache_free+0xdc/0x2d0 [ 105.189797][ T8919] audit_seccomp+0x4b/0x130 [ 105.194417][ T8919] ? cgroup_rstat_updated+0x9f/0x570 [ 105.199793][ T8919] __seccomp_filter+0x6fa/0x1180 [ 105.204836][ T8919] ? __perf_event_task_sched_out+0x138/0x1010 [ 105.210955][ T8919] ? __dequeue_entity+0x22/0x310 [ 105.215925][ T8919] __secure_computing+0x9f/0x1c0 [ 105.220894][ T8919] syscall_trace_enter+0xd1/0x1f0 [ 105.225933][ T8919] do_syscall_64+0xaa/0x1c0 [ 105.230523][ T8919] ? clear_bhb_loop+0x55/0xb0 [ 105.235380][ T8919] ? clear_bhb_loop+0x55/0xb0 [ 105.240150][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.246302][ T8919] RIP: 0033:0x7f87fe5ad25c [ 105.250795][ T8919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 105.270515][ T8919] RSP: 002b:00007f87fcc27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.278966][ T8919] RAX: ffffffffffffffda RBX: 00007f87fe765fa0 RCX: 00007f87fe5ad25c [ 105.286967][ T8919] RDX: 000000000000000f RSI: 00007f87fcc270a0 RDI: 0000000000000009 [ 105.294950][ T8919] RBP: 00007f87fcc27090 R08: 0000000000000000 R09: 0000000000000000 [ 105.302951][ T8919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.310932][ T8919] R13: 0000000000000000 R14: 00007f87fe765fa0 R15: 00007ffd739331b8 [ 105.319017][ T8919] [ 105.339599][ T8914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.362441][ T8914] Process accounting resumed [ 105.378640][ T8914] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 105.412613][ T7685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.467612][ T8935] veth0_to_team: entered promiscuous mode [ 105.473496][ T8935] veth0_to_team: entered allmulticast mode [ 105.574485][ T8946] loop3: detected capacity change from 0 to 512 [ 105.581425][ T8946] EXT4-fs: Ignoring removed bh option [ 105.587115][ T8946] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.596725][ T8946] EXT4-fs (loop3): 1 truncate cleaned up [ 105.602916][ T8946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.631304][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.751139][ T8961] FAULT_INJECTION: forcing a failure. [ 105.751139][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 105.763934][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.5.1476 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 105.774392][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 105.784475][ T8961] Call Trace: [ 105.787836][ T8961] [ 105.790787][ T8961] dump_stack_lvl+0xf2/0x150 [ 105.792972][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 105.792988][ T29] audit: type=1400 audit(1732218082.240:4949): avc: denied { remove_name } for pid=8966 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=9306 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.795458][ T8961] dump_stack+0x15/0x20 [ 105.795519][ T8961] should_fail_ex+0x223/0x230 [ 105.795540][ T8961] ? sidtab_sid2str_get+0xb8/0x140 [ 105.801719][ T29] audit: type=1400 audit(1732218082.240:4950): avc: denied { unlink } for pid=8966 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=9306 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.825527][ T8961] should_failslab+0x8f/0xb0 [ 105.825566][ T8961] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 105.825598][ T8961] kmemdup_noprof+0x2a/0x60 [ 105.825692][ T8961] sidtab_sid2str_get+0xb8/0x140 [ 105.825722][ T8961] security_sid_to_context_core+0x1eb/0x2f0 [ 105.825751][ T8961] security_sid_to_context+0x27/0x30 [ 105.825897][ T8961] avc_audit_post_callback+0x9d/0x530 [ 105.825933][ T8961] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 105.826004][ T8961] common_lsm_audit+0x7cc/0xfc0 [ 105.826063][ T8961] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 105.826097][ T8961] ? avc_denied+0xf1/0x110 [ 105.826124][ T8961] slow_avc_audit+0xf9/0x140 [ 105.826210][ T8961] avc_has_perm+0x129/0x160 [ 105.932991][ T8961] selinux_socket_sendmsg+0x185/0x1c0 [ 105.938433][ T8961] security_socket_sendmsg+0x47/0x80 [ 105.943782][ T8961] __sock_sendmsg+0x2d/0x180 [ 105.948436][ T8961] ____sys_sendmsg+0x312/0x410 [ 105.953248][ T8961] __sys_sendmsg+0x19d/0x230 [ 105.958056][ T8961] __x64_sys_sendmsg+0x46/0x50 [ 105.962917][ T8961] x64_sys_call+0x2734/0x2dc0 [ 105.967633][ T8961] do_syscall_64+0xc9/0x1c0 [ 105.972291][ T8961] ? clear_bhb_loop+0x55/0xb0 [ 105.977026][ T8961] ? clear_bhb_loop+0x55/0xb0 [ 105.981746][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.987744][ T8961] RIP: 0033:0x7f005e05e819 [ 105.992192][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.011903][ T8961] RSP: 002b:00007f005c6d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.020348][ T8961] RAX: ffffffffffffffda RBX: 00007f005e215fa0 RCX: 00007f005e05e819 [ 106.028495][ T8961] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 106.036503][ T8961] RBP: 00007f005c6d1090 R08: 0000000000000000 R09: 0000000000000000 [ 106.044562][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.052613][ T8961] R13: 