last executing test programs: 33.911557321s ago: executing program 4 (id=7151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xbe9}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x5c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c}, {0x1, 0x81, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x20040054) 33.817313297s ago: executing program 4 (id=7155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) 33.768747181s ago: executing program 4 (id=7159): sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace(0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 33.720013325s ago: executing program 4 (id=7162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) 33.554587317s ago: executing program 4 (id=7170): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 33.331875433s ago: executing program 4 (id=7180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) 33.331653643s ago: executing program 32 (id=7180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) 30.893954343s ago: executing program 5 (id=7228): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x6662, &(0x7f0000000440)={0x0, 0xbbb8, 0x1008, 0x1fff, 0x10080002}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) pipe2$9p(0x0, 0x2880) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1053b0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x0) semop(r5, &(0x7f0000000140), 0x0) semctl$GETNCNT(r5, 0x0, 0xe, 0x0) syz_io_uring_setup(0x48be, 0x0, &(0x7f00000011c0), 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) listxattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) 29.956153572s ago: executing program 5 (id=7241): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fdatasync(r1) 29.889262017s ago: executing program 5 (id=7242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xbe9}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) 29.830081612s ago: executing program 5 (id=7245): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) 29.656865174s ago: executing program 5 (id=7248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x0) 27.522286692s ago: executing program 5 (id=7268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 27.522102962s ago: executing program 33 (id=7268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 1.717514914s ago: executing program 0 (id=7861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='rpc_call_rpcerror\x00', r2}, 0x18) clock_adjtime(0x0, &(0x7f0000000e00)={0xa627, 0x0, 0x0, 0xc8d, 0xfffffffffffffffd, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8e}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791060000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000002}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x5, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x64}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ade03d2889c7737d"}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000890) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='s\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022abd7000fedbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="0500f6000700000050002d800a0000000101010101010000180000006fee71afb1acea6cb6713aaec3be17f79eba46290a00000002020202020200000d0000007a479622f39d5c9f480000000a0000000202020202020000"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x2, 0xa}, &(0x7f0000000680)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000006c0)={r10, 0x9, 0x6}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) dup(r6) 1.668603818s ago: executing program 0 (id=7863): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 1.623542791s ago: executing program 0 (id=7865): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0xa98) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) socket$inet6(0xa, 0x80002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.314950454s ago: executing program 1 (id=7875): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 1.278611296s ago: executing program 1 (id=7876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) 1.278013766s ago: executing program 0 (id=7877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000040)=ANY=[]) 1.22686633s ago: executing program 0 (id=7878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_emit_ethernet(0x102a, &(0x7f00000006c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x9, "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"}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000177b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r5, &(0x7f0000000300), 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.162073715s ago: executing program 1 (id=7879): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x3, r8, 0x0, 0x0, 0x1}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.081678341s ago: executing program 1 (id=7881): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.079858231s ago: executing program 2 (id=7882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x800) 849.292138ms ago: executing program 1 (id=7883): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100) 810.291671ms ago: executing program 1 (id=7884): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef35"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 809.736821ms ago: executing program 2 (id=7885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}]}], {0x14, 0x10}}, 0x90}}, 0x800) 782.765473ms ago: executing program 2 (id=7887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 737.163246ms ago: executing program 0 (id=7888): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000300000000000000000000702500000000002020207b1af8ff00c25ddc2e78b86b0800000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095f821573a4cc491bfcca8f5970509b1051d7064a3a359d0d1125749ef870d4b646d6affcbc447474db04a038e6157a9d7847df7e5b323d04e9720cd94f8386f92ffcd48841018ef6fcb05717f70ef0d94d57a65ca2a8d2df75f005c283624ad434f81abb4b3db5503031a8591e69279fa4e302155d5215e5e452a846b2987da22e2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000390009000000000000000000010000e93e000000"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000003280)={&(0x7f00000005c0), 0x4000000000000133, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaac60ef76ba77d993faa6925"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000003300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a370500022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa840000070000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090db8351bc0cab2b8d780000"], 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000121401002abd70f2ffffffff07004f"], 0x38}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003580)={0x1a, 0xc, &(0x7f0000003440)=ANY=[@ANYRESDEC=r6, @ANYRES64=r3, @ANYRES64=r6, @ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="eae169d399cac85893af1ad12bf631f0538595d29a7d4713a823e77c1b3eb81dc4f4f9b1174d8f5b36f8b89ea08ef5d0019df4550fdd4e5013f49c2563f4014b04888e2044136a6f70bce985fbf9be6d42c1fc93798bbd04de64f1ef83ed03f4502da5a32ca236733d79868252f21c9a581fdc2b4f846443aaabaa0acc9aeee4310c5cf926bcfca10d36e7195e15ce7e8b19a3055c2285513ba0de8cf983d6765d76406d237396a1b26619e1c3509d197e060fd65c158d407cd7da200a1aeab116ec260f78dfcf51c4bcafabc3818ff8026c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 326.948706ms ago: executing program 6 (id=7894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x3, r9, 0x0, 0x0, 0x1}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 302.670648ms ago: executing program 6 (id=7895): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea43155fb6ad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}, 0x0) io_uring_setup(0x2ab0, &(0x7f00000004c0)={0x0, 0xbcd3, 0x0, 0x0, 0x249}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00'}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100) 284.81788ms ago: executing program 6 (id=7896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x800) 267.723321ms ago: executing program 6 (id=7897): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 248.757482ms ago: executing program 2 (id=7898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_emit_ethernet(0x102a, &(0x7f00000006c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x9, "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"}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000177b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r5, &(0x7f0000000300), 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 241.778563ms ago: executing program 6 (id=7899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fdatasync(r2) 218.819715ms ago: executing program 6 (id=7900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r2 = socket$igmp6(0xa, 0x3, 0x2) accept(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 141.10486ms ago: executing program 2 (id=7902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000540)=@nullb, 0x0, 0x0) 87.506974ms ago: executing program 2 (id=7904): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semop(r0, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 70.143305ms ago: executing program 3 (id=7905): creat(0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x8000000000002}, 0x18) setrlimit(0xe, &(0x7f0000000000)={0x7, 0x5}) 69.710525ms ago: executing program 3 (id=7906): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLERRORu(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x3, r9, 0x0, 0x0, 0x1}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 49.294377ms ago: executing program 3 (id=7907): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea43155fb6ad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}, 0x0) io_uring_setup(0x2ab0, &(0x7f00000004c0)={0x0, 0xbcd3, 0x0, 0x0, 0x249}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00'}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100) 36.420248ms ago: executing program 3 (id=7908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x800) 21.047169ms ago: executing program 3 (id=7909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) 0s ago: executing program 3 (id=7910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) fdatasync(r2) kernel console output (not intermixed with test programs): ? clear_bhb_loop+0x55/0xb0 [ 313.835241][T20883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.835269][T20883] RIP: 0033:0x7f430d47cde9 [ 313.835284][T20883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.835455][T20883] RSP: 002b:00007f430bae6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 313.835478][T20883] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007f430d47cde9 [ 313.835493][T20883] RDX: 00007f430bae6ef0 RSI: 0000000000000000 RDI: 00007f430d4fec51 [ 313.835513][T20883] RBP: 0000400000000400 R08: 00007f430bae6bb7 R09: 00007f430bae6e40 [ 313.835528][T20883] R10: 000000000000000a R11: 0000000000000202 R12: 00004000000001c0 [ 313.835543][T20883] R13: 00007f430bae6ef0 R14: 00007f430bae6eb0 R15: 0000400000000880 [ 313.835566][T20883] [ 314.078253][T20888] 9pnet: Could not find request transport: r01777777777777777777777 [ 314.111987][T20897] netlink: 'syz.0.6597': attribute type 4 has an invalid length. [ 314.123167][T20896] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6596'. [ 314.142470][T20896] 0ªX¹¦À: renamed from caif0 [ 314.144714][T20897] netlink: 'syz.0.6597': attribute type 4 has an invalid length. [ 314.162832][T20896] 0ªX¹¦À: entered allmulticast mode [ 314.168177][T20896] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 314.184652][T20899] bio_check_eod: 11086 callbacks suppressed [ 314.184692][T20899] syz.2.6596: attempt to access beyond end of device [ 314.184692][T20899] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 314.220029][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 314.220044][ T29] audit: type=1326 audit(1739299039.274:33625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 314.260414][T20902] loop0: detected capacity change from 0 to 2048 [ 314.263520][ T29] audit: type=1326 audit(1739299039.304:33626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 314.290375][ T29] audit: type=1326 audit(1739299039.304:33627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 314.313685][ T29] audit: type=1326 audit(1739299039.304:33628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 314.336832][ T29] audit: type=1326 audit(1739299039.304:33629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 314.360015][ T29] audit: type=1326 audit(1739299039.304:33630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 314.383227][ T29] audit: type=1326 audit(1739299039.304:33631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee05d7ce23 code=0x7ffc0000 [ 314.406143][ T29] audit: type=1326 audit(1739299039.304:33632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee05d7b89f code=0x7ffc0000 [ 314.429113][ T29] audit: type=1326 audit(1739299039.314:33633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fee05d7ce77 code=0x7ffc0000 [ 314.452182][ T29] audit: type=1326 audit(1739299039.314:33634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee05d7b750 code=0x7ffc0000 [ 314.497544][T20902] loop0: p1 < > p4 [ 314.508136][T20902] loop0: p4 size 8388608 extends beyond EOD, truncated [ 314.583674][T20926] syz.1.6608: attempt to access beyond end of device [ 314.583674][T20926] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 314.599260][T20921] 9pnet: Could not find request transport: r01777777777777777777777 [ 314.641562][T20928] netlink: 'syz.0.6609': attribute type 4 has an invalid length. [ 314.654413][T20930] loop4: detected capacity change from 0 to 512 [ 314.661377][T20930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 314.673389][T20928] netlink: 'syz.0.6609': attribute type 4 has an invalid length. [ 314.682961][T20930] EXT4-fs (loop4): 1 truncate cleaned up [ 314.689165][T20930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.705533][T20936] netlink: 2052 bytes leftover after parsing attributes in process `syz.1.6611'. [ 314.714853][T20936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6611'. [ 314.729204][T20938] loop0: detected capacity change from 0 to 128 [ 314.739932][T20938] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.752074][T20938] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.752781][T18567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.767469][T20938] netlink: 'syz.0.6612': attribute type 79 has an invalid length. [ 314.863528][T20948] loop4: detected capacity change from 0 to 2048 [ 314.906212][T20948] loop4: p1 < > p4 [ 314.910947][T20948] loop4: p4 size 8388608 extends beyond EOD, truncated [ 314.991790][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6622'. [ 315.014789][T20960] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.040207][T20963] 9pnet_fd: Insufficient options for proto=fd [ 315.089075][T20967] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 315.238669][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6633'. [ 315.292737][T20989] 9pnet_fd: Insufficient options for proto=fd [ 316.087536][T21037] loop3: detected capacity change from 0 to 128 [ 316.094404][T21037] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.107928][T21037] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.123229][T21037] netlink: 'syz.3.6654': attribute type 79 has an invalid length. [ 317.421249][T21089] loop1: detected capacity change from 0 to 2048 [ 317.456352][T21089] loop1: p1 < > p4 [ 317.460759][T21089] loop1: p4 size 8388608 extends beyond EOD, truncated [ 317.515045][T21094] loop1: detected capacity change from 0 to 128 [ 317.521895][T21094] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.534348][T21094] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.549102][T21094] validate_nla: 2 callbacks suppressed [ 317.549130][T21094] netlink: 'syz.1.6678': attribute type 79 has an invalid length. [ 317.877786][T21124] loop3: detected capacity change from 0 to 128 [ 318.338822][T21145] lo speed is unknown, defaulting to 1000 [ 318.978937][T21159] loop4: detected capacity change from 0 to 2048 [ 319.036265][T21159] loop4: p1 < > p4 [ 319.041823][T21159] loop4: p4 size 8388608 extends beyond EOD, truncated [ 319.063645][T21172] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.070632][T11880] IPVS: starting estimator thread 0... [ 319.101876][T21178] netlink: 'syz.4.6710': attribute type 4 has an invalid length. [ 319.121302][T21178] netlink: 'syz.4.6710': attribute type 4 has an invalid length. [ 319.138478][T21180] syz.1.6711: attempt to access beyond end of device [ 319.138478][T21180] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.165972][T21176] IPVS: using max 1824 ests per chain, 91200 per kthread [ 319.322645][T21201] FAULT_INJECTION: forcing a failure. [ 319.322645][T21201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.335898][T21201] CPU: 1 UID: 0 PID: 21201 Comm: syz.1.6720 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 319.335928][T21201] Tainted: [W]=WARN [ 319.335934][T21201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.335947][T21201] Call Trace: [ 319.335953][T21201] [ 319.335959][T21201] dump_stack_lvl+0xf2/0x150 [ 319.336056][T21201] dump_stack+0x15/0x1a [ 319.336081][T21201] should_fail_ex+0x24a/0x260 [ 319.336122][T21201] should_fail+0xb/0x10 [ 319.336157][T21201] should_fail_usercopy+0x1a/0x20 [ 319.336251][T21201] _copy_to_user+0x20/0xa0 [ 319.336278][T21201] simple_read_from_buffer+0xa0/0x110 [ 319.336312][T21201] proc_fail_nth_read+0xf9/0x140 [ 319.336343][T21201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.336420][T21201] vfs_read+0x19b/0x6f0 [ 319.336441][T21201] ? __rcu_read_unlock+0x4e/0x70 [ 319.336467][T21201] ? __fget_files+0x17c/0x1c0 [ 319.336504][T21201] ksys_read+0xe8/0x1b0 [ 319.336531][T21201] __x64_sys_read+0x42/0x50 [ 319.336589][T21201] x64_sys_call+0x2874/0x2dc0 [ 319.336771][T21201] do_syscall_64+0xc9/0x1c0 [ 319.336824][T21201] ? clear_bhb_loop+0x55/0xb0 [ 319.336923][T21201] ? clear_bhb_loop+0x55/0xb0 [ 319.336950][T21201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.336985][T21201] RIP: 0033:0x7f20b6ecb7fc [ 319.337010][T21201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.337032][T21201] RSP: 002b:00007f20b5537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.337053][T21201] RAX: ffffffffffffffda RBX: 00007f20b70e5fa0 RCX: 00007f20b6ecb7fc [ 319.337065][T21201] RDX: 000000000000000f RSI: 00007f20b55370a0 RDI: 0000000000000006 [ 319.337129][T21201] RBP: 00007f20b5537090 R08: 0000000000000000 R09: 0000000000000000 [ 319.337192][T21201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.337206][T21201] R13: 0000000000000000 R14: 00007f20b70e5fa0 R15: 00007fff0366ee18 [ 319.337224][T21201] [ 319.337515][ T29] kauditd_printk_skb: 3195 callbacks suppressed [ 319.337527][ T29] audit: type=1326 audit(1739299044.394:36830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 319.378177][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6721'. [ 319.379015][ T29] audit: type=1326 audit(1739299044.394:36831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 319.409701][T21203] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.446836][T21205] syz.3.6722: attempt to access beyond end of device [ 319.446836][T21205] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.502170][T21207] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.649819][T21210] netlink: 'syz.1.6724': attribute type 4 has an invalid length. [ 319.662838][T21210] netlink: 'syz.1.6724': attribute type 4 has an invalid length. [ 319.771066][ T29] audit: type=1326 audit(1739299044.824:36832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.772631][T21225] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 319.794767][ T29] audit: type=1326 audit(1739299044.824:36833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.826274][ T29] audit: type=1326 audit(1739299044.824:36834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.850256][ T29] audit: type=1326 audit(1739299044.864:36835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.873926][ T29] audit: type=1326 audit(1739299044.864:36836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.897655][ T29] audit: type=1326 audit(1739299044.864:36837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.909778][T21230] syz.3.6733: attempt to access beyond end of device [ 319.909778][T21230] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.921305][ T29] audit: type=1326 audit(1739299044.864:36838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21227 comm="syz.1.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 319.970472][ T29] audit: type=1326 audit(1739299045.024:36839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21232 comm="syz.2.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 320.236144][T21242] lo speed is unknown, defaulting to 1000 [ 320.714470][T21249] netlink: 'syz.1.6737': attribute type 4 has an invalid length. [ 320.743606][T21248] netlink: 'syz.1.6737': attribute type 4 has an invalid length. [ 320.822214][T21255] loop1: detected capacity change from 0 to 2048 [ 320.886189][T21255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.929114][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.980700][T21272] tmpfs: Unknown parameter 'h–ge' [ 320.993704][T21272] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.090179][T21284] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.090458][ T35] IPVS: starting estimator thread 0... [ 321.188470][T21291] IPVS: using max 2304 ests per chain, 115200 per kthread [ 321.212747][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.221423][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.918930][T21322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21322 comm=syz.3.6764 [ 321.958269][T21330] mmap: syz.1.6768 (21330): VmData 167489536 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 322.022353][T21336] loop1: detected capacity change from 0 to 2048 [ 322.076692][T21336] loop1: p1 < > p4 [ 322.082656][T21336] loop1: p4 size 8388608 extends beyond EOD, truncated [ 322.133808][T21341] loop1: detected capacity change from 0 to 2048 [ 322.155140][T21341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.207278][T21349] xt_hashlimit: max too large, truncated to 1048576 [ 322.312420][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.365269][T21359] loop1: detected capacity change from 0 to 2048 [ 322.397853][T21359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.427773][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.474572][T21366] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.002422][T21382] loop0: detected capacity change from 0 to 128 [ 323.060738][T21387] loop3: detected capacity change from 0 to 512 [ 323.068669][T21387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 323.083765][T21387] EXT4-fs (loop3): 1 truncate cleaned up [ 323.090977][T21387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.157355][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.472148][T21409] lo speed is unknown, defaulting to 1000 [ 324.157428][T21416] lo speed is unknown, defaulting to 1000 [ 324.160446][T21423] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.273174][T21434] loop3: detected capacity change from 0 to 128 [ 324.420609][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 324.420624][ T29] audit: type=1400 audit(1739299049.474:37024): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 324.449931][ T29] audit: type=1400 audit(1739299049.474:37025): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.472694][ T29] audit: type=1400 audit(1739299049.514:37026): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.495453][ T29] audit: type=1400 audit(1739299049.514:37027): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.518761][ T29] audit: type=1400 audit(1739299049.514:37028): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.573965][ T29] audit: type=1326 audit(1739299049.624:37029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 324.598414][ T29] audit: type=1326 audit(1739299049.624:37030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 324.622302][ T29] audit: type=1326 audit(1739299049.624:37031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 324.648248][ T29] audit: type=1326 audit(1739299049.624:37032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 324.760755][ T29] audit: type=1326 audit(1739299049.624:37033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.3.6804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98cd70cde9 code=0x7ffc0000 [ 325.290172][T21454] lo speed is unknown, defaulting to 1000 [ 325.922023][T21464] loop0: detected capacity change from 0 to 2048 [ 325.960156][T21464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.011443][T21477] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.025317][T20014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.151981][T21493] loop0: detected capacity change from 0 to 2048 [ 326.204931][T21493] loop0: p1 < > p4 [ 326.214258][T21493] loop0: p4 size 8388608 extends beyond EOD, truncated [ 326.362075][T21503] loop3: detected capacity change from 0 to 2048 [ 326.389266][T21503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.423985][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.580900][T21511] lo speed is unknown, defaulting to 1000 [ 326.827638][T21528] syz.1.6832: attempt to access beyond end of device [ 326.827638][T21528] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 326.919779][T21538] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 326.931527][T21538] SELinux: failed to load policy [ 326.948664][T21542] loop4: detected capacity change from 0 to 128 [ 327.044862][T21554] syz.1.6844: attempt to access beyond end of device [ 327.044862][T21554] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 327.128717][T21562] netlink: 'syz.2.6848': attribute type 4 has an invalid length. [ 327.141688][T21562] netlink: 'syz.2.6848': attribute type 4 has an invalid length. [ 327.190843][T21566] loop1: detected capacity change from 0 to 1024 [ 327.200880][T21566] ext4: Unknown parameter 'fowner' [ 327.329433][T21580] loop1: detected capacity change from 0 to 128 [ 327.373702][T21584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6857'. [ 327.413052][T21584] infiniband syz!: set down [ 327.418299][T21584] infiniband syz!: added team_slave_0 [ 327.428809][T21584] RDS/IB: syz!: added [ 327.432886][T21584] smc: adding ib device syz! with port count 1 [ 327.439182][T21584] smc: ib device syz! port 1 has pnetid [ 327.601763][T21593] lo speed