last executing test programs: 28.704344722s ago: executing program 4 (id=834): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) 28.624446572s ago: executing program 4 (id=838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='bcache_write\x00', r0}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000", @ANYBLOB, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000240)={'netdevsim0\x00', @ifru_ivalue=0x30b}) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f00000000c0)=@usbdevfs_driver={0x1, 0x7f, 0x0}) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 27.754526618s ago: executing program 4 (id=855): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0xfffffffffffffda7) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)="856175ac90bf", 0x6}, {0x0}], 0x2}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)) 27.709103628s ago: executing program 4 (id=858): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000540)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xe, 0x3a, '$', 0x3a, '\x00', 0x3a, '.'}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = gettid() rt_sigtimedwait(&(0x7f0000000200)={[0x3fe]}, 0x0, 0x0, 0x8) tkill(r3, 0x7) fremovexattr(0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7fff, 0x400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18011d00a36d000000000000e3000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000340)={0x0}) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x5e20, 0x0, @loopback}, 0x1c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4800, 0x128) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c00024000000000000078260c0002400005"], 0x140}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRES16=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r12}, 0x10) unshare(0x4000600) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 27.489231947s ago: executing program 4 (id=867): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f0000000400000008000000b263000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008000000200"/28], 0x48) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000340)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@dioread_lock}, {@discard}, {@grpjquota, 0x22}, {@errors_continue}, {@delalloc}, {@noload}, {@grpjquota}, {@prjquota}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000001080)="$eJzs3MuPFEUYAPCvZ1+A4K6IDxB0FY3EB8suDzl4wWjiQRMTPWA8rctCkME17JoIIYoe8GhI9GwMJxP/Ai/ixagnE696NybEcBG92KZnupdh6Rl22Hmg8/sls1M1VbNV33TXTHX19AQwsCazP0nExoj4JSLG69nrK0zW765eOTv315Wzc0mk6at/JLV6f145O1dULZ53Rz2Tpi3aPf9GxGy1On8qz08tnXxnavH0maePn5w9Nn9s/u2Zgwf37d0xemBmf0fi3JT1ddv7C9u3vvj6hZfnDl9484evsv5uzMsb4+iUyfqrW+qxTjfWZ5sa0slwHztCW4YiIttcI7XxPx5DsX65bDxe+KivnQO6Kk0r6Vjz4nNp5lpl4H8laWtYX+1eR4AeKz7as+Pf4tb9Wcft4/KhWF7HuJrf6iXDUcnrjOTHSN0wGRGHz/39eXaLLq1DAAA0unQoIp4qm/9V4t6Genfm54YmIuKuiNgcEXdHxJaIuCeiVve+iLi/zfZXniG5cf6TjtfvF9sPbhWy+d+z+bmt6+d/xewvJoby3KZa/CPJ0ePV+T0xXHtNdsXIWJafbtHGt8///Emzsob5X5LdZ+0Xc8G8H78Pr1igOzK7NLuWmBtd/jBi23BZ/MnynDebH2+NiG232MbxJ77c3qyscf5bHn8LHZiUp19EPF7f/udiRfyFpOn5yelnDszsn1oX1fk9U/W9osyPP51/pVn7bcVf2yU7eyRy+VIaG0r3/+X4J5J1EYunz5yona+9hWF4/tePmx7T3Dz+8v1/NHmtlh7NH3tvdmnp1HTEaPLSjY/PXHtukS/qZ/v/rp3l439zXHslHoiIbCfeEREPRsRDed8fjohHImJnvWrpxvn+uUffaj/+FqvyHZTFf+Rm2z8at3/7iaET333dfvyFbPvvq6V25Y+s5v2vVb/G1rQ3AwAAwH9PpfYd+KSyezldqezeXf8O/5bYUKkuLC49eXTh3WI9ZSJGKsVK13jDeuh0vjZc5GdW5Pfm68afFg3PLVSP9C9sIL9Wp2z8Z34b6nfvgK5reUrpYu/6AfSe6zVhcBn/MLiMfxhcxj8MrrLx/0Ef+gH03k0+/9f3qh9A75n/w2BaZ/zDQDP+YSA1vUi+sqZL/iX6lPhmdG2/1bD6RFRuk5D7lkjTf9IscfGzzvzDkSgtGm75YxYdSIyVFvX7nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g0AAP//IpvanA==") r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x2, 0x4, 0x2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8020, 0x10, 0x101, 0x401}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0x8}]}) getitimer(0x2, &(0x7f0000000080)) getsockopt(r7, 0xdc4, 0x4f5e, &(0x7f0000000ac0)=""/245, &(0x7f0000000540)=0xf5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 27.197097006s ago: executing program 4 (id=871): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) clock_settime(0x77e3e42484eef85b, &(0x7f0000000080)={0x77359400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xf2d5, 0x0, 0x9, 0x3, 0xe76a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 27.173825096s ago: executing program 32 (id=871): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) clock_settime(0x77e3e42484eef85b, &(0x7f0000000080)={0x77359400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xf2d5, 0x0, 0x9, 0x3, 0xe76a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.267864149s ago: executing program 2 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) signalfd4(r0, &(0x7f0000000080)={[0x4a]}, 0x8, 0x80800) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000840), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 2.207055249s ago: executing program 3 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_setup(0xc3c, &(0x7f0000000300)={0x0, 0x1962, 0x20, 0x2, 0x2d1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000380), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2.133451088s ago: executing program 5 (id=1259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_setup(0xc3c, &(0x7f0000000300)={0x0, 0x1962, 0x20, 0x2, 0x2d1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000380), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2.075388878s ago: executing program 2 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) (fail_nth: 3) 1.948511338s ago: executing program 3 (id=1262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000340)="08bf203c6d66c7bccd026b0dbaa9052e4df65a76e0a84a46b5679ea9e618bcfd4acb63fc4699e2bfc567257377c30e426ace4b2aa31513cfa32de96de32d3e07ac409919ed7b52e9f2", 0x49}, {&(0x7f00000003c0)="d6ce890462af0aa7d1aa134728796cb00f5246b6f9c676d563a24aadedb046624255859353d030bd528ed9294682d35ec49ba8824369e46721d6cb03c886df55210b65b88baf327a9ad894eb6ae59fadcd3b3304ba2e7dc4e1296a3b60d18d0bb061fe0212e7149c7236b4b30a9a4ca7fd7ea1e091547783e4e9436554d07758eb4d56e6824ddb7213ef9c3fb31f5a1995588be82803d28b592dbab1ab9462169cf4d12f45dc7e2aebb80e701c096a34ad29e274127efde797e2fbc1ae48b07d40a9072522c0503fbabf3622197d17e51db25dbefcf5dd5cc00bd2be5b98d8138e4fcd", 0xe3}, {&(0x7f0000000180)="50e184898caa464bd1b1b431dc642d03e7f4cdccdf9f5d191e3daff6d88caac92997b81208a532d95d53cfdb2cf7dfae808acf2f2ffa6672ca1f1a5dda54c219dd706f01304d1c23d74c502c29486714100e3e73ccad194506b1012f05aa150b7985b3a5327c82c27e281b4ed52da0be31875bd65b42e225", 0x78}, {&(0x7f0000000500)="92f94b31aaeabb736ce27cd3fc40b5b0be47d843c8d0857751862577725ab0d47e6190596a38df1482f9d71a7892093ed4bf78da94e912a49f1dd94dff1f02b74e5e7063bc3e5f5accb49523acfd7aeec684e858da6b10dbca5213b1ffb31389654416daa3170c503612a6a7c22fa3413fd2422812e6bf687f5565fea712a8355dfa76c2b3b3e8eb3bbff248224f30dcb721056a86f1e9582e6f9937e5a5fae7185b72ef8e78745aabd5d20f6cf7520e026a85762e31b09b2e848a92d6", 0xbd}, {&(0x7f00000005c0)="4d0dc480f4bd1b7fb74a212db4273a24cd31f9e7bdf4e66aab0bc18239e551b8238f53eabadb70cdacfa357c2d0deec828d1c645001dbc79c638751920a554f6a45338dcaa6602326f1d83bb4fd52cc804", 