0000000000000000 R14: 00007f005e215fa0 R15: 00007ffc2d8c7198 [ 106.060792][ T8961] [ 106.065071][ T29] audit: type=1400 audit(1732218082.200:4943): avc: denied { write } for pid=8960 comm="syz.5.1476" ssid=135 tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.270945][ T8991] loop3: detected capacity change from 0 to 4096 [ 106.303819][ T8991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.339338][ T8991] Process accounting resumed [ 106.355558][ T29] audit: type=1326 audit(1732218082.790:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.375070][ T8991] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 106.380080][ T29] audit: type=1326 audit(1732218082.790:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.413723][ T29] audit: type=1326 audit(1732218082.790:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.437200][ T29] audit: type=1326 audit(1732218082.790:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.461088][ T9002] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 106.461088][ T9002] program syz.2.1484 not setting count and/or reply_len properly [ 106.478078][ T29] audit: type=1326 audit(1732218082.790:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.502257][ T29] audit: type=1326 audit(1732218082.800:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.528802][ T29] audit: type=1326 audit(1732218082.800:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.2.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 106.552660][ T9002] loop2: detected capacity change from 0 to 512 [ 106.561379][ T9002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.596724][ T9014] SELinux: Context :yz1 is not valid (left unmapped). [ 106.605393][ T9002] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1484: corrupted in-inode xattr: e_name out of bounds [ 106.640609][ T9002] EXT4-fs (loop2): 1 truncate cleaned up [ 106.653934][ T9017] syzkaller0: entered promiscuous mode [ 106.659472][ T9017] syzkaller0: entered allmulticast mode [ 106.675946][ T9002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.706111][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.730708][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1491'. [ 106.746957][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.806662][ T9035] loop3: detected capacity change from 0 to 512 [ 106.826849][ T9040] loop5: detected capacity change from 0 to 128 [ 106.842448][ T9035] EXT4-fs: Ignoring removed nobh option [ 106.874117][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 106.903655][ T9035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.904132][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 106.928697][ T9035] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.983124][ T9035] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1493: bg 0: block 224: padding at end of block bitmap is not set [ 106.998023][ T9035] EXT4-fs (loop3): Remounting filesystem read-only [ 107.014447][ T9055] pim6reg1: entered promiscuous mode [ 107.019949][ T9055] pim6reg1: entered allmulticast mode [ 107.037202][ T9058] FAULT_INJECTION: forcing a failure. [ 107.037202][ T9058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.050709][ T9058] CPU: 0 UID: 0 PID: 9058 Comm: syz.2.1499 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 107.061145][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.071222][ T9058] Call Trace: [ 107.074503][ T9058] [ 107.077443][ T9058] dump_stack_lvl+0xf2/0x150 [ 107.082183][ T9058] dump_stack+0x15/0x20 [ 107.086370][ T9058] should_fail_ex+0x223/0x230 [ 107.091061][ T9058] should_fail_alloc_page+0xfd/0x110 [ 107.096367][ T9058] __alloc_pages_noprof+0x109/0x340 [ 107.101616][ T9058] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 107.107115][ T9058] alloc_pages_noprof+0xe1/0x100 [ 107.112125][ T9058] get_zeroed_page_noprof+0x17/0x40 [ 107.117438][ T9058] rds_cong_from_addr+0x8f/0x2a0 [ 107.122470][ T9058] rds_cong_get_maps+0x1a/0x70 [ 107.127276][ T9058] __rds_conn_create+0x53a/0xfb0 [ 107.132329][ T9058] rds_conn_create_outgoing+0x43/0x60 [ 107.137728][ T9058] rds_sendmsg+0xba7/0x1400 [ 107.142253][ T9058] ? __pfx_rds_sendmsg+0x10/0x10 [ 107.147282][ T9058] __sock_sendmsg+0x140/0x180 [ 107.152013][ T9058] ____sys_sendmsg+0x312/0x410 [ 107.156869][ T9058] __sys_sendmsg+0x19d/0x230 [ 107.161500][ T9058] __x64_sys_sendmsg+0x46/0x50 [ 107.166329][ T9058] x64_sys_call+0x2734/0x2dc0 [ 107.171060][ T9058] do_syscall_64+0xc9/0x1c0 [ 107.175689][ T9058] ? clear_bhb_loop+0x55/0xb0 [ 107.180458][ T9058] ? clear_bhb_loop+0x55/0xb0 [ 107.185165][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.191107][ T9058] RIP: 0033:0x7f7bda5fe819 [ 107.195527][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.215375][ T9058] RSP: 002b:00007f7bd8c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.223834][ T9058] RAX: ffffffffffffffda RBX: 00007f7bda7b5fa0 RCX: 00007f7bda5fe819 [ 107.231815][ T9058] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 107.239880][ T9058] RBP: 00007f7bd8c77090 R08: 0000000000000000 R09: 0000000000000000 [ 107.247927][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.255933][ T9058] R13: 0000000000000000 R14: 00007f7bda7b5fa0 R15: 00007ffd013b47b8 [ 107.263950][ T9058] [ 107.271356][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.273856][ T9059] FAULT_INJECTION: forcing a failure. [ 107.273856][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 107.293361][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.4.1498 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 107.303847][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.305946][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 107.314176][ T9059] Call Trace: [ 107.314193][ T9059] [ 107.314203][ T9059] dump_stack_lvl+0xf2/0x150 [ 107.333981][ T9059] dump_stack+0x15/0x20 [ 107.338343][ T9059] should_fail_ex+0x223/0x230 [ 107.343093][ T9059] ? sidtab_sid2str_get+0xb8/0x140 [ 107.348263][ T9059] should_failslab+0x8f/0xb0 [ 107.352937][ T9059] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 107.359339][ T9059] kmemdup_noprof+0x2a/0x60 [ 107.363918][ T9059] sidtab_sid2str_get+0xb8/0x140 [ 107.368893][ T9059] security_sid_to_context_core+0x1eb/0x2f0 [ 107.374804][ T9059] security_sid_to_context+0x27/0x30 [ 107.380171][ T9059] avc_audit_post_callback+0x10d/0x530 [ 107.385652][ T9059] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 107.391733][ T9059] common_lsm_audit+0x7cc/0xfc0 [ 107.396695][ T9059] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 107.402701][ T9059] ? avc_denied+0xf1/0x110 [ 107.407218][ T9059] slow_avc_audit+0xf9/0x140 [ 107.411896][ T9059] avc_has_perm+0x129/0x160 [ 107.416421][ T9059] selinux_socket_sendmsg+0x185/0x1c0 [ 107.421837][ T9059] security_socket_sendmsg+0x47/0x80 [ 107.427223][ T9059] __sock_sendmsg+0x2d/0x180 [ 107.431827][ T9059] ____sys_sendmsg+0x312/0x410 [ 107.436636][ T9059] __sys_sendmsg+0x19d/0x230 [ 107.441353][ T9059] __x64_sys_sendmsg+0x46/0x50 [ 107.446198][ T9059] x64_sys_call+0x2734/0x2dc0 [ 107.450898][ T9059] do_syscall_64+0xc9/0x1c0 [ 107.455476][ T9059] ? clear_bhb_loop+0x55/0xb0 [ 107.460201][ T9059] ? clear_bhb_loop+0x55/0xb0 [ 107.464966][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.470883][ T9059] RIP: 0033:0x7f94ca82e819 [ 107.475307][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.495075][ T9059] RSP: 002b:00007f94c8e65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.503549][ T9059] RAX: ffffffffffffffda RBX: 00007f94ca9e6160 RCX: 00007f94ca82e819 [ 107.511527][ T9059] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 107.519508][ T9059] RBP: 00007f94c8e65090 R08: 0000000000000000 R09: 0000000000000000 [ 107.527488][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.535475][ T9059] R13: 0000000000000001 R14: 00007f94ca9e6160 R15: 00007fffff379f08 [ 107.543478][ T9059] [ 107.562682][ T9059] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.585697][ T9063] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 107.704646][ T9067] hub 9-0:1.0: USB hub found [ 107.723600][ T9067] hub 9-0:1.0: 8 ports detected [ 107.745162][ T9067] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 107.763235][ T9081] FAULT_INJECTION: forcing a failure. [ 107.763235][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 107.765200][ T9083] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1507'. [ 107.775951][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.0.1506 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 107.795318][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.805436][ T9081] Call Trace: [ 107.808784][ T9081] [ 107.811731][ T9081] dump_stack_lvl+0xf2/0x150 [ 107.816464][ T9081] dump_stack+0x15/0x20 [ 107.820648][ T9081] should_fail_ex+0x223/0x230 [ 107.825399][ T9081] ? skb_clone+0x154/0x1f0 [ 107.829848][ T9081] should_failslab+0x8f/0xb0 [ 107.834516][ T9081] kmem_cache_alloc_noprof+0x4c/0x290 [ 107.840053][ T9081] skb_clone+0x154/0x1f0 [ 107.844371][ T9081] __netlink_deliver_tap+0x2bd/0x4c0 [ 107.849727][ T9081] netlink_unicast+0x64a/0x670 [ 107.854572][ T9081] netlink_sendmsg+0x5cc/0x6e0 [ 107.859426][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.864732][ T9081] __sock_sendmsg+0x140/0x180 [ 107.869483][ T9081] sock_write_iter+0x15e/0x1a0 [ 107.874298][ T9081] do_iter_readv_writev+0x394/0x450 [ 107.879538][ T9081] vfs_writev+0x2d4/0x880 [ 107.883961][ T9081] ? proc_fail_nth_write+0x12a/0x150 [ 107.889337][ T9081] do_writev+0xf4/0x220 [ 107.893574][ T9081] __x64_sys_writev+0x45/0x50 [ 107.898327][ T9081] x64_sys_call+0x1fab/0x2dc0 [ 107.903109][ T9081] do_syscall_64+0xc9/0x1c0 [ 107.907694][ T9081] ? clear_bhb_loop+0x55/0xb0 [ 107.912512][ T9081] ? clear_bhb_loop+0x55/0xb0 [ 107.917229][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.923288][ T9081] RIP: 0033:0x7f87fe5ae819 [ 107.927717][ T9081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.947418][ T9081] RSP: 002b:00007f87fcc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 107.955848][ T9081] RAX: ffffffffffffffda RBX: 00007f87fe765fa0 RCX: 00007f87fe5ae819 [ 107.964101][ T9081] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 107.972157][ T9081] RBP: 00007f87fcc27090 R08: 0000000000000000 R09: 0000000000000000 [ 107.980142][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.988207][ T9081] R13: 0000000000000000 R14: 00007f87fe765fa0 R15: 00007ffd739331b8 [ 107.996193][ T9081] [ 108.012677][ T9083] 0ªX¹¦À: renamed from caif0 [ 108.017090][ T9085] x_tables: duplicate underflow at hook 3 [ 108.028603][ T9083] 0ªX¹¦À: entered allmulticast mode [ 108.034066][ T9083] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.057839][ T9081] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1506'. [ 108.067520][ T9081] 0ªX¹¦À: renamed from caif0 [ 108.083990][ T9081] 0ªX¹¦À: entered allmulticast mode [ 108.089267][ T9081] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.109023][ T9094] x_tables: duplicate underflow at hook 3 [ 108.254427][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 108.296894][ T9124] x_tables: duplicate underflow at hook 3 [ 108.349634][ T9129] SELinux: failed to load policy [ 108.380948][ T9132] pim6reg1: entered promiscuous mode [ 108.386302][ T9132] pim6reg1: entered allmulticast mode [ 108.429508][ T9140] FAULT_INJECTION: forcing a failure. [ 108.429508][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 108.442868][ T9140] CPU: 1 UID: 0 PID: 9140 Comm: syz.0.1518 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 108.453375][ T9140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 108.463650][ T9140] Call Trace: [ 108.466966][ T9140] [ 108.469929][ T9140] dump_stack_lvl+0xf2/0x150 [ 108.474693][ T9140] dump_stack+0x15/0x20 [ 108.478897][ T9140] should_fail_ex+0x223/0x230 [ 108.483607][ T9140] ? do_proc_control+0x1c4/0x850 [ 108.488561][ T9140] should_failslab+0x8f/0xb0 [ 108.493342][ T9140] __kmalloc_cache_noprof+0x4b/0x2a0 [ 108.498647][ T9140] do_proc_control+0x1c4/0x850 [ 108.503535][ T9140] ? should_fail_ex+0xd7/0x230 [ 108.508428][ T9140] usbdev_ioctl+0x1bb3/0x3e00 [ 108.513156][ T9140] ? do_vfs_ioctl+0x96e/0x1530 [ 108.518398][ T9140] ? selinux_file_ioctl+0x2f7/0x380 [ 108.523613][ T9140] ? __fget_files+0x17c/0x1c0 [ 108.528319][ T9140] ? __pfx_usbdev_ioctl+0x10/0x10 [ 108.533652][ T9140] __se_sys_ioctl+0xc9/0x140 [ 108.538260][ T9140] __x64_sys_ioctl+0x43/0x50 [ 108.542863][ T9140] x64_sys_call+0x1690/0x2dc0 [ 108.547560][ T9140] do_syscall_64+0xc9/0x1c0 [ 108.552145][ T9140] ? clear_bhb_loop+0x55/0xb0 [ 108.556849][ T9140] ? clear_bhb_loop+0x55/0xb0 [ 108.561557][ T9140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.567490][ T9140] RIP: 0033:0x7f87fe5ae819 [ 108.571926][ T9140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.591558][ T9140] RSP: 002b:00007f87fcc06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.599987][ T9140] RAX: ffffffffffffffda RBX: 00007f87fe766080 RCX: 00007f87fe5ae819 [ 108.607990][ T9140] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 000000000000000d [ 108.615982][ T9140] RBP: 00007f87fcc06090 R08: 0000000000000000 R09: 0000000000000000 [ 108.623993][ T9140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.631994][ T9140] R13: 0000000000000000 R14: 00007f87fe766080 R15: 00007ffd739331b8 [ 108.640059][ T9140] [ 108.658883][ T9142] x_tables: duplicate underflow at hook 3 [ 108.782334][ T9153] FAULT_INJECTION: forcing a failure. [ 108.782334][ T9153] name failslab, interval 1, probability 0, space 0, times 0 [ 108.795111][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.3.1523 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 108.805469][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 108.815657][ T9153] Call Trace: [ 108.818992][ T9153] [ 108.821942][ T9153] dump_stack_lvl+0xf2/0x150 [ 108.826638][ T9153] dump_stack+0x15/0x20 [ 108.830833][ T9153] should_fail_ex+0x223/0x230 [ 108.835608][ T9153] ? __se_sys_mount+0xf7/0x2d0 [ 108.840599][ T9153] should_failslab+0x8f/0xb0 [ 108.845229][ T9153] __kmalloc_cache_noprof+0x4b/0x2a0 [ 108.850620][ T9153] __se_sys_mount+0xf7/0x2d0 [ 108.855254][ T9153] ? fput+0x1c4/0x200 [ 108.859299][ T9153] ? ksys_write+0x176/0x1b0 [ 108.863906][ T9153] __x64_sys_mount+0x67/0x80 [ 108.868715][ T9153] x64_sys_call+0x2c84/0x2dc0 [ 108.873478][ T9153] do_syscall_64+0xc9/0x1c0 [ 108.878028][ T9153] ? clear_bhb_loop+0x55/0xb0 [ 108.882753][ T9153] ? clear_bhb_loop+0x55/0xb0 [ 108.887469][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.893405][ T9153] RIP: 0033:0x7f749e06e819 [ 108.897848][ T9153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.917481][ T9153] RSP: 002b:00007f749c6e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.926010][ T9153] RAX: ffffffffffffffda RBX: 00007f749e225fa0 RCX: 00007f749e06e819 [ 108.934068][ T9153] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000020000100 [ 108.942070][ T9153] RBP: 00007f749c6e1090 R08: 0000000020000300 R09: 0000000000000000 [ 108.950150][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.958155][ T9153] R13: 0000000000000000 R14: 00007f749e225fa0 R15: 00007fff88d12ae8 [ 108.966202][ T9153] [ 109.013063][ T9183] FAULT_INJECTION: forcing a failure. [ 109.013063][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.026354][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.5.1529 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 109.036713][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.046791][ T9183] Call Trace: [ 109.050179][ T9183] [ 109.053125][ T9183] dump_stack_lvl+0xf2/0x150 [ 109.057773][ T9183] dump_stack+0x15/0x20 [ 109.062021][ T9183] should_fail_ex+0x223/0x230 [ 109.066720][ T9183] should_fail+0xb/0x10 [ 109.070955][ T9183] should_fail_usercopy+0x1a/0x20 [ 109.076036][ T9183] _copy_from_user+0x1e/0xb0 [ 109.080730][ T9183] copy_msghdr_from_user+0x54/0x2a0 [ 109.085946][ T9183] ? __fget_files+0x17c/0x1c0 [ 109.090666][ T9183] __sys_sendmsg+0x13e/0x230 [ 109.095332][ T9183] __x64_sys_sendmsg+0x46/0x50 [ 109.100198][ T9183] x64_sys_call+0x2734/0x2dc0 [ 109.105023][ T9183] do_syscall_64+0xc9/0x1c0 [ 109.109550][ T9183] ? clear_bhb_loop+0x55/0xb0 [ 109.114295][ T9183] ? clear_bhb_loop+0x55/0xb0 [ 109.119003][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.124984][ T9183] RIP: 0033:0x7f005e05e819 [ 109.129412][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.149138][ T9183] RSP: 002b:00007f005c6d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.157599][ T9183] RAX: ffffffffffffffda RBX: 00007f005e215fa0 RCX: 00007f005e05e819 [ 109.165662][ T9183] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 109.173653][ T9183] RBP: 00007f005c6d1090 R08: 0000000000000000 R09: 0000000000000000 [ 109.181728][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.189964][ T9183] R13: 0000000000000000 R14: 00007f005e215fa0 R15: 00007ffc2d8c7198 [ 109.197974][ T9183] [ 109.213960][ T9187] loop2: detected capacity change from 0 to 512 [ 109.319140][ T9192] loop5: detected capacity change from 0 to 8192 [ 109.353116][ T9187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.365956][ T9187] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.518193][ T9210] loop3: detected capacity change from 0 to 8192 [ 109.527152][ T9213] pim6reg1: entered promiscuous mode [ 109.532576][ T9213] pim6reg1: entered allmulticast mode [ 109.571154][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 109.581541][ T9210] loop3: p1 p2 p3 [ 109.611503][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.643602][ T9210] FAULT_INJECTION: forcing a failure. [ 109.643602][ T9210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.657538][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.3.1536 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 109.667989][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.678142][ T9210] Call Trace: [ 109.681433][ T9210] [ 109.684437][ T9210] dump_stack_lvl+0xf2/0x150 [ 109.689208][ T9210] dump_stack+0x15/0x20 [ 109.693433][ T9210] should_fail_ex+0x223/0x230 [ 109.698218][ T9210] should_fail+0xb/0x10 [ 109.702432][ T9210] should_fail_usercopy+0x1a/0x20 [ 109.707496][ T9210] _copy_from_user+0x1e/0xb0 [ 109.712126][ T9210] copy_msghdr_from_user+0x54/0x2a0 [ 109.717335][ T9210] ? __fget_files+0x17c/0x1c0 [ 109.722039][ T9210] __sys_sendmsg+0x13e/0x230 [ 109.726693][ T9210] __x64_sys_sendmsg+0x46/0x50 [ 109.731475][ T9210] x64_sys_call+0x2734/0x2dc0 [ 109.736171][ T9210] do_syscall_64+0xc9/0x1c0 [ 109.740760][ T9210] ? clear_bhb_loop+0x55/0xb0 [ 109.745479][ T9210] ? clear_bhb_loop+0x55/0xb0 [ 109.750181][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.756097][ T9210] RIP: 0033:0x7f749e06e819 [ 109.760519][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.780197][ T9210] RSP: 002b:00007f749c6e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.788638][ T9210] RAX: ffffffffffffffda RBX: 00007f749e225fa0 RCX: 00007f749e06e819 [ 109.796667][ T9210] RDX: 0000000000000890 RSI: 0000000020000500 RDI: 0000000000000008 [ 109.804655][ T9210] RBP: 00007f749c6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 109.812633][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.820661][ T9210] R13: 0000000000000000 R14: 00007f749e225fa0 R15: 00007fff88d12ae8 [ 109.828651][ T9210] [ 109.862549][ T3018] loop3: p1 p2 p3 [ 110.033001][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.041674][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 110.071303][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 110.115500][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 110.117409][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.131362][ T4036] udevd[4036]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 110.138759][ T9252] netlink: 'syz.2.1547': attribute type 33 has an