is unknown, defaulting to 1000 [ 327.654206][T21594] loop1: detected capacity change from 0 to 1024 [ 327.661448][T21594] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.673427][T21594] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 327.681599][T21594] EXT4-fs (loop1): orphan cleanup on readonly fs [ 327.688507][T21594] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 327.698159][T21594] EXT4-fs (loop1): Remounting filesystem read-only [ 327.704785][T21594] EXT4-fs (loop1): 1 orphan inode deleted [ 327.711400][T21594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 327.728245][T21594] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 327.735473][T21594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.783070][T21597] netlink: 'syz.3.6861': attribute type 4 has an invalid length. [ 327.805913][T21597] netlink: 'syz.3.6861': attribute type 4 has an invalid length. [ 327.864813][T21599] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 327.904188][T21602] syz.1.6863 (21602) used obsolete PPPIOCDETACH ioctl [ 328.075830][T21611] 9pnet: Could not find request transport: r01777777777777777777777 [ 328.180472][T21626] netlink: 'syz.0.6873': attribute type 4 has an invalid length. [ 328.205214][T21631] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 328.209195][T21626] netlink: 'syz.0.6873': attribute type 4 has an invalid length. [ 328.474262][T21663] netlink: 'syz.4.6888': attribute type 4 has an invalid length. [ 328.496902][T21663] netlink: 'syz.4.6888': attribute type 4 has an invalid length. [ 328.589394][T21669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.630209][T21673] 9pnet_fd: Insufficient options for proto=fd [ 328.657494][T21669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.733090][T21669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.762432][T21682] FAULT_INJECTION: forcing a failure. [ 328.762432][T21682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.776247][T21682] CPU: 0 UID: 0 PID: 21682 Comm: syz.3.6896 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 328.776283][T21682] Tainted: [W]=WARN [ 328.776301][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.776313][T21682] Call Trace: [ 328.776320][T21682] [ 328.776330][T21682] dump_stack_lvl+0xf2/0x150 [ 328.776365][T21682] dump_stack+0x15/0x1a [ 328.776391][T21682] should_fail_ex+0x24a/0x260 [ 328.776432][T21682] should_fail+0xb/0x10 [ 328.776530][T21682] should_fail_usercopy+0x1a/0x20 [ 328.776575][T21682] _copy_from_user+0x1c/0xa0 [ 328.776604][T21682] ucma_write+0xd4/0x240 [ 328.776627][T21682] ? __pfx_ucma_write+0x10/0x10 [ 328.776651][T21682] vfs_write+0x27d/0x920 [ 328.776740][T21682] ? __fget_files+0x17c/0x1c0 [ 328.776779][T21682] ksys_write+0xe8/0x1b0 [ 328.776806][T21682] __x64_sys_write+0x42/0x50 [ 328.776831][T21682] x64_sys_call+0x287e/0x2dc0 [ 328.776859][T21682] do_syscall_64+0xc9/0x1c0 [ 328.776889][T21682] ? clear_bhb_loop+0x55/0xb0 [ 328.776933][T21682] ? clear_bhb_loop+0x55/0xb0 [ 328.776967][T21682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.776998][T21682] RIP: 0033:0x7f98cd70cde9 [ 328.777115][T21682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.777136][T21682] RSP: 002b:00007f98cbd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.777155][T21682] RAX: ffffffffffffffda RBX: 00007f98cd925fa0 RCX: 00007f98cd70cde9 [ 328.777169][T21682] RDX: 0000000000000118 RSI: 0000400000000780 RDI: 0000000000000003 [ 328.777183][T21682] RBP: 00007f98cbd71090 R08: 0000000000000000 R09: 0000000000000000 [ 328.777194][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.777205][T21682] R13: 0000000000000000 R14: 00007f98cd925fa0 R15: 00007fff612979e8 [ 328.777223][T21682] [ 328.999069][T21669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.065013][T21669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.080725][T21669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.102468][T21669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.118320][T21669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.208229][T21704] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.351706][T21721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6914'. [ 329.364492][T21721] loop0: detected capacity change from 0 to 512 [ 329.370432][T21711] lo speed is unknown, defaulting to 1000 [ 329.405247][T21727] loop1: detected capacity change from 0 to 2048 [ 329.433338][ T29] kauditd_printk_skb: 3847 callbacks suppressed [ 329.433416][ T29] audit: type=1326 audit(1739299054.484:40877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedc3623da7 code=0x7ffc0000 [ 329.470163][T21721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.482934][ T29] audit: type=1326 audit(1739299054.514:40878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc35c8fb9 code=0x7ffc0000 [ 329.501828][T21727] loop1: p1 < > p4 [ 329.506590][ T29] audit: type=1326 audit(1739299054.514:40879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedc3623da7 code=0x7ffc0000 [ 329.506626][ T29] audit: type=1326 audit(1739299054.514:40880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc35c8fb9 code=0x7ffc0000 [ 329.506677][ T29] audit: type=1326 audit(1739299054.514:40881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fedc362cde9 code=0x7ffc0000 [ 329.506864][ T29] audit: type=1326 audit(1739299054.534:40882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedc3623da7 code=0x7ffc0000 [ 329.506896][ T29] audit: type=1326 audit(1739299054.534:40883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc35c8fb9 code=0x7ffc0000 [ 329.506929][ T29] audit: type=1326 audit(1739299054.534:40884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fedc362cde9 code=0x7ffc0000 [ 329.506988][ T29] audit: type=1326 audit(1739299054.534:40885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedc3623da7 code=0x7ffc0000 [ 329.507021][ T29] audit: type=1326 audit(1739299054.534:40886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21683 comm="syz.4.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fedc35c8fb9 code=0x7ffc0000 [ 329.512238][T21721] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.587473][T21727] loop1: p4 size 8388608 extends beyond EOD, [ 329.661719][T21721] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 329.678261][T21727] truncated [ 329.706817][T21721] SELinux: failed to load policy [ 329.802689][T21737] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.848561][T20014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.919029][T21750] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.956274][T21753] loop4: detected capacity change from 0 to 1024 [ 329.967264][T21756] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 329.988055][T21754] loop0: detected capacity change from 0 to 128 [ 329.995597][T21754] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.012461][T21754] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.025010][T21753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.101942][T21754] netlink: 'syz.0.6926': attribute type 79 has an invalid length. [ 330.239774][T21786] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 330.262184][T18567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.350513][T21793] FAULT_INJECTION: forcing a failure. [ 330.350513][T21793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.364441][T21793] CPU: 0 UID: 0 PID: 21793 Comm: syz.2.6943 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 330.364528][T21793] Tainted: [W]=WARN [ 330.364535][T21793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.364547][T21793] Call Trace: [ 330.364556][T21793] [ 330.364566][T21793] dump_stack_lvl+0xf2/0x150 [ 330.364600][T21793] dump_stack+0x15/0x1a [ 330.364673][T21793] should_fail_ex+0x24a/0x260 [ 330.364712][T21793] should_fail+0xb/0x10 [ 330.364742][T21793] should_fail_usercopy+0x1a/0x20 [ 330.364775][T21793] _copy_to_user+0x20/0xa0 [ 330.364804][T21793] simple_read_from_buffer+0xa0/0x110 [ 330.364870][T21793] proc_fail_nth_read+0xf9/0x140 [ 330.364899][T21793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.364927][T21793] vfs_read+0x19b/0x6f0 [ 330.364946][T21793] ? __rcu_read_unlock+0x4e/0x70 [ 330.364976][T21793] ? __fget_files+0x17c/0x1c0 [ 330.365027][T21793] ksys_read+0xe8/0x1b0 [ 330.365054][T21793] __x64_sys_read+0x42/0x50 [ 330.365079][T21793] x64_sys_call+0x2874/0x2dc0 [ 330.365116][T21793] do_syscall_64+0xc9/0x1c0 [ 330.365144][T21793] ? clear_bhb_loop+0x55/0xb0 [ 330.365175][T21793] ? clear_bhb_loop+0x55/0xb0 [ 330.365205][T21793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.365312][T21793] RIP: 0033:0x7f430d47b7fc [ 330.365327][T21793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 330.365344][T21793] RSP: 002b:00007f430bae7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.365366][T21793] RAX: ffffffffffffffda RBX: 00007f430d695fa0 RCX: 00007f430d47b7fc [ 330.365381][T21793] RDX: 000000000000000f RSI: 00007f430bae70a0 RDI: 0000000000000004 [ 330.365394][T21793] RBP: 00007f430bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 330.365408][T21793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.365422][T21793] R13: 0000000000000000 R14: 00007f430d695fa0 R15: 00007ffc92622218 [ 330.365446][T21793] [ 330.596921][T21797] loop4: detected capacity change from 0 to 2048 [ 330.611308][T21797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.654472][T18567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.708347][T21805] lo speed is unknown, defaulting to 1000 [ 330.867974][T21814] loop0: detected capacity change from 0 to 2048 [ 330.929157][T21814] loop0: p1 < > p4 [ 330.937217][T21814] loop0: p4 size 8388608 extends beyond EOD, truncated [ 331.132278][T21837] loop0: detected capacity change from 0 to 128 [ 331.139080][T21837] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.157287][T21837] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.184474][T21837] netlink: 'syz.0.6957': attribute type 79 has an invalid length. [ 331.206848][T21843] loop4: detected capacity change from 0 to 2048 [ 331.232162][T21843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.276213][T18567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.310722][T21853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.356319][T21855] loop1: detected capacity change from 0 to 512 [ 331.357296][T21863] veth0_to_team: entered allmulticast mode [ 331.363059][T21855] EXT4-fs: Ignoring removed oldalloc option [ 331.381783][T21855] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.6966: Parent and EA inode have the same ino 15 [ 331.394973][T21855] EXT4-fs (loop1): Remounting filesystem read-only [ 331.397769][T21863] atomic_op ffff8881266e9928 conn xmit_atomic 0000000000000000 [ 331.401699][T21855] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 331.419958][T21855] EXT4-fs (loop1): 1 orphan inode deleted [ 331.420053][T21862] veth0_to_team: left allmulticast mode [ 331.426347][T21855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.443585][T21855] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 331.456092][T21855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.470119][T21853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.538462][T21853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.574005][T21875] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 331.619116][T21853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.704437][T21853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.717210][T21853] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.730227][T21853] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.742628][T21853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.016597][T21924] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 332.582624][T21940] loop1: detected capacity change from 0 to 2048 [ 332.597800][T21940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.632301][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.658635][T21951] loop1: detected capacity change from 0 to 128 [ 332.665523][T21951] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.678088][T21951] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.688813][T21951] netlink: 'syz.1.7006': attribute type 79 has an invalid length. [ 332.908246][T21972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 332.991243][T21984] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 333.027679][T21988] loop3: detected capacity change from 0 to 2048 [ 333.066369][T21988] loop3: p1 < > p4 [ 333.070899][T21988] loop3: p4 size 8388608 extends beyond EOD, truncated [ 333.637971][T22020] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 333.690088][T22024] loop4: detected capacity change from 0 to 2048 [ 333.747652][T22024] loop4: p1 < > p4 [ 333.755282][T22024] loop4: p4 size 8388608 extends beyond EOD, truncated [ 333.961958][T22048] netlink: 'syz.2.7050': attribute type 4 has an invalid length. [ 333.985113][T22048] netlink: 'syz.2.7050': attribute type 4 has an invalid length. [ 333.985764][T22050] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.066064][T22051] lo speed is unknown, defaulting to 1000 [ 334.362623][T22060] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.505945][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 334.506038][ T29] audit: type=1326 