0x51}, {&(0x7f0000000240)}, {&(0x7f0000000ac0)="46907e5caefda7b0912b46d66b5126fbf5939c67771f1b1bf19725558f0484f9ae05bf088558c0a801c045227a953e0d16a5ec6b87ab38ec25aee667e1e8b1dda1679f8ba2a2195223ca8d6df0ec760f57566c841ac0ea38fb16288d46c76dec70d1519e07aabb676cff0b09b95d517e265175a5ba05c8b589f111f872379f7970f655520c53eb9a839587bd57d2afa83cac4b574f9a6abce4a1b47b8f6f97d5cf816b6a4e7674742f229b32e75d353531626984f6866ef08aa2590a0cef18ef4f8e0c35f30466b0af357ebaaeb982c496e0fd9311affcd34e512716b0", 0xdd}], 0x7}}], 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd00383a00fe8000000000000000000000000000caffecff0000000000000000000000000102009078000000006001b02b00006c0000000000000000000000000000000001fe8000000000000000000000000000aa000004000000000000000000"], 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x40044) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x9, 0x3, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x8000, 0x5, 0xa}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000050}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900cfd42f488b76a1b700000abef900", @ANYRES32, @ANYBLOB="00000000080002000000000014"], 0x38}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000080)) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) 1.879012827s ago: executing program 1 (id=1263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000400000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r7, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRES32=r1], 0x48) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 1.859052757s ago: executing program 5 (id=1265): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)) 1.769373267s ago: executing program 2 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="a2df5f70bf750b4ff051c8762941239e5f6678170dd470de64af634f2082f7617a2c55f656d75e4f027ec2c9585ec11a68a207592246a617089ec9540683d5e05aa379b086a7", 0x46}, {&(0x7f0000000500)}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7e3f7731bfbfc5af583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92c6be007f8aa026ce147dfd51281dba68af9b738f0a097f69b277ef9a9bd369a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13aa12b581b2b23e80fb7a1eca9816df0137b589441fca8b569993caed53c6d9deae218"], 0x1, 0x253, &(0x7f00000004c0)="$eJzs3c9LVFEUAOCjM/5qMxJBEEEDEbQaVGhvRIEkFckQRkhjjiGOCAlCLdRWQas2LVu6M4JatKv/IWjTJtpEy9y1CF/ok3HMMTVyJpzv27zDu+fcd++V956zmDt3T89MT8zOTa6ufo3u7rbIDt5fS5K26I32yERqKQCAo+RHksT3JNXssQAAjeH9DwCtZ6/3f0d6uNHgYQEAh+jvP/8/H333uVQevLCP1KSrGn4aO/gYAYB/a2T09tW19+d6huLNs4iZJ/PF+WJ6TNsvTsZUVKIcfZGLnxFJVRpfGRq+3Jdf1xNRnFncrF+cL2a21/dHLnojbl3bWd+fT22v74hjtfUDkYsT9a8/ULe+M86frakvRC4+3IvZqMTE+r8kNfUL/fn8pevDv9V3beTFcqapfx8AAAAAAAAAAAAAAAAAAAAAAI6mQr6qt97+PYXCbu1p/f73B9ran+fpRn02TmXjcXNnDwAAAAAAAAAAAAAAAAAAAP+HuYePpkuVSvlBNRi/OXV8+5m9grY6TZnN/g/ST8sE6wtziJc4ExGHPYvXK+WPy2N3Rpq/mA0M6q/qq6YPbPwPOe0RsRGcfDFYervw5dvOnFiquZez6X1bqqTHztqHRb7BDycAAAAAAAAAAAAAAAAAAGgxW18D3i0jaeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJtn7//8BBZ/XMSk/a2S7JaePLps4TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDW9isAAP//e+Wozg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bdb3faf8bfdf2509000000080001000100a6cc2f884ed02ad02b70ff38a400000500070011000000050008"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, 0x0, 0x4000000) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r9) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x40000}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) socket$netlink(0x10, 0x3, 0x0) 1.737492907s ago: executing program 5 (id=1268): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000"], 0xc0}}, 0x0) (async) io_uring_enter(r2, 0x5731, 0x4, 0x0, 0x0, 0x0) (async, rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 1.734674897s ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mq_open(&(0x7f0000000180)='[.@[:\x00', 0x40, 0x0, &(0x7f00000001c0)={0xff, 0xe4fa, 0x6, 0x2c1}) r2 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote, r3}, 0x14) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0", @ANYRESOCT=r2, @ANYRESHEX=r2], 0xffd8}}, 0x4000000) 1.621288076s ago: executing program 1 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) signalfd4(r0, &(0x7f0000000080)={[0x4a]}, 0x8, 0x80800) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000840), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1.482131326s ago: executing program 2 (id=1272): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.451456295s ago: executing program 1 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) 1.404677776s ago: executing program 1 (id=1274): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) 1.168885795s ago: executing program 0 (id=1276): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) 936.992114ms ago: executing program 0 (id=1277): r0 = syz_io_uring_setup(0x285d, &(0x7f0000000480)={0x0, 0xb416, 0x0, 0x2, 0x5}, &(0x7f0000000340), &(0x7f00000002c0)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000380), 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x9) fremovexattr(r2, &(0x7f0000000ac0)=@known='system.sockprotoname\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r6, 0x0, 0x1}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r11, &(0x7f0000000180)={'system_u:object_r:tmpfs_t:s0', 0x20, 'system_u:object_r:hwdata_t:s0', 0x20, 0x6, 0x20, 'unconfined\x00'}, 0x5b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xc, 0x6, 0x0, @empty=0x300, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 854.718323ms ago: executing program 2 (id=1278): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000480)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442f8db0049d9049", 0x1f}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRESHEX=r4], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0xf001, 0x2}]}) chdir(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000640)=""/237}, {&(0x7f0000000300)=""/86}, {&(0x7f00000003c0)=""/250}, {&(0x7f0000000e00)=""/220}], 0x42}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 825.302173ms ago: executing program 0 (id=1279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000400000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r7, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRES32=r1], 0x48) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 778.440593ms ago: executing program 3 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 725.456413ms ago: executing program 5 (id=1281): syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz8FtwjAUBuDfTZomp47QLlGpx3YIxBpcOKLAKFwZESEFWSSMABy+T7Lfs/378MJTDSX5atrfko/73d92bvZN+vcuya5udaX7HodMx82SfZvrZylzd/hPu07yc66ny9TXMtXP4+29ZIk2q9MDRgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl3cNAAD//0pfDG4=") 701.270893ms ago: executing program 0 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="a2df5f70bf750b4ff051c8762941239e5f6678170dd470de64af634f2082f7617a2c55f656d75e4f027ec2c9585ec11a68a207592246a617089ec9540683d5e05aa379b086a7", 0x46}, {&(0x7f0000000500)}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7e3f7731bfbfc5af583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92c6be007f8aa026ce147dfd51281dba68af9b738f0a097f69b277ef9a9bd369a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13aa12b581b2b23e80fb7a1eca9816df0137b589441fca8b569993caed53c6d9deae218"], 0x1, 