invalid length. [ 110.178045][ T9252] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 110.195772][ T9258] syz.5.1549[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.195900][ T9258] syz.5.1549[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.213790][ T9258] syz.5.1549[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.285927][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 110.311482][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 110.319199][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 110.349862][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.357580][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.365313][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.372994][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.380671][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.388350][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.396166][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.404007][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.411678][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.419330][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.427050][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.434857][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.442569][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.450457][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.479704][ T9252] netlink: 'syz.2.1547': attribute type 3 has an invalid length. [ 110.520888][ T9273] loop3: detected capacity change from 0 to 128 [ 110.590638][ T9273] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.604381][ T9] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 110.615080][ T9273] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.765449][ T9282] 9pnet_fd: Insufficient options for proto=fd [ 110.812579][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.902873][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 110.902888][ T29] audit: type=1400 audit(1732218087.350:5281): avc: denied { execmem } for pid=9291 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.950577][ T9296] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 111.081168][ T9301] x_tables: duplicate underflow at hook 3 [ 111.131739][ T29] audit: type=1326 audit(1732218087.580:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 111.167521][ T9310] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 111.200137][ T29] audit: type=1326 audit(1732218087.610:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 111.224299][ T29] audit: type=1326 audit(1732218087.610:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bda5fe819 code=0x7ffc0000 [ 111.247888][ T29] audit: type=1400 audit(1732218087.610:5285): avc: denied { create } for pid=9291 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.278413][ T9313] loop2: detected capacity change from 0 to 2048 [ 111.310135][ T9311] x_tables: duplicate underflow at hook 3 [ 111.319536][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.338841][ T9322] loop4: detected capacity change from 0 to 512 [ 111.364316][ T9322] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1566: attempt to clear invalid blocks 1 len 1 [ 111.394748][ T9313] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.411291][ T29] audit: type=1400 audit(1732218087.840:5286): avc: denied { prog_load } for pid=9324 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.430711][ T29] audit: type=1400 audit(1732218087.840:5287): avc: denied { bpf } for pid=9324 comm="syz.5.1567" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.431584][ T9313] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 736 with max blocks 32 with error 28 [ 111.452227][ T29] audit: type=1400 audit(1732218087.840:5288): avc: denied { perfmon } for pid=9324 comm="syz.5.1567" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.464059][ T9313] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.464059][ T9313] [ 111.485751][ T29] audit: type=1400 audit(1732218087.860:5289): avc: denied { append } for pid=3000 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.494687][ T9313] EXT4-fs (loop2): Total free blocks count 0 [ 111.518139][ T29] audit: type=1400 audit(1732218087.860:5290): avc: denied { prog_run } for pid=9324 comm="syz.5.