audit(1739299059.554:41694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 334.535826][ T29] audit: type=1326 audit(1739299059.554:41695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 334.558962][ T29] audit: type=1326 audit(1739299059.554:41696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 334.582138][ T29] audit: type=1326 audit(1739299059.554:41697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 334.605331][ T29] audit: type=1326 audit(1739299059.554:41698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 334.628660][ T29] audit: type=1326 audit(1739299059.554:41699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f430d47cde9 code=0x7ffc0000 [ 334.651866][ T29] audit: type=1326 audit(1739299059.554:41700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f430d47ce23 code=0x7ffc0000 [ 334.684571][ T29] audit: type=1326 audit(1739299059.684:41701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f430d47b89f code=0x7ffc0000 [ 334.707817][ T29] audit: type=1326 audit(1739299059.684:41702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f430d47ce77 code=0x7ffc0000 [ 334.730843][ T29] audit: type=1326 audit(1739299059.714:41703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f430d47b750 code=0x7ffc0000 [ 335.648219][T22114] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.752596][T22122] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 335.762998][T22124] netlink: 'syz.3.7080': attribute type 4 has an invalid length. [ 335.797026][T22124] netlink: 'syz.3.7080': attribute type 4 has an invalid length. [ 335.914522][T22134] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.922837][ T9] IPVS: starting estimator thread 0... [ 335.991086][T22151] loop1: detected capacity change from 0 to 128 [ 336.015981][T22142] IPVS: using max 2304 ests per chain, 115200 per kthread [ 336.074258][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7100'. [ 336.163733][T22174] syz.3.7104: attempt to access beyond end of device [ 336.163733][T22174] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 336.272746][ T9] IPVS: starting estimator thread 0... [ 336.280816][T22178] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.348542][T22198] loop1: detected capacity change from 0 to 128 [ 336.368837][T22186] IPVS: using max 2304 ests per chain, 115200 per kthread [ 336.387827][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7117'. [ 336.419300][T22203] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.741592][T22231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7129'. [ 336.779019][T22231] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.843055][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7130'. [ 336.874243][T22233] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.911648][T22235] loop0: detected capacity change from 0 to 2048 [ 336.956189][T22235] loop0: p1 < > p4 [ 336.960641][T22235] loop0: p4 size 8388608 extends beyond EOD, truncated [ 337.053129][T22249] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 337.083590][T22253] netlink: 'syz.0.7140': attribute type 4 has an invalid length. [ 337.099672][T22253] netlink: 'syz.0.7140': attribute type 4 has an invalid length. [ 337.180126][T22261] loop0: detected capacity change from 0 to 2048 [ 337.216810][T22264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7145'. [ 337.231402][T22261] loop0: p1 < > p4 [ 337.236133][T22261] loop0: p4 size 8388608 extends beyond EOD, truncated [ 337.311528][T22274] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 337.359762][T22280] netlink: 'syz.0.7153': attribute type 4 has an invalid length. [ 337.381875][T22280] netlink: 'syz.0.7153': attribute type 4 has an invalid length. [ 337.423407][T22285] syz.4.7155: attempt to access beyond end of device [ 337.423407][T22285] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.463082][T22286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7156'. [ 337.513014][T22291] loop1: detected capacity change from 0 to 2048 [ 337.526259][T22298] loop4: detected capacity change from 0 to 1024 [ 337.535581][T22302] 9pnet_fd: Insufficient options for proto=fd [ 337.557217][T22291] loop1: p1 < > p4 [ 337.562287][T22298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.563791][T22291] loop1: p4 size 8388608 extends beyond EOD, truncated [ 337.666470][T18567] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 337.679531][T18567] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 337.733618][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7171'. [ 337.837813][T22310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.018229][T22356] loop1: detected capacity change from 0 to 2048 [ 338.040558][T22356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.071015][T22343] lo speed is unknown, defaulting to 1000 [ 338.093452][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.127409][T22370] lo speed is unknown, defaulting to 1000 [ 338.223500][T22384] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.338748][T22343] chnl_net:caif_netlink_parms(): no params data found [ 338.414584][T22343] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.421782][T22343] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.429028][T22343] bridge_slave_0: entered allmulticast mode [ 338.435555][T22343] bridge_slave_0: entered promiscuous mode [ 338.442941][T22343] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.450236][T22343] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.460437][T22343] bridge_slave_1: entered allmulticast mode [ 338.467415][T22343] bridge_slave_1: entered promiscuous mode [ 338.485847][T22343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.496858][T22343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.517879][T22343] team0: Port device team_slave_0 added [ 338.524617][T22343] team0: Port device team_slave_1 added [ 338.542574][T22343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.549593][T22343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.575706][T22343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.587309][T22343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.594277][T22343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.620265][T22343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.659752][T22343] hsr_slave_0: entered promiscuous mode [ 338.666553][T22343] hsr_slave_1: entered promiscuous mode [ 338.672835][T22343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.681906][T22343] Cannot create hsr debugfs directory [ 338.721686][T22408] loop3: detected capacity change from 0 to 2048 [ 338.741450][T22408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.765534][T22343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.776449][T22343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.776987][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.795499][T22343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.808064][T22343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.831963][T22343] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.839170][T22343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.846475][T22343] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.854023][T22343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.894125][T22343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.911171][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.919951][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.932107][T22419] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.932671][T22343] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.951414][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.958540][T12195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.973164][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.980353][T12195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.988609][T22421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.054959][T22343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.163348][T22343] veth0_vlan: entered promiscuous mode [ 339.183107][T22343] veth1_vlan: entered promiscuous mode [ 339.197252][T22343] veth0_macvtap: entered promiscuous mode [ 339.213829][T22343] veth1_macvtap: entered promiscuous mode [ 339.230975][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.241545][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.251483][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.261954][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.272521][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.283084][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.293042][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.303556][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.313431][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.323979][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.333938][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.344671][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.354568][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.365055][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.375015][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.385491][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.395374][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.405928][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.417308][T22343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.433319][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.443859][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.453883][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.464481][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.474349][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.484808][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.494792][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.505270][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.515444][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.526001][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.535126][ T29] kauditd_printk_skb: 1286 callbacks suppressed [ 339.535190][ T29] audit: type=1326 audit(1739299064.584:42990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.0.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 339.535842][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.535859][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.535878][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.535894][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.535911][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.535956][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.535974][T22343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.536048][T22343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.544618][T22343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.609511][ T29] audit: type=1326 audit(1739299064.594:42991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.0.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 339.621319][T22343] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.628504][ T29] audit: type=1326 audit(1739299064.594:42992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22422 comm="syz.0.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 339.639038][T22343] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.639105][T22343] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.639139][T22343] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.741481][ T29] audit: type=1326 audit(1739299064.654:42993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.749301][T22458] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.765993][ T29] audit: type=1326 audit(1739299064.654:42994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.797030][ T29] audit: type=1326 audit(1739299064.664:42995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.821130][ T29] audit: type=1326 audit(1739299064.664:42996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.845996][ T29] audit: type=1326 audit(1739299064.664:42997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.850787][T22462] syz.3.7220: attempt to access beyond end of device [ 339.850787][T22462] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 339.869751][ T29] audit: type=1326 audit(1739299064.664:42998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.907965][ T29] audit: type=1326 audit(1739299064.664:42999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.1.