0x253, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bdb3faf8bfdf2509000000080001000100a6cc2f884ed02ad02b70ff38a400000500070011000000050008"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, 0x0, 0x4000000) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r9) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x40000}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) truncate(&(0x7f0000000040)='./file1\x00', 0x7fff) socket$netlink(0x10, 0x3, 0x0) 686.768763ms ago: executing program 3 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) signalfd4(r0, &(0x7f0000000080)={[0x4a]}, 0x8, 0x80800) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000840), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 655.490293ms ago: executing program 3 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) 590.671712ms ago: executing program 3 (id=1285): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = io_uring_setup(0x47ba, &(0x7f00000000c0)={0x0, 0xaa8b, 0x2000, 0x0, 0x2b4, 0x0, r0}) io_uring_enter(r2, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0xe, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) finit_module(r10, 0x0, 0x2000) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() 577.466072ms ago: executing program 0 (id=1286): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x3e, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x200, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a004e20000001fffe80000000000000000000000000002cfbffffff000000000200010000000000000000020000000005000500000000000a004e240000000c00000000000000000000ffffe0000001030000000000000001001400"], 0x78}, 0x1, 0x7}, 0x0) 557.583682ms ago: executing program 5 (id=1287): syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz8FtwjAUBuDfTZomp47QLlGpx3YIxBpcOKLAKFwZESEFWSSMABy+T7Lfs/378MJTDSX5atrfko/73d92bvZN+vcuya5udaX7HodMx82SfZvrZylzd/hPu07yc66ny9TXMtXP4+29ZIk2q9MDRgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAl3cNAAD//0pfDG4=") (fail_nth: 3) 378.957502ms ago: executing program 1 (id=1288): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 157.24795ms ago: executing program 5 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000440)={'syz', 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4454, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) inotify_init1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x6}}}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x20, &(0x7f00000003c0)={&(0x7f0000000480)=""/161, 0xa1, 0x0, &(0x7f0000000640)=""/138, 0x8a}}, 0x10) r5 = request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='syz', r1) keyctl$instantiate(0xc, r5, &(0x7f0000000980)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.\x9e\x83\''}, 0x1c, 0xfffffffffffffff9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/136, 0x88, 0x9, &(0x7f0000000880)={0x0, 0x989680}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x60}, {0x6, 0x0, 0x0, 0x2}]}) 127.89738ms ago: executing program 2 (id=1290): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000003, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x4208, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0xff0f}], 0x1, 0x0, 0x0, 0x500}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000485c001b838d620080ff0000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='neigh_create\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10, 0x0, 0x7}, 0x18) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r9, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x0, 0x10000}) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x1ff) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0242891a60f2ddca86bd7000fcdbdf25"], 0x10}}, 0x40) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) 0s ago: executing program 0 (id=1291): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r4) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3586dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50006e3b37f1fd00"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000c1861ba608c4b895c9b061ddbd05dc9a6ab3a1590b5aa676c90005e5ea440374620235abef80dc5d464ab8d1d835cc96db6e32921ac6be1987e50218e9495ad55faa3601b5260ea5a632c03654efe15b11b796b06858b540c02691f50904aef1cb4e1fee606774d77261736ed015dca637d76f0bb6ec989e21ce698bd3bae522a73d7d75838d70deef8081441e1b7c56767517943344dbb40d7cae6b67e6715063a1ecb1bfd78846e29a1239620cca84ef6ec72bc8f81ccf17e20f6df2cf95de2e6f04761c018d374c8b378a22a4052075b9860c7f9ed0907de02a8fb25a4cd6a19f69b9d64d1cda1e832d700342f159ed31a5d829c98fe5dbb01e056db160072e1cdf3a6cefdb29d9e79eca55691a402d57db7675de417063f78e1153d14326885eff8628a4c7785669597ff2f9581c727051edc7a7dab968d047363f8d5574576a82350644733df4e4fba1942dd0329e"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000000)=[{{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r10}, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b001fab97576512ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a1754f1adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) kernel console output (not intermixed with test programs): 77.818033][ T5871] ? __pfx_udplite_getfrag+0x10/0x10 [ 77.824330][ T2998] loop1: p1 p2 p3 [ 77.829437][ T5871] udpv6_sendmsg+0x772/0x1590 [ 77.829474][ T5871] ? _raw_spin_unlock_bh+0x36/0x40 [ 77.829500][ T5871] ? udp_lib_get_port+0xd16/0xdc0 [ 77.848075][ T5871] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 77.853285][ T5871] inet6_sendmsg+0xaf/0xd0 [ 77.857889][ T5871] __sock_sendmsg+0x8b/0x180 [ 77.862625][ T5871] ____sys_sendmsg+0x312/0x410 [ 77.867539][ T5871] __sys_sendmsg+0x19d/0x230 [ 77.872175][ T5871] __x64_sys_sendmsg+0x46/0x50 [ 77.877011][ T5871] x64_sys_call+0x2734/0x2dc0 [ 77.881800][ T5871] do_syscall_64+0xc9/0x1c0 [ 77.886375][ T5871] ? clear_bhb_loop+0x55/0xb0 [ 77.891111][ T5871] ? clear_bhb_loop+0x55/0xb0 [ 77.895861][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.901841][ T5871] RIP: 0033:0x7fd68a6d5d29 [ 77.906265][ T5871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.925894][ T5871] RSP: 002b:00007fd688d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.934381][ T5871] RAX: ffffffffffffffda RBX: 00007fd68a8c5fa0 RCX: 00007fd68a6d5d29 [ 77.942371][ T5871] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 77.950343][ T5871] RBP: 00007fd688d47090 R08: 0000000000000000 R09: 0000000000000000 [ 77.958324][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.966300][ T5871] R13: 0000000000000000 R14: 00007fd68a8c5fa0 R15: 00007ffe33f280a8 [ 77.974284][ T5871] [ 77.987010][ T29] kauditd_printk_skb: 817 callbacks suppressed [ 77.987026][ T29] audit: type=1400 audit(1734497387.955:4943): avc: denied { read } for pid=5864 comm="syz.1.893" name="loop1p1" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.015995][ T29] audit: type=1400 audit(1734497387.955:4944): avc: denied { open } for pid=5864 comm="syz.1.893" path="/dev/loop1p1" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.062128][ T5801] syz.0.884 (5801) used greatest stack depth: 6360 bytes left [ 78.075278][ T5871] loop2: detected capacity change from 0 to 1024 [ 78.125450][ T5877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5877 comm=syz.0.897 [ 78.138743][ T29] audit: type=1400 audit(1734497388.095:4945): avc: denied { create } for pid=5875 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.158904][ T29] audit: type=1400 audit(1734497388.095:4946): avc: denied { write } for pid=5875 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.178965][ T29] audit: type=1400 audit(1734497388.095:4947): avc: denied { nlmsg_write } for pid=5875 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.182418][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.275581][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.287084][ T5871] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.335053][ T5751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.345782][ T29] audit: type=1400 audit(1734497388.305:4948): avc: denied { create } for pid=5878 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.365600][ T29] audit: type=1400 audit(1734497388.305:4949): avc: denied { create } for pid=5878 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.385475][ T29] audit: type=1400 audit(1734497388.305:4950): avc: denied { bind } for pid=5878 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.405359][ T29] audit: type=1400 audit(1734497388.305:4951): avc: denied { connect } for pid=5878 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.425400][ T29] audit: type=1400 audit(1734497388.305:4952): avc: denied { ioctl } for pid=5878 comm="syz.3.896" path="socket:[13288]" dev="sockfs" ino=13288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.458990][ T5879] vlan2: entered allmulticast mode [ 78.459548][ T5891] xt_hashlimit: size too large, truncated to 1048576 [ 78.558259][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.615848][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.665727][ T5915] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 78.698360][ T5915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.712202][ T5915] gretap1: entered promiscuous mode [ 78.720161][ T5915] bond1: (slave gretap1): making interface the new active one [ 78.728571][ T5915] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 78.884742][ T5751] veth0_vlan: entered promiscuous mode [ 78.895653][ T5751] veth1_vlan: entered promiscuous mode [ 78.904722][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.912758][ T5751] veth0_macvtap: entered promiscuous mode [ 78.938401][ T5751] veth1_macvtap: entered promiscuous mode [ 78.980757][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.000632][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.041343][ T5751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050136][ T5751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.059041][ T5751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067841][ T5751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.191599][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.217869][ T5974] capability: warning: `syz.1.913' uses deprecated v2 capabilities in a way that may be insecure [ 79.220625][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.269788][ T5974] loop1: detected capacity change from 0 to 512 [ 79.305448][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.309911][ T5974] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.335474][ T5974] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.342761][ T5974] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.473069][ T5974] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 79.540847][ T5974] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #16: comm syz.1.913: corrupted xattr block 31: invalid header [ 79.581831][ T5974] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 79.609104][ T5974] EXT4-fs (loop1): 1 orphan inode deleted [ 79.636731][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.772277][ T5993] loop5: detected capacity change from 0 to 512 [ 79.811755][ T5993] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.893934][ T5995] bridge1: entered promiscuous mode [ 79.899237][ T5995] bridge1: entered allmulticast mode [ 79.920138][ T5993] EXT4-fs (loop5): 1 truncate cleaned up [ 79.932165][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.956511][ T5993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.985679][ T5995] team0: Port device bridge1 added [ 80.037132][ T6000] No such timeout policy "syz1" [ 80.116648][ T6006] loop3: detected capacity change from 0 to 512 [ 80.155767][ T5751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.201271][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.215029][ T6006] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.264743][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.301556][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.327886][ T6032] loop2: detected capacity change from 0 to 1024 [ 80.345221][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.363419][ T6032] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 80.376483][ T6032] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.387320][ T6006] hub 9-0:1.0: USB hub found [ 80.389351][ T6050] program syz.1.932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.392177][ T6006] hub 9-0:1.0: 8 ports detected [ 80.406337][ T6050] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 80.418964][ T6032] EXT4-fs (loop2): invalid journal inode [ 80.429014][ T6032] EXT4-fs (loop2): can't get journal size [ 80.440988][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.456636][ T6053] netlink: 'syz.5.934': attribute type 13 has an invalid length. [ 80.464481][ T6053] netlink: 152 bytes leftover after parsing attributes in process `syz.5.934'. [ 80.475001][ T6053] syz_tun: refused to change device tx_queue_len [ 80.481428][ T6053] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 80.546093][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.692059][ T6073] loop3: detected capacity change from 0 to 512 [ 80.722944][ T6073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.783351][ T6073] EXT4-fs (loop3): 1 truncate cleaned up [ 80.801995][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.869438][ T6090] FAULT_INJECTION: forcing a failure. [ 80.869438][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 80.882129][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.1.942 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 80.892739][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 80.902843][ T6090] Call Trace: [ 80.906298][ T6090] [ 80.909290][ T6090] dump_stack_lvl+0xf2/0x150 [ 80.913981][ T6090] dump_stack+0x15/0x1a [ 80.918207][ T6090] should_fail_ex+0x223/0x230 [ 80.923010][ T6090] should_failslab+0x8f/0xb0 [ 80.927621][ T6090] kmem_cache_alloc_noprof+0x52/0x320 [ 80.933014][ T6090] ? alloc_empty_file+0xd0/0x200 [ 80.937958][ T6090] ? _raw_spin_unlock+0x26/0x50 [ 80.942883][ T6090] alloc_empty_file+0xd0/0x200 [ 80.947664][ T6090] alloc_file_pseudo+0xc3/0x140 [ 80.952641][ T6090] __shmem_file_setup+0x1bb/0x1f0 [ 80.957853][ T6090] shmem_file_setup+0x3b/0x50 [ 80.962541][ T6090] __se_sys_memfd_create+0x31d/0x5c0 [ 80.967843][ T6090] __x64_sys_memfd_create+0x31/0x40 [ 80.973128][ T6090] x64_sys_call+0x2d4c/0x2dc0 [ 80.977818][ T6090] do_syscall_64+0xc9/0x1c0 [ 80.982362][ T6090] ? clear_bhb_loop+0x55/0xb0 [ 80.987191][ T6090] ? clear_bhb_loop+0x55/0xb0 [ 80.991873][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.997856][ T6090] RIP: 