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.523500][ T9313] EXT4-fs (loop2): Free/Dirty block details [ 111.548636][ T9313] EXT4-fs (loop2): free_blocks=2415919104 [ 111.554412][ T9313] EXT4-fs (loop2): dirty_blocks=48 [ 111.559546][ T9313] EXT4-fs (loop2): Block reservation details [ 111.565573][ T9313] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 111.577019][ T9322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1566: bg 0: block 343: padding at end of block bitmap is not set [ 111.596407][ T9322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 111.606250][ T9322] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1566: invalid indirect mapped block 1819239214 (level 0) [ 111.645690][ T9322] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1566: invalid indirect mapped block 1819239214 (level 1) [ 111.647492][ T5776] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28 [ 111.686110][ T9322] EXT4-fs (loop4): 1 truncate cleaned up [ 111.731746][ T9322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.768948][ T9322] syz.4.1566[9322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.769025][ T9322] syz.4.1566[9322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.790136][ T9322] syz.4.1566[9322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.891014][ T9336] loop2: detected capacity change from 0 to 8192 [ 111.954134][ T9346] x_tables: duplicate underflow at hook 3 [ 111.970415][ T9351] netlink: 'syz.5.1574': attribute type 33 has an invalid length. [ 112.022554][ T9357] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 112.199604][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.263675][ T9383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.436977][ T9388] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1581'. [ 112.499911][ T9388] gretap0: entered promiscuous mode [ 112.537262][ T9395] loop4: detected capacity change from 0 to 8192 [ 112.540047][ T9392] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 112.747449][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.785018][ T9403] xt_connbytes: Forcing CT accounting to be enabled [ 112.792631][ T9405] x_tables: duplicate underflow at hook 3 [ 112.802765][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.830405][ T9403] Cannot find add_set index 0 as target [ 112.845649][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 112.973140][ T9413] loop2: detected capacity change from 0 to 512 [ 112.976602][ T9416] x_tables: duplicate underflow at hook 3 [ 112.985737][ T9413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.008236][ T9413] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1591: corrupted in-inode xattr: e_name out of bounds [ 113.023740][ T9413] EXT4-fs (loop2): 1 truncate cleaned up [ 113.030265][ T9413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.065670][ T9427] syz.0.1597[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.065827][ T9427] syz.0.1597[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.070817][ T9413] FAULT_INJECTION: forcing a failure. [ 113.070817][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 113.077494][ T9427] syz.0.1597[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.088651][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.2.1591 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 113.088685][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 113.088732][ T9413] Call Trace: [ 113.088740][ T9413] [ 113.088749][ T9413] dump_stack_lvl+0xf2/0x150 [ 113.088793][ T9413] dump_stack+0x15/0x20 [ 113.088870][ T9413] should_fail_ex+0x223/0x230 [ 113.088956][ T9413] ? audit_log_start+0x34c/0x6b0 [ 113.088988][ T9413] should_failslab+0x8f/0xb0 [ 113.089025][ T9413] kmem_cache_alloc_noprof+0x4c/0x290 [ 113.089127][ T9413] audit_log_start+0x34c/0x6b0 [ 113.089165][ T9413] audit_seccomp+0x4b/0x130 [ 113.089192][ T9413] __seccomp_filter+0x6fa/0x1180 [ 113.089255][ T9413] ? _raw_spin_unlock+0x26/0x50 [ 113.187272][ T9413] ? __mark_inode_dirty+0x45e/0x7e0 [ 113.192556][ T9413] ? mnt_put_write_access+0x55/0x70 [ 113.197933][ T9413] ? touch_atime+0x2bb/0x350 [ 113.202553][ T9413] __secure_computing+0x9f/0x1c0 [ 113.207515][ T9413] syscall_trace_enter+0xd1/0x1f0 [ 113.212714][ T9413] ? fpregs_assert_state_consistent+0x83/0xa0 [ 113.218896][ T9413] do_syscall_64+0xaa/0x1c0 [ 113.223445][ T9413] ? clear_bhb_loop+0x55/0xb0 [ 113.228250][ T9413] ? clear_bhb_loop+0x55/0xb0 [ 113.233036][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.239020][ T9413] RIP: 0033:0x7f7bda5fd25c [ 113.243501][ T9413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 113.263134][ T9413] RSP: 002b:00007f7bd8c77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.271561][ T9413] RAX: ffffffffffffffda RBX: 00007f7bda7b5fa0 RCX: 00007f7bda5fd25c [ 113.279615][ T9413] RDX: 000000000000000f RSI: 00007f7bd8c770a0 RDI: 0000000000000009 [ 113.287592][ T9413] RBP: 00007f7bd8c77090 R08: 0000000000000000 R09: 0000000000000000 [ 113.295596][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.303600][ T9413] R13: 0000000000000000 R14: 00007f7bda7b5fa0 R15: 00007ffd013b47b8 [ 113.311641][ T9413] [ 113.344634][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.351931][ T9429] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 113.477228][ T9451] netlink: 'syz.0.1602': attribute type 29 has an invalid length. [ 113.486144][ T9451] netlink: 'syz.0.1602': attribute type 29 has an invalid length. [ 113.495872][ T9451] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1602'. [ 113.505924][ T9451] unsupported nla_type 40 [ 113.677975][ T9464] loop2: detected capacity change from 0 to 8192 [ 113.798723][ T9481] loop3: detected capacity change from 0 to 512 [ 113.822302][ T9481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.839780][ T9481] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.898093][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.006404][ T9499] loop3: detected capacity change from 0 to 512 [ 114.024879][ T9499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.038896][ T9499] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1611: corrupted in-inode xattr: e_name out of bounds [ 114.056043][ T9499] EXT4-fs (loop3): 1 truncate cleaned up [ 114.066601][ T9499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.113368][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.149026][ T9514] loop3: detected capacity change from 0 to 512 [ 114.155727][ T9514] EXT4-fs: Ignoring removed bh option [ 114.164243][ T9514] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 114.176914][ T9517] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 114.203615][ T9514] EXT4-fs (loop3): 1 truncate cleaned up [ 114.217596][ T9514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.386696][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.432007][ T3306] ================================================================== [ 114.440147][ T3306] BUG: KCSAN: data-race in set_nlink / set_nlink [ 114.446529][ T3306] [ 114.448870][ T3306] read to 0xffff888106449120 of 4 bytes by task 3018 on cpu 1: [ 114.456518][ T3306] set_nlink+0x2b/0xb0 [ 114.460613][ T3306] kernfs_iop_permission+0x1c8/0x210 [ 114.465908][ T3306] inode_permission+0x18c/0x300 [ 114.470783][ T3306] link_path_walk+0x14b/0x820 [ 114.475529][ T3306] path_lookupat+0x72/0x2b0 [ 114.480053][ T3306] filename_lookup+0x150/0x340 [ 114.484924][ T3306] vfs_statx+0x9a/0x170 [ 114.489100][ T3306] __se_sys_newfstatat+0xdc/0x300 [ 114.494234][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 114.499283][ T3306] x64_sys_call+0x236d/0x2dc0 [ 114.503977][ T3306] do_syscall_64+0xc9/0x1c0 [ 114.508506][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.514421][ T3306] [ 114.516748][ T3306] write to 0xffff888106449120 of 4 bytes by task 3306 on cpu 0: [ 114.524395][ T3306] set_nlink+0x98/0xb0 [ 114.528577][ T3306] kernfs_iop_permission+0x1c8/0x210 [ 114.533880][ T3306] inode_permission+0x18c/0x300 [ 114.538764][ T3306] link_path_walk+0x14b/0x820 [ 114.543460][ T3306] path_openat+0x1af/0x1fa0 [ 114.547975][ T3306] do_filp_open+0x107/0x230 [ 114.552501][ T3306] do_sys_openat2+0xab/0x120 [ 114.557112][ T3306] __x64_sys_openat+0xf3/0x120 [ 114.561898][ T3306] x64_sys_call+0x2b30/0x2dc0 [ 114.566589][ T3306] do_syscall_64+0xc9/0x1c0 [ 114.571137][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.577047][ T3306] [ 114.579369][ T3306] value changed: 0x00000009 -> 0x00000008 [ 114.585095][ T3306] [ 114.587417][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 114.593685][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: udevd Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 114.603584][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 114.613678][ T3306] ================================================================== [ 114.626471][ T9572] FAULT_INJECTION: forcing a failure. [ 114.626471][ T9572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.639672][ T9572] CPU: 1 UID: 0 PID: 9572 Comm: syz.3.1616 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 114.650086][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 114.660181][ T9572] Call Trace: [ 114.663498][ T9572] [ 114.666466][ T9572] dump_stack_lvl+0xf2/0x150 [ 114.671116][ T9572] dump_stack+0x15/0x20 [ 114.675373][ T9572] should_fail_ex+0x223/0x230 [ 114.680128][ T9572] should_fail+0xb/0x10 [ 114.684320][ T9572] should_fail_usercopy+0x1a/0x20 [ 114.689405][ T9572] _copy_from_user+0x1e/0xb0 [ 114.694155][ T9572] __sys_bpf+0x14e/0x7a0 [ 114.698506][ T9572] __x64_sys_bpf+0x43/0x50 [ 114.699789][ T9578] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 114.703037][ T9572] x64_sys_call+0x2914/0x2dc0 [ 114.715554][ T9572] do_syscall_64+0xc9/0x1c0 [ 114.720241][ T9572] ? clear_bhb_loop+0x55/0xb0 [ 114.724984][ T9572] ? clear_bhb_loop+0x55/0xb0 [ 114.729702][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.735690][ T9572] RIP: 0033:0x7f749e06e819 [ 114.740125][ T9572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.759782][ T9572] RSP: 002b:00007f749c6e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.768208][ T9572] RAX: ffffffffffffffda RBX: 00007f749e225fa0 RCX: 00007f749e06e819 [ 114.776187][ T9572] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005 [ 114.784177][ T9572] RBP: 00007f749c6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 114.792229][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.800326][ T9572] R13: 0000000000000000 R14: 00007f749e225fa0 R15: 00007fff88d12ae8 [ 114.808353][ T9572]