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b6eccde9 code=0x7ffc0000 [ 339.959711][T22465] loop3: detected capacity change from 0 to 128 [ 339.969521][T22465] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.992572][T22465] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.008258][T22465] netlink: 'syz.3.7221': attribute type 79 has an invalid length. [ 340.016668][T22468] lo speed is unknown, defaulting to 1000 [ 340.037516][T22475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7223'. [ 340.336347][T22486] loop1: detected capacity change from 0 to 2048 [ 340.381463][T22486] loop1: p1 < > p4 [ 340.386773][T22486] loop1: p4 size 8388608 extends beyond EOD, truncated [ 340.396118][T22490] loop0: detected capacity change from 0 to 2048 [ 340.416350][T22490] loop0: p1 < > p4 [ 340.426799][T22490] loop0: p4 size 8388608 extends beyond EOD, truncated [ 340.813197][T22504] loop3: detected capacity change from 0 to 1024 [ 340.840114][T22504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.024189][T22511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7235'. [ 341.075445][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.116582][T22519] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.139973][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7240'. [ 341.163210][T22522] lo speed is unknown, defaulting to 1000 [ 341.187552][T22521] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.400417][T22538] loop5: detected capacity change from 0 to 1024 [ 341.408983][T22535] loop1: detected capacity change from 0 to 128 [ 341.411936][T22540] syz.0.7246: attempt to access beyond end of device [ 341.411936][T22540] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 341.416376][T22535] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.456840][T22535] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.461209][T22538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.494188][T22535] netlink: 'syz.1.7244': attribute type 79 has an invalid length. [ 341.559681][T22343] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 341.580745][T22343] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 341.971266][T22551] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.052659][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7253'. [ 342.117261][T22557] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.542499][T22574] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.625231][T22577] loop3: detected capacity change from 0 to 2048 [ 342.675280][T22578] lo speed is unknown, defaulting to 1000 [ 342.699794][T22577] loop3: p1 < > p4 [ 342.711474][T22577] loop3: p4 size 8388608 extends beyond EOD, truncated [ 343.260204][T22592] netlink: 'syz.2.7265': attribute type 79 has an invalid length. [ 343.640316][T22546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.641199][T12194] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.689618][T12194] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.741765][T12194] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.789256][T12194] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.822215][T22615] loop3: detected capacity change from 0 to 1024 [ 343.851378][T22605] lo speed is unknown, defaulting to 1000 [ 343.865192][T22615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.921234][T12194] bridge_slave_1: left allmulticast mode [ 343.927174][T12194] bridge_slave_1: left promiscuous mode [ 343.932976][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.941326][T12194] bridge_slave_0: left allmulticast mode [ 343.947086][T12194] bridge_slave_0: left promiscuous mode [ 343.952700][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.040942][T12194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.052694][T12194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.066652][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.067621][T12194] bond0 (unregistering): Released all slaves [ 344.221172][T12194] hsr_slave_0: left promiscuous mode [ 344.239864][T22644] syz.2.7283: attempt to access beyond end of device [ 344.239864][T22644] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 344.253079][T12194] hsr_slave_1: left promiscuous mode [ 344.270644][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.278252][T12194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.287065][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.294658][T12194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.310602][T12194] veth1_macvtap: left promiscuous mode [ 344.317417][T12194] veth0_macvtap: left promiscuous mode [ 344.323006][T12194] veth1_vlan: left promiscuous mode [ 344.328868][T12194] veth0_vlan: left promiscuous mode [ 344.329944][T22652] netlink: 'syz.2.7286': attribute type 79 has an invalid length. [ 344.428393][T12194] team0 (unregistering): Port device team_slave_1 removed [ 344.438574][T12194] team0 (unregistering): Port device team_slave_0 removed [ 344.482867][T22605] chnl_net:caif_netlink_parms(): no params data found [ 344.522419][T22605] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.529611][T22605] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.535915][ T29] kauditd_printk_skb: 2554 callbacks suppressed [ 344.535933][ T29] audit: type=1326 audit(1739299069.584:45554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 344.543169][T22605] bridge_slave_0: entered allmulticast mode [ 344.566515][ T29] audit: type=1326 audit(1739299069.584:45555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 344.573014][T22605] bridge_slave_0: entered promiscuous mode [ 344.601726][ T29] audit: type=1326 audit(1739299069.654:45556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 344.626321][ T29] audit: type=1326 audit(1739299069.654:45557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 344.627368][T22605] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.649870][ T29] audit: type=1326 audit(1739299069.654:45558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 344.655692][ T29] audit: type=1326 audit(1739299069.704:45559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 344.657658][T22605] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.681243][ T29] audit: type=1326 audit(1739299069.704:45560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 344.721265][T22605] bridge_slave_1: entered allmulticast mode [ 344.735711][ T29] audit: type=1326 audit(1739299069.704:45561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 344.735753][ T29] audit: type=1326 audit(1739299069.704:45562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 344.735819][ T29] audit: type=1326 audit(1739299069.704:45563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22619 comm="syz.0.7275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 344.815547][T22605] bridge_slave_1: entered promiscuous mode [ 344.834374][T22605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.850713][T22605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.883425][T22667] loop0: detected capacity change from 0 to 2048 [ 344.895650][T22605] team0: Port device team_slave_0 added [ 344.903280][T22605] team0: Port device team_slave_1 added [ 344.916358][T22667] loop0: p1 < > p4 [ 344.920851][T22667] loop0: p4 size 8388608 extends beyond EOD, truncated [ 344.921436][T22605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.935350][T22605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.961883][T22605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.993148][T22605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.997592][T22670] loop0: detected capacity change from 0 to 2048 [ 345.000977][T22605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.032349][T22670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.033297][T22605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.079338][T20014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.103030][T22605] hsr_slave_0: entered promiscuous mode [ 345.114821][T22605] hsr_slave_1: entered promiscuous mode [ 345.121082][T22605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.129272][T22605] Cannot create hsr debugfs directory [ 345.230167][T22605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.239947][T22605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.249600][T22605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.262704][T22605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.294345][T22605] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.301453][T22605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.308935][T22605] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.316085][T22605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.366806][T22605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.387277][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.395562][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.413847][T22605] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.426202][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.433354][T12194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.445593][T12198] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.452733][T12198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.527625][T22605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.636142][T22605] veth0_vlan: entered promiscuous mode [ 345.645212][T22605] veth1_vlan: entered promiscuous mode [ 345.671270][T22605] veth0_macvtap: entered promiscuous mode [ 345.677860][T22710] loop1: detected capacity change from 0 to 2048 [ 345.682377][T22605] veth1_macvtap: entered promiscuous mode [ 345.696049][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.706510][T22710] loop1: p1 < > p4 [ 345.707582][T22710] loop1: p4 size 8388608 extends beyond EOD, [ 345.711099][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.711121][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.717240][T22710] truncated [ 345.727064][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.727085][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.761664][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.772288][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.782785][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.792663][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.803879][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.813777][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.824277][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.834294][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.845580][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.855449][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.866636][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.876570][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.887341][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.899869][T22605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.908609][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.919228][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.929160][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.940282][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.950151][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.960684][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.971325][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.981862][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.991738][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.002951][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.012867][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.023415][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.033962][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.044537][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.054430][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.065748][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.075689][T22605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.087007][T22605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.099417][T22605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.114523][T22712] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 346.115195][T22605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.133691][T22605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.142629][T22605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.151601][T22605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.168345][T22723] loop3: detected capacity change from 0 to 128 [ 346.175017][T22723] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.212388][T22723] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.225766][T22723] netlink: 'syz.3.7304': attribute type 79 has an invalid length. [ 346.243838][T22728] loop1: detected capacity change from 0 to 2048 [ 346.252957][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7269'. [ 346.287077][T22728] loop1: p1 < > p4 [ 346.291744][T22728] loop1: p4 size 8388608 extends beyond EOD, truncated [ 346.500939][T22751] program syz.1.7315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.600944][T22758] 9pnet_fd: Insufficient options for proto=fd [ 346.627633][T22754] xt_CT: No such helper "syz1" [ 346.660507][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7319'. [ 346.860705][T22774] lo speed is unknown, defaulting to 1000 [ 346.906213][T22777] lo: entered promiscuous mode [ 346.911058][T22777] lo: entered allmulticast mode [ 346.934775][T22779] FAULT_INJECTION: forcing a failure. [ 346.934775][T22779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.935917][T22777] loop1: detected capacity change from 0 to 512 [ 346.948035][T22779] CPU: 1 UID: 0 PID: 22779 Comm: syz.2.7326 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 346.948075][T22779] Tainted: [W]=WARN [ 346.948083][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 346.948194][T22779] Call Trace: [ 346.948202][T22779] [ 346.948212][T22779] dump_stack_lvl+0xf2/0x150 [ 346.948243][T22779] dump_stack+0x15/0x1a [ 346.948269][T22779] should_fail_ex+0x24a/0x260 [ 346.948306][T22779] should_fail+0xb/0x10 [ 