0033:0x7fcfe3585d29 [ 81.002272][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.021959][ T6090] RSP: 002b:00007fcfe1bf6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 81.030497][ T6090] RAX: ffffffffffffffda RBX: 0000000000000460 RCX: 00007fcfe3585d29 [ 81.038482][ T6090] RDX: 00007fcfe1bf6ef0 RSI: 0000000000000000 RDI: 00007fcfe3602381 [ 81.046473][ T6090] RBP: 0000000020000200 R08: 00007fcfe1bf6bb7 R09: 00007fcfe1bf6e40 [ 81.054581][ T6090] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 81.062563][ T6090] R13: 00007fcfe1bf6ef0 R14: 00007fcfe1bf6eb0 R15: 0000000020000680 [ 81.070555][ T6090] [ 81.102631][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.112160][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.122460][ T6094] FAULT_INJECTION: forcing a failure. [ 81.122460][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.135738][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.0.943 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 81.146421][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 81.156566][ T6094] Call Trace: [ 81.159867][ T6094] [ 81.162820][ T6094] dump_stack_lvl+0xf2/0x150 [ 81.167475][ T6094] dump_stack+0x15/0x1a [ 81.171649][ T6094] should_fail_ex+0x223/0x230 [ 81.176339][ T6094] should_fail+0xb/0x10 [ 81.180502][ T6094] should_fail_usercopy+0x1a/0x20 [ 81.185557][ T6094] _copy_from_iter+0xd5/0xd00 [ 81.190252][ T6094] ? kmalloc_reserve+0x16e/0x190 [ 81.195288][ T6094] ? __build_skb_around+0x196/0x1f0 [ 81.200487][ T6094] ? __alloc_skb+0x21f/0x310 [ 81.205113][ T6094] ? __virt_addr_valid+0x1ed/0x250 [ 81.210237][ T6094] ? __check_object_size+0x364/0x520 [ 81.215620][ T6094] netlink_sendmsg+0x460/0x6e0 [ 81.220774][ T6094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.226202][ T6094] __sock_sendmsg+0x140/0x180 [ 81.230896][ T6094] ____sys_sendmsg+0x312/0x410 [ 81.235683][ T6094] __sys_sendmmsg+0x227/0x4b0 [ 81.240395][ T6094] __x64_sys_sendmmsg+0x57/0x70 [ 81.245253][ T6094] x64_sys_call+0x29aa/0x2dc0 [ 81.250001][ T6094] do_syscall_64+0xc9/0x1c0 [ 81.254536][ T6094] ? clear_bhb_loop+0x55/0xb0 [ 81.259228][ T6094] ? clear_bhb_loop+0x55/0xb0 [ 81.264408][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.270402][ T6094] RIP: 0033:0x7fc593b95d29 [ 81.274821][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.294549][ T6094] RSP: 002b:00007fc592207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.303035][ T6094] RAX: ffffffffffffffda RBX: 00007fc593d85fa0 RCX: 00007fc593b95d29 [ 81.311010][ T6094] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000005 [ 81.319093][ T6094] RBP: 00007fc592207090 R08: 0000000000000000 R09: 0000000000000000 [ 81.327067][ T6094] R10: 0000000000002400 R11: 0000000000000246 R12: 0000000000000001 [ 81.335067][ T6094] R13: 0000000000000000 R14: 00007fc593d85fa0 R15: 00007ffe33595028 [ 81.343053][ T6094] [ 81.350215][ T6097] loop1: detected capacity change from 0 to 128 [ 81.358120][ T6097] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.386912][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.396208][ T6097] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.406052][ T6101] FAULT_INJECTION: forcing a failure. [ 81.406052][ T6101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.419372][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.3.945 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 81.430064][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 81.440330][ T6101] Call Trace: [ 81.443627][ T6101] [ 81.446623][ T6101] dump_stack_lvl+0xf2/0x150 [ 81.447129][ T6108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.451241][ T6101] dump_stack+0x15/0x1a [ 81.459514][ T6108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.463461][ T6101] should_fail_ex+0x223/0x230 [ 81.476311][ T6101] should_fail+0xb/0x10 [ 81.480480][ T6101] should_fail_usercopy+0x1a/0x20 [ 81.485540][ T6101] _copy_from_user+0x1e/0xb0 [ 81.490191][ T6101] do_ipv6_getsockopt+0x12d/0x1430 [ 81.495393][ T6101] ? __rcu_read_unlock+0x4e/0x70 [ 81.500384][ T6101] ? avc_has_perm_noaudit+0x1cc/0x210 [ 81.505952][ T6101] ipv6_getsockopt+0x75/0x1e0 [ 81.510655][ T6101] tcp_getsockopt+0xaa/0xe0 [ 81.515269][ T6101] sock_common_getsockopt+0x5b/0x70 [ 81.520530][ T6101] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 81.526500][ T6101] do_sock_getsockopt+0x1ca/0x260 [ 81.531538][ T6101] __x64_sys_getsockopt+0x18c/0x200 [ 81.536774][ T6101] x64_sys_call+0x1288/0x2dc0 [ 81.541513][ T6101] do_syscall_64+0xc9/0x1c0 [ 81.546020][ T6101] ? clear_bhb_loop+0x55/0xb0 [ 81.550720][ T6101] ? clear_bhb_loop+0x55/0xb0 [ 81.555406][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.561319][ T6101] RIP: 0033:0x7fe057d75d29 [ 81.565790][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.585401][ T6101] RSP: 002b:00007fe0563e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 81.593892][ T6101] RAX: ffffffffffffffda RBX: 00007fe057f65fa0 RCX: 00007fe057d75d29 [ 81.601867][ T6101] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 81.609882][ T6101] RBP: 00007fe0563e1090 R08: 0000000020000300 R09: 0000000000000000 [ 81.617899][ T6101] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001 [ 81.626049][ T6101] R13: 0000000000000000 R14: 00007fe057f65fa0 R15: 00007fff286d4c88 [ 81.634048][ T6101] [ 81.654760][ T6108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.736068][ T6126] xt_hashlimit: size too large, truncated to 1048576 [ 81.792760][ T6128] loop1: detected capacity change from 0 to 8192 [ 82.342699][ T6123] net_ratelimit: 734 callbacks suppressed [ 82.342717][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.356715][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.427428][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.516867][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.526484][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.538175][ T6160] loop2: detected capacity change from 0 to 512 [ 82.544817][ T6160] EXT4-fs: Ignoring removed oldalloc option [ 82.572186][ T6160] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.955: corrupted in-inode xattr: invalid ea_ino [ 82.603956][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 82.611337][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.623521][ T6160] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 82.630436][ T6160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.676558][ T6168] loop1: detected capacity change from 0 to 1024 [ 82.716373][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.741864][ T6168] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.776940][ T6169] Illegal XDP return value 1153774122 on prog (id 628) dev N/A, expect packet loss! [ 82.854330][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.922066][ T6182] xt_hashlimit: size too large, truncated to 1048576 [ 82.923541][ T6179] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 82.977040][ T6185] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 82.984968][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.962'. [ 83.003708][ T6185] bridge0: port 3(ipvlan0) entered blocking state [ 83.010299][ T6185] bridge0: port 3(ipvlan0) entered disabled state [ 83.017611][ T6185] ipvlan0: entered allmulticast mode [ 83.022998][ T6185] veth0_vlan: entered allmulticast mode [ 83.026737][ T6190] FAULT_INJECTION: forcing a failure. [ 83.026737][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 83.029455][ T6185] ipvlan0: left allmulticast mode [ 83.041143][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.3.968 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 83.046214][ T6185] veth0_vlan: left allmulticast mode [ 83.056751][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 83.056841][ T6190] Call Trace: [ 83.063159][ T6185] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 83.072095][ T6190] [ 83.072107][ T6190] dump_stack_lvl+0xf2/0x150 [ 83.098601][ T6190] dump_stack+0x15/0x1a [ 83.102920][ T6190] should_fail_ex+0x223/0x230 [ 83.107630][ T6190] should_failslab+0x8f/0xb0 [ 83.112264][ T6190] kmem_cache_alloc_node_noprof+0x59/0x320 [ 83.118168][ T6190] ? __alloc_skb+0x10b/0x310 [ 83.122801][ T6190] __alloc_skb+0x10b/0x310 [ 83.127276][ T6190] netlink_alloc_large_skb+0xad/0xe0 [ 83.132591][ T6190] netlink_sendmsg+0x3b4/0x6e0 [ 83.137450][ T6190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.142854][ T6190] __sock_sendmsg+0x140/0x180 [ 83.147616][ T6190] ____sys_sendmsg+0x312/0x410 [ 83.152498][ T6190] __sys_sendmsg+0x19d/0x230 [ 83.157150][ T6190] __x64_sys_sendmsg+0x46/0x50 [ 83.161929][ T6190] x64_sys_call+0x2734/0x2dc0 [ 83.166712][ T6190] do_syscall_64+0xc9/0x1c0 [ 83.171246][ T6190] ? clear_bhb_loop+0x55/0xb0 [ 83.175997][ T6190] ? clear_bhb_loop+0x55/0xb0 [ 83.180693][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.186625][ T6190] RIP: 0033:0x7fe057d75d29 [ 83.187594][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 83.187610][ T29] audit: type=1400 audit(1734497393.165:5149): avc: denied { create } for pid=6194 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.191123][ T6190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.191147][ T6190] RSP: 002b:00007fe0563e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.245056][ T6190] RAX: ffffffffffffffda RBX: 00007fe057f65fa0 RCX: 00007fe057d75d29 [ 83.253127][ T6190] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 83.261101][ T6190] RBP: 00007fe0563e1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.269074][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.277047][ T6190] R13: 0000000000000000 R14: 00007fe057f65fa0 R15: 00007fff286d4c88 [ 83.285050][ T6190] [ 83.288629][ T29] audit: type=1400 audit(1734497393.265:5150): avc: denied { connect } for pid=6194 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.349576][ T29] audit: type=1326 audit(1734497393.325:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.414447][ T29] audit: type=1326 audit(1734497393.345:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.438014][ T29] audit: type=1326 audit(1734497393.345:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.461447][ T29] audit: type=1326 audit(1734497393.355:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.484941][ T29] audit: type=1326 audit(1734497393.355:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.508744][ T29] audit: type=1326 audit(1734497393.365:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.532136][ T29] audit: type=1326 audit(1734497393.365:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.555808][ T29] audit: type=1326 audit(1734497393.365:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 83.618917][ T6203] loop1: detected capacity change from 0 to 1024 [ 83.733022][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.733706][ T6197] loop2: detected capacity change from 0 to 256 [ 83.773810][ T6197] FAT-fs (loop2): bogus number of FAT sectors [ 83.779994][ T6197] FAT-fs (loop2): Can't find a valid FAT filesystem [ 83.790093][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.818951][ T6203] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.866058][ T6203] FAULT_INJECTION: forcing a failure. [ 83.866058][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 83.878817][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.1.973 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 83.889433][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 83.899501][ T6203] Call Trace: [ 83.902884][ T6203] [ 83.905832][ T6203] dump_stack_lvl+0xf2/0x150 [ 83.910512][ T6203] dump_stack+0x15/0x1a [ 83.914839][ T6203] should_fail_ex+0x223/0x230 [ 83.919603][ T6203] should_failslab+0x8f/0xb0 [ 83.924300][ T6203] kmem_cache_alloc_noprof+0x52/0x320 [ 83.929795][ T6203] ? __es_insert_extent+0x563/0xed0 [ 83.935095][ T6203] __es_insert_extent+0x563/0xed0 [ 83.940163][ T6203] ext4_es_insert_delayed_extent+0x312/0x8b0 [ 83.946343][ T6203] ext4_da_get_block_prep+0x79e/0xbb0 [ 83.951762][ T6203] ext4_block_write_begin+0x34f/0x9c0 [ 83.957180][ T6203] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 83.963114][ T6203] ext4_da_write_begin+0x318/0x540 [ 83.968257][ T6203] generic_perform_write+0x1a8/0x4a0 [ 83.973625][ T6203] ? __mark_inode_dirty+0x45e/0x7e0 [ 83.978906][ T6203] ext4_buffered_write_iter+0x1ea/0x370 [ 83.984495][ T6203] ext4_file_write_iter+0x383/0xf20 [ 83.989794][ T6203] ? 0xffffffff81000000 [ 83.994190][ T6203] ? selinux_file_permission+0x22a/0x360 [ 83.999852][ T6203] ? __rcu_read_unlock+0x4e/0x70 [ 84.004822][ T6203] ? avc_policy_seqno+0x15/0x20 [ 84.009707][ T6203] ? selinux_file_permission+0x22a/0x360 [ 84.015379][ T6203] vfs_write+0x77f/0x920 [ 84.019684][ T6203] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 84.025569][ T6203] __x64_sys_pwrite64+0xf6/0x150 [ 84.030620][ T6203] x64_sys_call+0xab0/0x2dc0 [ 84.035246][ T6203] do_syscall_64+0xc9/0x1c0 [ 84.039795][ T6203] ? clear_bhb_loop+0x55/0xb0 [ 84.044539][ T6203] ? clear_bhb_loop+0x55/0xb0 [ 84.049248][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.055324][ T6203] RIP: 0033:0x7fcfe3585d29 [ 84.059746][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.079374][ T6203] RSP: 002b:00007fcfe1bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 84.087970][ T6203] RAX: ffffffffffffffda RBX: 00007fcfe3775fa0 RCX: 00007fcfe3585d29 [ 84.095967][ T6203] RDX: 000000000000fdef RSI: 0000000020000140 RDI: 0000000000000008 [ 84.103950][ T6203] RBP: 00007fcfe1bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.112017][ T6203] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 84.120021][ T6203] R13: 0000000000000000 R14: 00007fcfe3775fa0 R15: 00007ffcfb664c88 [ 84.128102][ T6203] [ 84.134791][ T5881] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 84.164543][ T6225] FAULT_INJECTION: forcing a failure. [ 84.164543][ T6225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.177685][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz.5.977 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 84.188305][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 84.198385][ T6225] Call Trace: [ 84.201682][ T6225] [ 84.204730][ T6225] dump_stack_lvl+0xf2/0x150 [ 84.209391][ T6225] dump_stack+0x15/0x1a [ 84.213596][ T6225] should_fail_ex+0x223/0x230 [ 84.218380][ T6225] should_fail+0xb/0x10 [ 84.222630][ T6225] should_fail_usercopy+0x1a/0x20 [ 84.227755][ T6225] _copy_to_user+0x20/0xa0 [ 84.232281][ T6225] simple_read_from_buffer+0xa0/0x110 [ 84.237761][ T6225] proc_fail_nth_read+0xf9/0x140 [ 