346.948415][T22779] should_fail_usercopy+0x1a/0x20 [ 346.948466][T22779] _copy_from_user+0x1c/0xa0 [ 346.948494][T22779] ____sys_sendmsg+0x1a4/0x410 [ 346.948531][T22779] __sys_sendmsg+0x19d/0x230 [ 346.948581][T22779] __x64_sys_sendmsg+0x46/0x50 [ 346.948657][T22779] x64_sys_call+0x2734/0x2dc0 [ 346.948690][T22779] do_syscall_64+0xc9/0x1c0 [ 346.948718][T22779] ? clear_bhb_loop+0x55/0xb0 [ 346.948753][T22779] ? clear_bhb_loop+0x55/0xb0 [ 346.948790][T22779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.948899][T22779] RIP: 0033:0x7f430d47cde9 [ 346.948919][T22779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.948942][T22779] RSP: 002b:00007f430bae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.948967][T22779] RAX: ffffffffffffffda RBX: 00007f430d695fa0 RCX: 00007f430d47cde9 [ 346.948982][T22779] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 346.949028][T22779] RBP: 00007f430bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.949043][T22779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.949058][T22779] R13: 0000000000000000 R14: 00007f430d695fa0 R15: 00007ffc92622218 [ 346.949083][T22779] [ 347.149181][T22777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.163734][T22777] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.228639][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.285246][T22802] loop0: detected capacity change from 0 to 512 [ 347.299304][T22802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.330131][T22806] loop1: detected capacity change from 0 to 2048 [ 347.333279][T22802] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.367231][T22806] loop1: p1 < > p4 [ 347.371891][T22806] loop1: p4 size 8388608 extends beyond EOD, truncated [ 347.381589][T22802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.392789][T22808] netlink: 'syz.2.7337': attribute type 79 has an invalid length. [ 347.454223][T22814] loop0: detected capacity change from 0 to 128 [ 347.524877][T22820] loop1: detected capacity change from 0 to 1024 [ 347.538377][T22820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.627343][T22832] loop6: detected capacity change from 0 to 128 [ 347.635749][T22832] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.649753][T22832] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.728141][T19216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.740258][T22605] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.759946][T22837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.768620][T22837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.787502][T22837] loop1: detected capacity change from 0 to 512 [ 347.794539][T22837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 347.810342][T22837] EXT4-fs (loop1): 1 truncate cleaned up [ 347.817752][T22837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.830737][T22837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.492989][T22874] 9pnet_fd: Insufficient options for proto=fd [ 348.533487][T22880] netlink: 'syz.2.7365': attribute type 79 has an invalid length. [ 348.548734][T22884] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.627402][T22893] batman_adv: batadv0: Adding interface: dummy0 [ 348.633787][T22893] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.659359][T22893] batman_adv: batadv0: Interface activated: dummy0 [ 348.671776][T22893] batadv0: mtu less than device minimum [ 348.677863][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.688660][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.699425][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.710233][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.721137][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.732059][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.742858][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.753672][T22893] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 348.884098][T22906] 9pnet_fd: Insufficient options for proto=fd [ 348.953471][T22916] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 348.988858][T22922] 9pnet_fd: Insufficient options for proto=fd [ 349.002957][T22922] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7385'. [ 349.012475][T22922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7385'. [ 349.057008][T22926] lo speed is unknown, defaulting to 1000 [ 349.202918][T22931] 9pnet_fd: Insufficient options for proto=fd [ 349.291196][T22944] program syz.6.7395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.382097][T22945] xt_CT: No such helper "syz1" [ 349.482292][T22952] loop0: detected capacity change from 0 to 2048 [ 349.538682][T22952] loop0: p1 < > p4 [ 349.547053][T22952] loop0: p4 size 8388608 extends beyond EOD, truncated [ 349.558266][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 349.558285][ T29] audit: type=1326 audit(1739299074.614:46429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.588334][ T29] audit: type=1326 audit(1739299074.614:46430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fee05d7c367 code=0x7ffc0000 [ 349.611429][ T29] audit: type=1326 audit(1739299074.614:46431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.635109][ T29] audit: type=1326 audit(1739299074.614:46432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.658998][ T29] audit: type=1326 audit(1739299074.614:46433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.694885][ T29] audit: type=1326 audit(1739299074.614:46434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fee05d7c367 code=0x7ffc0000 [ 349.718809][ T29] audit: type=1326 audit(1739299074.614:46435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.742429][ T29] audit: type=1326 audit(1739299074.614:46436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.766288][ T29] audit: type=1326 audit(1739299074.614:46437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee05d7b5fa code=0x7ffc0000 [ 349.789262][T22963] loop1: detected capacity change from 0 to 2048 [ 349.789500][ T29] audit: type=1326 audit(1739299074.614:46438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee05d7ba4a code=0x7ffc0000 [ 349.823037][T22961] 9pnet_fd: Insufficient options for proto=fd [ 349.857911][T22963] loop1: p1 < > p4 [ 349.868376][T22963] loop1: p4 size 8388608 extends beyond EOD, truncated [ 349.894286][T22972] loop6: detected capacity change from 0 to 128 [ 349.901220][T22972] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.920227][T22975] 9pnet_fd: Insufficient options for proto=fd [ 349.928972][T22972] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.947865][T22972] netlink: 'syz.6.7406': attribute type 79 has an invalid length. [ 350.030327][T22983] FAULT_INJECTION: forcing a failure. [ 350.030327][T22983] name failslab, interval 1, probability 0, space 0, times 0 [ 350.043122][T22983] CPU: 1 UID: 0 PID: 22983 Comm: syz.2.7411 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 350.043154][T22983] Tainted: [W]=WARN [ 350.043161][T22983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 350.043178][T22983] Call Trace: [ 350.043237][T22983] [ 350.043247][T22983] dump_stack_lvl+0xf2/0x150 [ 350.043412][T22983] dump_stack+0x15/0x1a [ 350.043460][T22983] should_fail_ex+0x24a/0x260 [ 350.043504][T22983] should_failslab+0x8f/0xb0 [ 350.043611][T22983] __kmalloc_noprof+0xab/0x3f0 [ 350.043651][T22983] ? security_msg_msg_alloc+0x44/0x100 [ 350.043677][T22983] ? should_fail_ex+0xd7/0x260 [ 350.043714][T22983] security_msg_msg_alloc+0x44/0x100 [ 350.043761][T22983] load_msg+0x206/0x2c0 [ 350.043795][T22983] do_mq_timedsend+0x23b/0x680 [ 350.043887][T22983] __x64_sys_mq_timedsend+0xca/0x150 [ 350.043918][T22983] x64_sys_call+0x2a68/0x2dc0 [ 350.043975][T22983] do_syscall_64+0xc9/0x1c0 [ 350.043999][T22983] ? clear_bhb_loop+0x55/0xb0 [ 350.044032][T22983] ? clear_bhb_loop+0x55/0xb0 [ 350.044134][T22983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.044167][T22983] RIP: 0033:0x7f430d47cde9 [ 350.044184][T22983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.044212][T22983] RSP: 002b:00007f430bae7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 350.044234][T22983] RAX: ffffffffffffffda RBX: 00007f430d695fa0 RCX: 00007f430d47cde9 [ 350.044249][T22983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 350.044262][T22983] RBP: 00007f430bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 350.044361][T22983] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 350.044376][T22983] R13: 0000000000000000 R14: 00007f430d695fa0 R15: 00007ffc92622218 [ 350.044400][T22983] [ 350.251753][T22985] loop3: detected capacity change from 0 to 2048 [ 350.277070][T22985] loop3: p1 < > p4 [ 350.281637][T22985] loop3: p4 size 8388608 extends beyond EOD, truncated [ 350.304201][T22991] 9pnet_fd: Insufficient options for proto=fd [ 350.704335][T23006] loop0: detected capacity change from 0 to 128 [ 350.740688][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7423'. [ 350.830836][T23015] lo speed is unknown, defaulting to 1000 [ 350.830848][T23017] 9pnet_fd: Insufficient options for proto=fd [ 350.931402][T23027] 9pnet_fd: Insufficient options for proto=fd [ 350.938292][T23027] 9pnet_fd: Insufficient options for proto=fd [ 350.942836][T23029] loop6: detected capacity change from 0 to 128 [ 350.960731][T23029] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.987355][T23029] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.006378][T23029] netlink: 'syz.6.7433': attribute type 79 has an invalid length. [ 351.179718][T23046] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7440'. [ 351.209215][T23050] can0: slcan on ttyS3. [ 351.276014][T23049] can0 (unregistered): slcan off ttyS3. [ 351.361304][T23058] 9pnet_fd: Insufficient options for proto=fd [ 351.377086][T23058] 9pnet_fd: Insufficient options for proto=fd [ 351.482201][T23080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 351.511449][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7457'. [ 351.598902][T23096] 9pnet_fd: Insufficient options for proto=fd [ 351.605559][T23096] 9pnet_fd: Insufficient options for proto=fd [ 351.838295][T23107] 9pnet_fd: Insufficient options for proto=fd [ 351.854429][T23107] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7466'. [ 351.863706][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7466'. [ 352.209657][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7469'. [ 352.295057][T23122] loop0: detected capacity change from 0 to 128 [ 352.302146][T23122] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.314322][T23122] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.325733][T23122] netlink: 'syz.0.7473': attribute type 79 has an invalid length. [ 352.492429][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7481'. [ 352.797446][T23144] lo speed is unknown, defaulting to 1000 [ 353.129342][T23152] loop6: detected capacity change from 0 to 2048 [ 353.186935][T23152] loop6: p1 < > p4 [ 353.193491][T23152] loop6: p4 size 8388608 extends beyond EOD, truncated [ 353.298521][T23174] program syz.2.7494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.462289][T23178] xt_CT: No such helper "syz1" [ 353.480287][T23185] loop1: detected capacity change from 0 to 128 [ 353.510332][T23185] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.530877][T23185] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.542619][T23185] netlink: 'syz.1.7497': attribute type 79 has an invalid length. [ 353.791236][T23205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 354.204437][T23254] FAULT_INJECTION: forcing a failure. [ 354.204437][T23254] name failslab, interval 1, probability 0, space 0, times 0 [ 354.218101][T23254] CPU: 0 UID: 0 PID: 23254 Comm: syz.6.7530 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 354.218134][T23254] Tainted: [W]=WARN [ 354.218142][T23254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 354.218156][T23254] Call Trace: [ 354.218163][T23254] [ 354.218172][T23254] dump_stack_lvl+0xf2/0x150 [ 354.218205][T23254] dump_stack+0x15/0x1a [ 354.218243][T23254] should_fail_ex+0x24a/0x260 [ 354.218285][T23254] should_failslab+0x8f/0xb0 [ 354.218317][T23254] kmem_cache_alloc_node_noprof+0x59/0x320 [ 354.218404][T23254] ? __alloc_skb+0x10b/0x310 [ 354.218457][T23254] __alloc_skb+0x10b/0x310 [ 354.218482][T23254] netlink_alloc_large_skb+0xad/0xe0 [ 354.218514][T23254] netlink_sendmsg+0x3b4/0x6e0 [ 354.218583][T23254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.218624][T23254] __sock_sendmsg+0x140/0x180 [ 354.218648][T23254] ____sys_sendmsg+0x312/0x410 [ 354.218680][T23254] __sys_sendmsg+0x19d/0x230 [ 354.218793][T23254] __x64_sys_sendmsg+0x46/0x50 [ 354.218826][T23254] x64_sys_call+0x2734/0x2dc0 [ 354.218932][T23254] do_syscall_64+0xc9/0x1c0 [ 354.218962][T23254] ? clear_bhb_loop+0x55/0xb0 [ 354.219063][T23254] ? clear_bhb_loop+0x55/0xb0 [ 354.219096][T23254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.219178][T23254] RIP: 0033:0x7f593c74cde9 [ 354.219197][T23254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.219219][T23254] RSP: 002b:00007f593adb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.219242][T23254] RAX: ffffffffffffffda RBX: 00007f593c965fa0 RCX: 00007f593c74cde9 [ 354.219331][T23254] RDX: 0000000020050800 RSI: 00004000000000c0 RDI: 0000000000000005 [ 354.219346][T23254] RBP: 00007f593adb1090 R08: 0000000000000000 R09: 0000000000000000 [ 354.219361][T23254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.219375][T23254] R13: 0000000000000000 R14: 00007f593c965fa0 R15: 00007ffd7e617fc8 [ 354.219394][T23254] [ 354.470263][T23258] loop6: detected capacity change from 0 to 2048 [ 354.494061][T23264] loop1: detected capacity change from 0 to 128 [ 354.517134][T23258] loop6: p1 < > p4 [ 354.522111][T23258] loop6: p4 size 8388608 extends beyond EOD, truncated [ 354.567395][ T29] kauditd_printk_skb: 1440 callbacks suppressed [ 354.567414][ T29] audit: type=1326 audit(1739299079.624:47879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 354.602747][ T29] audit: type=1326 audit(1739299079.624:47880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 354.627224][ T29] audit: type=1326 audit(1739299079.624:47881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 354.651169][ T29] audit: type=1326 audit(1739299079.624:47882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 354.675441][ T29] audit: type=1326 audit(1739299079.624:47883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 354.699055][ T29] audit: type=1326 audit(1739299079.624:47884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 354.723494][ T29] audit: type=1326 audit(1739299079.624:47885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 354.747241][ T29] audit: type=1326 audit(1739299079.624:47886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 354.771573][ T29] audit: type=1326 audit(1739299079.624:47887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 354.795208][ T29] audit: type=1326 audit(1739299079.654:47888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23255 comm="syz.0.