84.242770][ T6225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.248417][ T6225] vfs_read+0x1a2/0x700 [ 84.252669][ T6225] ? __rcu_read_unlock+0x4e/0x70 [ 84.257650][ T6225] ? __fget_files+0x17c/0x1c0 [ 84.262415][ T6225] ksys_read+0xe8/0x1b0 [ 84.266706][ T6225] __x64_sys_read+0x42/0x50 [ 84.271258][ T6225] x64_sys_call+0x2874/0x2dc0 [ 84.275983][ T6225] do_syscall_64+0xc9/0x1c0 [ 84.280537][ T6225] ? clear_bhb_loop+0x55/0xb0 [ 84.285313][ T6225] ? clear_bhb_loop+0x55/0xb0 [ 84.290039][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.296056][ T6225] RIP: 0033:0x7fc230d4473c [ 84.300482][ T6225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.320122][ T6225] RSP: 002b:00007fc22f3b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.328565][ T6225] RAX: ffffffffffffffda RBX: 00007fc230f35fa0 RCX: 00007fc230d4473c [ 84.336555][ T6225] RDX: 000000000000000f RSI: 00007fc22f3b70a0 RDI: 0000000000000006 [ 84.344584][ T6225] RBP: 00007fc22f3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.352615][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.360613][ T6225] R13: 0000000000000000 R14: 00007fc230f35fa0 R15: 00007ffd6fe013f8 [ 84.368651][ T6225] [ 84.374717][ T6203] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 117 [ 84.387152][ T6203] EXT4-fs (loop1): This should not happen!! Data will be lost [ 84.387152][ T6203] [ 84.436524][ T6230] loop2: detected capacity change from 0 to 128 [ 84.461799][ T6235] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 84.471616][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.475964][ T6230] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.493127][ T6230] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.552185][ T6235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.599511][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.608093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.641387][ T6251] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.689239][ T6230] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.708479][ T6269] loop1: detected capacity change from 0 to 2048 [ 84.715418][ T6269] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.764477][ T6269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.779086][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.788611][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.811075][ T6269] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.831937][ T6288] loop2: detected capacity change from 0 to 512 [ 84.850928][ T6290] loop3: detected capacity change from 0 to 1024 [ 84.857831][ T6290] EXT4-fs: Ignoring removed orlov option [ 84.863605][ T6290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.889732][ T6297] FAULT_INJECTION: forcing a failure. [ 84.889732][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 84.902533][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.5.994 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 84.913165][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 84.923224][ T6297] Call Trace: [ 84.926508][ T6297] [ 84.929442][ T6297] dump_stack_lvl+0xf2/0x150 [ 84.934147][ T6297] dump_stack+0x15/0x1a [ 84.938404][ T6297] should_fail_ex+0x223/0x230 [ 84.943137][ T6297] should_failslab+0x8f/0xb0 [ 84.947749][ T6297] kmem_cache_alloc_noprof+0x52/0x320 [ 84.953166][ T6297] ? inet_bind2_bucket_create+0x2f/0x200 [ 84.958818][ T6297] ? inet_bhash2_addr_any_conflict+0x292/0x2b0 [ 84.965081][ T6297] inet_bind2_bucket_create+0x2f/0x200 [ 84.970566][ T6297] inet_csk_get_port+0xcf2/0x1070 [ 84.975601][ T6297] ? __rcu_read_unlock+0x4e/0x70 [ 84.980551][ T6297] ? inet_addr_type_table+0x162/0x240 [ 84.986015][ T6297] ? _raw_spin_unlock_bh+0x36/0x40 [ 84.991149][ T6297] ? lock_sock_nested+0x10f/0x140 [ 84.996249][ T6297] __inet_bind+0x469/0x5c0 [ 85.000793][ T6297] inet_bind+0x96/0xb0 [ 85.004874][ T6297] __sys_bind+0x10c/0x190 [ 85.009239][ T6297] __x64_sys_bind+0x41/0x50 [ 85.013837][ T6297] x64_sys_call+0x20ab/0x2dc0 [ 85.018540][ T6297] do_syscall_64+0xc9/0x1c0 [ 85.023054][ T6297] ? clear_bhb_loop+0x55/0xb0 [ 85.027761][ T6297] ? clear_bhb_loop+0x55/0xb0 [ 85.032479][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.038397][ T6297] RIP: 0033:0x7fc230d45d29 [ 85.042816][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.062538][ T6297] RSP: 002b:00007fc22f3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 85.070956][ T6297] RAX: ffffffffffffffda RBX: 00007fc230f35fa0 RCX: 00007fc230d45d29 [ 85.078948][ T6297] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 85.086938][ T6297] RBP: 00007fc22f3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.094912][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.102885][ T6297] R13: 0000000000000000 R14: 00007fc230f35fa0 R15: 00007ffd6fe013f8 [ 85.110890][ T6297] [ 85.116250][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.132642][ T6288] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.171601][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 85.292942][ T6313] loop5: detected capacity change from 0 to 512 [ 85.303422][ T6313] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.314944][ T6313] EXT4-fs (loop5): 1 truncate cleaned up [ 85.410176][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.419740][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.433425][ T6319] loop2: detected capacity change from 0 to 1024 [ 85.450004][ T6319] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 85.460103][ T6319] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 85.471547][ T6319] EXT4-fs (loop2): invalid journal inode [ 85.485131][ T6319] EXT4-fs (loop2): can't get journal size [ 85.610520][ T6323] usb usb1: usbfs: process 6323 (syz.0.1002) did not claim interface 0 before use [ 85.773495][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 85.799994][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 85.838521][ T6334] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 85.851531][ T6334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.865232][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.994177][ T6353] wireguard0: entered promiscuous mode [ 85.999858][ T6353] wireguard0: entered allmulticast mode [ 86.019843][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.029165][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.038433][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.069718][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.078785][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.087860][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.135308][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.144413][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.184466][ T6374] loop5: detected capacity change from 0 to 512 [ 86.233819][ T6374] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.250109][ T6384] FAULT_INJECTION: forcing a failure. [ 86.250109][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 86.262858][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.1.1015 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 86.273657][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 86.279321][ T6374] hub 9-0:1.0: USB hub found [ 86.283715][ T6384] Call Trace: [ 86.283726][ T6384] [ 