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 354.888457][T23280] tipc: Started in network mode [ 354.893376][T23280] tipc: Node identity 1, cluster identity 4711 [ 354.899669][T23280] tipc: Node number set to 1 [ 354.907598][T23281] loop3: detected capacity change from 0 to 512 [ 354.914152][T23281] EXT4-fs: Ignoring removed orlov option [ 354.922679][T23281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.934749][T23281] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 354.947829][T23291] IPv6: Can't replace route, no match found [ 354.957302][T23281] EXT4-fs (loop3): orphan cleanup on readonly fs [ 354.972216][T23281] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7541: bg 0: block 248: padding at end of block bitmap is not set [ 354.991412][T23281] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.7541: Failed to acquire dquot type 1 [ 355.005966][T23281] EXT4-fs (loop3): 1 truncate cleaned up [ 355.029154][T23281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.091072][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.140638][T23306] program syz.0.7551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.271221][T23313] lo speed is unknown, defaulting to 1000 [ 355.994688][T23330] FAULT_INJECTION: forcing a failure. [ 355.994688][T23330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.008524][T23330] CPU: 0 UID: 0 PID: 23330 Comm: syz.3.7557 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 356.008562][T23330] Tainted: [W]=WARN [ 356.008570][T23330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 356.008635][T23330] Call Trace: [ 356.008643][T23330] [ 356.008653][T23330] dump_stack_lvl+0xf2/0x150 [ 356.008684][T23330] dump_stack+0x15/0x1a [ 356.008705][T23330] should_fail_ex+0x24a/0x260 [ 356.008835][T23330] should_fail+0xb/0x10 [ 356.008873][T23330] should_fail_usercopy+0x1a/0x20 [ 356.008967][T23330] _copy_from_user+0x1c/0xa0 [ 356.008995][T23330] copy_msghdr_from_user+0x54/0x2a0 [ 356.009051][T23330] ? __fget_files+0x17c/0x1c0 [ 356.009082][T23330] __sys_sendmsg+0x13e/0x230 [ 356.009126][T23330] __x64_sys_sendmsg+0x46/0x50 [ 356.009229][T23330] x64_sys_call+0x2734/0x2dc0 [ 356.009305][T23330] do_syscall_64+0xc9/0x1c0 [ 356.009335][T23330] ? clear_bhb_loop+0x55/0xb0 [ 356.009363][T23330] ? clear_bhb_loop+0x55/0xb0 [ 356.009392][T23330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.009468][T23330] RIP: 0033:0x7f98cd70cde9 [ 356.009485][T23330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.009503][T23330] RSP: 002b:00007f98cbd71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.009521][T23330] RAX: ffffffffffffffda RBX: 00007f98cd925fa0 RCX: 00007f98cd70cde9 [ 356.009532][T23330] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 356.009546][T23330] RBP: 00007f98cbd71090 R08: 0000000000000000 R09: 0000000000000000 [ 356.009560][T23330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.009647][T23330] R13: 0000000000000000 R14: 00007f98cd925fa0 R15: 00007fff612979e8 [ 356.009671][T23330] [ 356.249543][T23336] netlink: 'syz.1.7560': attribute type 27 has an invalid length. [ 356.257565][T23336] lo: left promiscuous mode [ 356.262121][T23336] lo: left allmulticast mode [ 356.320209][T23345] SELinux: policydb string does not match my string SE Linux [ 356.328463][T23345] SELinux: failed to load policy [ 356.470661][T23336] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.478213][T23336] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.513943][T23336] 0ªX¹¦À: left allmulticast mode [ 356.582379][T23336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.593767][T23336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.724749][T23336] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.734266][T23336] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.743317][T23336] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.752298][T23336] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.841669][T23336] bridge1: left promiscuous mode [ 356.847472][T23336] bridge1: left allmulticast mode [ 356.863522][T23381] lo speed is unknown, defaulting to 1000 [ 357.196448][T23399] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7577'. [ 357.238441][T23399] 1ªX¹¦À: renamed from 60ªX¹¦À [ 357.265707][T23399] net_ratelimit: 16 callbacks suppressed [ 357.265718][T23399] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 357.475516][T23427] loop3: detected capacity change from 0 to 128 [ 357.752071][T23449] loop3: detected capacity change from 0 to 128 [ 357.965091][T23461] program syz.3.7597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.334873][T23478] loop3: detected capacity change from 0 to 128 [ 358.374557][T23481] loop1: detected capacity change from 0 to 128 [ 358.382247][T23481] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 358.398277][T23481] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.411172][T23481] netlink: 'syz.1.7605': attribute type 79 has an invalid length. [ 358.477835][T23489] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.221565][T23521] loop1: detected capacity change from 0 to 128 [ 359.403580][T23528] loop1: detected capacity change from 0 to 2048 [ 359.436407][T23528] loop1: p1 < > p4 [ 359.440711][T23528] loop1: p4 size 8388608 extends beyond EOD, truncated [ 359.492575][T23532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 359.559814][T23542] loop1: detected capacity change from 0 to 128 [ 359.567335][T23542] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.584270][T23542] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.597445][T23542] netlink: 'syz.1.7632': attribute type 79 has an invalid length. [ 359.663585][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7635'. [ 359.717165][ T29] kauditd_printk_skb: 1105 callbacks suppressed [ 359.717184][ T29] audit: type=1326 audit(1739299084.774:48992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.747130][ T29] audit: type=1326 audit(1739299084.774:48993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.774965][T23555] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.777729][T23359] IPVS: starting estimator thread 0... [ 359.787760][ T29] audit: type=1326 audit(1739299084.834:48994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.811775][ T29] audit: type=1326 audit(1739299084.834:48995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.827696][T23561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 359.835892][ T29] audit: type=1326 audit(1739299084.834:48996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.853103][T23562] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.868960][ T29] audit: type=1326 audit(1739299084.834:48997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.868996][ T29] audit: type=1326 audit(1739299084.834:48998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.869128][ T29] audit: type=1326 audit(1739299084.834:48999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.869160][ T29] audit: type=1326 audit(1739299084.834:49000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.869191][ T29] audit: type=1326 audit(1739299084.834:49001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23552 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 359.925891][T23558] IPVS: using max 2064 ests per chain, 103200 per kthread [ 359.958550][T23565] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.161106][T23584] vhci_hcd: invalid port number 0 [ 360.464590][T23591] lo speed is unknown, defaulting to 1000 [ 360.871621][T23602] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.274476][T23629] loop3: detected capacity change from 0 to 128 [ 361.282195][T23629] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.294403][T23629] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.307584][T23629] netlink: 'syz.3.7665': attribute type 79 has an invalid length. [ 361.380047][T23631] lo speed is unknown, defaulting to 1000 [ 361.873380][T23643] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.031800][T23652] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 362.208845][T23665] netlink: 'syz.3.7677': attribute type 7 has an invalid length. [ 362.242999][T23669] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.291153][T23670] lo speed is unknown, defaulting to 1000 [ 362.483453][T23677] loop6: detected capacity change from 0 to 128 [ 362.602597][T23681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 362.665434][T23677] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 362.678993][T23677] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 362.784842][T23688] loop0: detected capacity change from 0 to 128 [ 362.799729][T23688] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.814526][T23688] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.841213][T23688] netlink: 'syz.0.7684': attribute type 79 has an invalid length. [ 362.861539][T23695] program syz.6.7688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.988628][T23704] loop1: detected capacity change from 0 to 2048 [ 363.026275][T23704] loop1: p1 < > p4 [ 363.030698][T23704] loop1: p4 size 8388608 extends beyond EOD, truncated [ 363.093498][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7694'. [ 363.106790][T23712] SET target dimension over the limit! [ 363.152806][T23710] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 363.855100][T23743] netlink: 'syz.2.7709': attribute type 79 has an invalid length. [ 364.057360][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7712'. [ 364.087426][T23750] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.191262][T23760] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 364.294147][T23768] loop1: detected capacity change from 0 to 128 [ 364.545205][T23786] 9pnet_fd: Insufficient options for proto=fd [ 364.697529][T23796] loop3: detected capacity change from 0 to 512 [ 364.705579][T23792] FAULT_INJECTION: forcing a failure. [ 364.705579][T23792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.719793][T23792] CPU: 0 UID: 0 PID: 23792 Comm: syz.1.7731 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 364.719839][T23792] Tainted: [W]=WARN [ 364.719847][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 364.719863][T23792] Call Trace: [ 364.719871][T23792] [ 364.719880][T23792] dump_stack_lvl+0xf2/0x150 [ 364.719914][T23792] dump_stack+0x15/0x1a [ 364.719939][T23792] should_fail_ex+0x24a/0x260 [ 364.719990][T23792] should_fail_alloc_page+0xfd/0x110 [ 364.720023][T23792] __alloc_frozen_pages_noprof+0x109/0x340 [ 364.720057][T23792] alloc_pages_mpol+0xb4/0x260 [ 364.720101][T23792] alloc_pages_noprof+0xe8/0x130 [ 364.720168][T23792] pte_alloc_one+0x31/0x110 [ 364.720194][T23792] __pte_alloc+0x33/0x2a0 [ 364.720224][T23792] handle_mm_fault+0x1b4a/0x2ac0 [ 364.720273][T23792] exc_page_fault+0x296/0x650 [ 364.720299][T23792] asm_exc_page_fault+0x26/0x30 [ 364.720429][T23792] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 364.720489][T23792] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 364.720511][T23792] RSP: 0018:ffffc900066d7c78 EFLAGS: 00050206 [ 364.720529][T23792] RAX: ffff88814fcebc08 RBX: 0000400000000046 RCX: 0000000000000046 [ 364.720560][T23792] RDX: 0000000000000000 RSI: ffff888108635800 RDI: 0000400000000000 [ 364.720574][T23792] RBP: ffffc900066d7e00 R08: 0000000000000000 R09: 0000000000000000 [ 364.720588][T23792] R10: 0001888108635800 R11: 0001888108635845 R12: 0000000000000046 [ 364.720603][T23792] R13: 00007ffffffff000 R14: 0000400000000000 R15: ffff888108635800 [ 364.720640][T23792] _copy_to_user+0x7c/0xa0 [ 364.720670][T23792] syslog_print_all+0x406/0x5c0 [ 364.720722][T23792] ? selinux_syslog+0xec/0x100 [ 364.720760][T23792] do_syslog+0x431/0x7f0 [ 364.720847][T23792] ? __bpf_trace_sys_enter+0x10/0x30 [ 364.720874][T23792] ? trace_sys_enter+0xcd/0x110 [ 364.720903][T23792] __x64_sys_syslog+0x43/0x50 [ 364.720941][T23792] x64_sys_call+0x29be/0x2dc0 [ 364.721048][T23792] do_syscall_64+0xc9/0x1c0 [ 364.721078][T23792] ? clear_bhb_loop+0x55/0xb0 [ 364.721111][T23792] ? clear_bhb_loop+0x55/0xb0 [ 364.721199][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.721233][T23792] RIP: 0033:0x7f20b6eccde9 [ 364.721271][T23792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.721357][T23792] RSP: 002b:00007f20b5537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 364.721375][T23792] RAX: ffffffffffffffda RBX: 00007f20b70e5fa0 RCX: 00007f20b6eccde9 [ 364.721387][T23792] RDX: 000000000000008c RSI: 0000400000000000 RDI: 0000000000000004 [ 364.721399][T23792] RBP: 00007f20b5537090 R08: 0000000000000000 R09: 0000000000000000 [ 364.721410][T23792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.721424][T23792] R13: 0000000000000001 R14: 00007f20b70e5fa0 R15: 00007fff0366ee18 [ 364.721446][T23792] [ 365.027135][ T29] kauditd_printk_skb: 1424 callbacks suppressed [ 365.027151][ T29] audit: type=1326 audit(1739299090.084:50426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 365.057833][ T29] audit: type=1326 audit(1739299090.084:50427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 365.081506][ T29] audit: type=1326 audit(1739299090.084:50428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 365.108679][ T29] audit: type=1326 audit(1739299090.144:50429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 365.132584][ T29] audit: type=1326 audit(1739299090.144:50430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 365.157141][ T29] audit: type=1326 audit(1739299090.144:50431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 365.181955][ T29] audit: type=1326 audit(1739299090.214:50432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 365.206269][ T29] audit: type=1326 audit(1739299090.214:50433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee05d18fb9 code=0x7ffc0000 [ 365.230122][ T29] audit: type=1326 audit(1739299090.214:50434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 365.254604][ T29] audit: type=1326 audit(1739299090.234:50435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.0.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee05d73da7 code=0x7ffc0000 [ 365.309083][T23796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.349409][T23796] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.414872][T23816] 9pnet_fd: Insufficient options for proto=fd [ 365.444338][T23796] FAULT_INJECTION: forcing a failure. [ 365.444338][T23796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 365.458525][T23796] CPU: 0 UID: 0 PID: 23796 Comm: syz.3.7733 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 365.458590][T23796] Tainted: [W]=WARN [ 365.458597][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.458610][T23796] Call Trace: [ 365.458617][T23796] [ 365.458624][T23796] dump_stack_lvl+0xf2/0x150 [ 365.458656][T23796] dump_stack+0x15/0x1a [ 365.458682][T23796] should_fail_ex+0x24a/0x260 [ 365.458735][T23796] should_fail_alloc_page+0xfd/0x110 [ 365.458766][T23796] alloc_pages_bulk_noprof+0xfd/0x570 [ 365.458800][T23796] copy_splice_read+0xe5/0x5b0 [ 365.458827][T23796] ? __kmalloc_noprof+0x284/0x3f0 [ 365.458905][T23796] ? alloc_pipe_info+0x1cb/0x360 [ 365.458933][T23796] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 365.458992][T23796] splice_direct_to_actor+0x28b/0x670 [ 365.459118][T23796] ? __pfx_direct_splice_actor+0x10/0x10 [ 365.459146][T23796] do_splice_direct+0xd7/0x150 [ 365.459167][T23796] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 365.459265][T23796] do_sendfile+0x398/0x660 [ 365.459320][T23796] __x64_sys_sendfile64+0x110/0x150 [ 365.459358][T23796] x64_sys_call+0xfbd/0x2dc0 [ 365.459390][T23796] do_syscall_64+0xc9/0x1c0 [ 365.459420][T23796] ? clear_bhb_loop+0x55/0xb0 [ 365.459484][T23796] ? clear_bhb_loop+0x55/0xb0 [ 365.459517][T23796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.459615][T23796] RIP: 0033:0x7f98cd70cde9 [ 365.459660][T23796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.459680][T23796] RSP: 002b:00007f98cbd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 365.459703][T23796] RAX: ffffffffffffffda RBX: 00007f98cd925fa0 RCX: 00007f98cd70cde9 [ 365.459718][T23796] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 365.459733][T23796] RBP: 00007f98cbd71090 R08: 0000000000000000 R09: 0000000000000000 [ 365.459748][T23796] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001 [ 365.459763][T23796] R13: 0000000000000000 R14: 00007f98cd925fa0 R15: 00007fff612979e8 [ 365.459807][T23796] [ 365.714454][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.730568][T23821] 9pnet_fd: Insufficient options for proto=fd [ 365.859277][T23842] loop0: detected capacity change from 0 to 2048 [ 365.906416][T23842] loop0: p1 < > p4 [ 365.912183][T23842] loop0: p4 size 8388608 extends beyond EOD, truncated [ 365.947395][T23849] loop3: detected capacity change from 0 to 512 [ 365.959104][T23849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.972834][T23849] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.990422][T23849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7756'. [ 366.041938][T19370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.264553][T23874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7767'. [ 366.304209][T23876] program syz.3.7768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.440163][T23853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7757'. [ 366.587173][T23891] 9pnet_fd: Insufficient options for proto=fd [ 366.629362][T23894] loop3: detected capacity change from 0 to 128 [ 366.789886][T23912] loop1: detected capacity change from 0 to 2048 [ 366.836891][T23912] loop1: p1 < > p4 [ 366.846594][T23912] loop1: p4 size 8388608 extends beyond EOD, truncated [ 366.901218][T23926] program syz.3.7790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.973644][T23933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7793'. [ 367.139265][T23941] loop3: detected capacity change from 0 to 128 [ 367.667424][T23961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 367.698685][T23964] loop6: detected capacity change from 0 to 736 [ 367.987721][T23990] program syz.1.7817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.122285][T23995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 368.153747][T23997] FAULT_INJECTION: forcing a failure. [ 368.153747][T23997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.167658][T23997] CPU: 0 UID: 0 PID: 23997 Comm: syz.0.7820 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 368.167712][T23997] Tainted: [W]=WARN [ 368.167720][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.167735][T23997] Call Trace: [ 368.167742][T23997] [ 368.167750][T23997] dump_stack_lvl+0xf2/0x150 [ 368.167778][T23997] dump_stack+0x15/0x1a [ 368.167921][T23997] should_fail_ex+0x24a/0x260 [ 368.167955][T23997] should_fail+0xb/0x10 [ 368.167983][T23997] should_fail_usercopy+0x1a/0x20 [ 368.168003][T23997] _copy_from_user+0x1c/0xa0 [ 368.168080][T23997] copy_msghdr_from_user+0x54/0x2a0 [ 368.168105][T23997] ? __fget_files+0x17c/0x1c0 [ 368.168142][T23997] __sys_recvmsg+0x140/0x260 [ 368.168186][T23997] __x64_sys_recvmsg+0x46/0x50 [ 368.168283][T23997] x64_sys_call+0xc64/0x2dc0 [ 368.168310][T23997] do_syscall_64+0xc9/0x1c0 [ 368.168349][T23997] ? clear_bhb_loop+0x55/0xb0 [ 368.168417][T23997] ? clear_bhb_loop+0x55/0xb0 [ 368.168489][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.168522][T23997] RIP: 0033:0x7fee05d7cde9 [ 368.168539][T23997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.168561][T23997] RSP: 002b:00007fee043e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 368.168579][T23997] RAX: ffffffffffffffda RBX: 00007fee05f95fa0 RCX: 00007fee05d7cde9 [ 368.168591][T23997] RDX: 0000000040000100 RSI: 0000400000000100 RDI: 0000000000000004 [ 368.168656][T23997] RBP: 00007fee043e7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.168667][T23997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.168678][T23997] R13: 0000000000000000 R14: 00007fee05f95fa0 R15: 00007ffd81896028 [ 368.168697][T23997] [ 368.505179][T24021] program syz.1.7831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.688107][T24036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7837'. [ 368.740942][T24042] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.758272][T24036] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.787731][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7844'. [ 368.841503][T24051] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.851563][T24055] loop1: detected capacity change from 0 to 736 [ 369.005331][T24069] program syz.0.7851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.261286][T24080] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.279594][T24074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7852'. [ 369.313180][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7857'. [ 369.347740][T24082] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.554456][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7864'. [ 369.601346][T24098] program syz.0.7865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.602110][T24095] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.773277][T24103] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.881276][T24107] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 369.998375][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7878'. [ 370.058753][T24129] 9pnet_fd: Insufficient options for proto=fd [ 370.061800][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 370.061872][ T29] audit: type=1326 audit(1739299095.114:51212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.120573][T24127] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.140879][ T29] audit: type=1326 audit(1739299095.154:51213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.164612][ T29] audit: type=1326 audit(1739299095.154:51214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.189254][ T29] audit: type=1326 audit(1739299095.154:51215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.212866][ T29] audit: type=1326 audit(1739299095.164:51216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.237322][ T29] audit: type=1326 audit(1739299095.164:51217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.261122][ T29] audit: type=1326 audit(1739299095.164:51218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.285642][ T29] audit: type=1326 audit(1739299095.164:51219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.310024][ T29] audit: type=1326 audit(1739299095.164:51220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.333729][ T29] audit: type=1326 audit(1739299095.164:51221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24126 comm="syz.0.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee05d7cde9 code=0x7ffc0000 [ 370.490755][T24149] loop0: detected capacity change from 0 to 128 [ 370.501776][T24149] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.514442][T24149] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.528215][T24149] netlink: 'syz.0.7888': attribute type 79 has an invalid length. [ 370.619490][T24157] loop6: detected capacity change from 0 to 128 [ 370.893730][T24164] 9pnet_fd: Insufficient options for proto=fd [ 370.962257][T24172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7898'. [ 371.003292][T24172] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.218455][T23378] ================================================================== [ 371.226619][T23378] BUG: KCSAN: data-race in p9_conn_cancel / p9_write_work [ 371.233853][T23378] [ 371.236236][T23378] write to 0xffff88810db66428 of 4 bytes by task 23357 on cpu 1: [ 371.243973][T23378] p9_conn_cancel+0x89/0x400 [ 371.248669][T23378] p9_poll_workfn+0x133/0x410 [ 371.253389][T23378] process_scheduled_works+0x483/0x9a0 [ 371.258857][T23378] worker_thread+0x51d/0x6f0 [ 371.263453][T23378] kthread+0x4ae/0x520 [ 371.267541][T23378] ret_from_fork+0x4b/0x60 [ 371.271978][T23378] ret_from_fork_asm+0x1a/0x30 [ 371.276784][T23378] [ 371.279120][T23378] read to 0xffff88810db66428 of 4 bytes by task 23378 on cpu 0: [ 371.286751][T23378] p9_write_work+0x26/0x750 [ 371.291279][T23378] process_scheduled_works+0x483/0x9a0 [ 371.296833][T23378] worker_thread+0x51d/0x6f0 [ 371.301436][T23378] kthread+0x4ae/0x520 [ 371.305548][T23378] ret_from_fork+0x4b/0x60 [ 371.310007][T23378] ret_from_fork_asm+0x1a/0x30 [ 371.314784][T23378] [ 371.317106][T23378] value changed: 0x00000000 -> 0xffffff98 [ 371.322825][T23378] [ 371.325149][T23378] Reported by Kernel Concurrency Sanitizer on: [ 371.331305][T23378] CPU: 0 UID: 0 PID: 23378 Comm: kworker/0:8 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 371.343641][T23378] Tainted: [W]=WARN [ 371.347444][T23378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 371.357507][T23378] Workqueue: events p9_write_work [ 371.362554][T23378] ==================================================================