86.283735][ T6384] dump_stack_lvl+0xf2/0x150 [ 86.294895][ T6374] hub 9-0:1.0: 8 ports detected [ 86.299110][ T6384] dump_stack+0x15/0x1a [ 86.308234][ T6384] should_fail_ex+0x223/0x230 [ 86.312950][ T6384] should_failslab+0x8f/0xb0 [ 86.317746][ T6384] kmem_cache_alloc_noprof+0x52/0x320 [ 86.323158][ T6384] ? vm_area_dup+0x2c/0x130 [ 86.327763][ T6384] vm_area_dup+0x2c/0x130 [ 86.332140][ T6384] __split_vma+0xf7/0x6a0 [ 86.336552][ T6384] vma_modify+0x17d/0x1e0 [ 86.340975][ T6384] vma_modify_flags+0xf1/0x120 [ 86.345824][ T6384] mlock_fixup+0x113/0x450 [ 86.350282][ T6384] apply_vma_lock_flags+0x194/0x240 [ 86.355536][ T6384] do_mlock+0x35b/0x510 [ 86.359780][ T6384] ? __bpf_trace_sys_enter+0x10/0x30 [ 86.365096][ T6384] ? trace_sys_enter+0xcd/0x110 [ 86.369978][ T6384] __x64_sys_mlock+0x36/0x40 [ 86.374663][ T6384] x64_sys_call+0x26b2/0x2dc0 [ 86.379387][ T6384] do_syscall_64+0xc9/0x1c0 [ 86.383933][ T6384] ? clear_bhb_loop+0x55/0xb0 [ 86.388661][ T6384] ? clear_bhb_loop+0x55/0xb0 [ 86.393361][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.399335][ T6384] RIP: 0033:0x7fcfe3585d29 [ 86.403755][ T6384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.423508][ T6384] RSP: 002b:00007fcfe1bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 86.431925][ T6384] RAX: ffffffffffffffda RBX: 00007fcfe3775fa0 RCX: 00007fcfe3585d29 [ 86.439930][ T6384] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffb000 [ 86.448230][ T6384] RBP: 00007fcfe1bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.456261][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.464234][ T6384] R13: 0000000000000000 R14: 00007fcfe3775fa0 R15: 00007ffcfb664c88 [ 86.472369][ T6384] [ 86.503994][ T6378] program syz.2.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.513453][ T6378] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 86.587540][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.599730][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.613398][ T6396] loop5: detected capacity change from 0 to 1024 [ 86.649000][ T6396] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 86.658708][ T6396] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.678128][ T6396] EXT4-fs (loop5): invalid journal inode [ 86.684014][ T6396] EXT4-fs (loop5): can't get journal size [ 86.690033][ T6394] FAULT_INJECTION: forcing a failure. [ 86.690033][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 86.702816][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.0.1019 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 86.713514][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 86.723579][ T6394] Call Trace: [ 86.726861][ T6394] [ 86.729953][ T6394] dump_stack_lvl+0xf2/0x150 [ 86.734590][ T6394] dump_stack+0x15/0x1a [ 86.738813][ T6394] should_fail_ex+0x223/0x230 [ 86.743507][ T6394] should_failslab+0x8f/0xb0 [ 86.748167][ T6394] kmem_cache_alloc_noprof+0x52/0x320 [ 86.749867][ T6401] loop1: detected capacity change from 0 to 8192 [ 86.753595][ T6394] ? getname_flags+0x81/0x3b0 [ 86.753642][ T6394] getname_flags+0x81/0x3b0 [ 86.753663][ T6394] getname+0x17/0x20 [ 86.753680][ T6394] __se_sys_quotactl+0x15b/0x660 [ 86.778077][ T6394] __x64_sys_quotactl+0x55/0x70 [ 86.783040][ T6394] x64_sys_call+0x826/0x2dc0 [ 86.787656][ T6394] do_syscall_64+0xc9/0x1c0 [ 86.792173][ T6394] ? clear_bhb_loop+0x55/0xb0 [ 86.796859][ T6394] ? clear_bhb_loop+0x55/0xb0 [ 86.801566][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.807486][ T6394] RIP: 0033:0x7fc593b95d29 [ 86.811905][ T6394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.831524][ T6394] RSP: 002b:00007fc592207038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 86.839945][ T6394] RAX: ffffffffffffffda RBX: 00007fc593d85fa0 RCX: 00007fc593b95d29 [ 86.847940][ T6394] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffff80000201 [ 86.855932][ T6394] RBP: 00007fc592207090 R08: 0000000000000000 R09: 0000000000000000 [ 86.863934][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.872000][ T6394] R13: 0000000000000000 R14: 00007fc593d85fa0 R15: 00007ffe33595028 [ 86.880003][ T6394] [ 86.896830][ T6404] syz.3.1021[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.896884][ T6404] syz.3.1021[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.908450][ T6404] syz.3.1021[6404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.928372][ T6401] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.046754][ T6415] xt_hashlimit: size too large, truncated to 1048576 [ 87.113010][ T6418] x_tables: duplicate underflow at hook 1 [ 87.346975][ T6424] loop3: detected capacity change from 0 to 128 [ 87.397819][ T6424] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.444104][ T6428] random: crng reseeded on system resumption [ 87.672472][ T6440] FAULT_INJECTION: forcing a failure. [ 87.672472][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 87.685181][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.1.1032 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 87.695986][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.706140][ T6440] Call Trace: [ 87.709444][ T6440] [ 87.712393][ T6440] dump_stack_lvl+0xf2/0x150 [ 87.717120][ T6440] dump_stack+0x15/0x1a [ 87.721321][ T6440] should_fail_ex+0x223/0x230 [ 87.726026][ T6440] ? selinux_bpf_map_create+0x35/0xd0 [ 87.731467][ T6440] should_failslab+0x8f/0xb0 [ 87.736168][ T6440] __kmalloc_cache_noprof+0x4e/0x320 [ 87.741571][ T6440] selinux_bpf_map_create+0x35/0xd0 [ 87.746808][ T6440] security_bpf_map_create+0x47/0x80 [ 87.752251][ T6440] map_create+0xace/0xb70 [ 87.756609][ T6440] __sys_bpf+0x667/0x7a0 [ 87.760942][ T6440] __x64_sys_bpf+0x43/0x50 [ 87.765477][ T6440] x64_sys_call+0x2914/0x2dc0 [ 87.770766][ T6440] do_syscall_64+0xc9/0x1c0 [ 87.775323][ T6440] ? clear_bhb_loop+0x55/0xb0 [ 87.780107][ T6440] ? clear_bhb_loop+0x55/0xb0 [ 87.784838][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.790838][ T6440] RIP: 0033:0x7fcfe3585d29 [ 87.795267][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.814921][ T6440] RSP: 002b:00007fcfe1bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.823432][ T6440] RAX: ffffffffffffffda RBX: 00007fcfe3775fa0 RCX: 00007fcfe3585d29 [ 87.831485][ T6440] RDX: 0000000000000050 RSI: 00000000200009c0 RDI: 0000000000000000 [ 87.839476][ T6440] RBP: 00007fcfe1bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.847558][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.855581][ T6440] R13: 0000000000000000 R14: 00007fcfe3775fa0 R15: 00007ffcfb664c88 [ 87.863564][ T6440] [ 87.875058][ T6435] loop5: detected capacity change from 0 to 8192 [ 87.886148][ T6435] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.929126][ T6435] FAULT_INJECTION: forcing a failure. [ 87.929126][ T6435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.942291][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.5.1031 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 87.953087][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.963198][ T6435] Call Trace: [ 87.966482][ T6435] [ 87.969415][ T6435] dump_stack_lvl+0xf2/0x150 [ 87.974049][ T6435] dump_stack+0x15/0x1a [ 87.978237][ T6435] should_fail_ex+0x223/0x230 [ 87.982924][ T6435] should_fail+0xb/0x10 [ 87.987137][ T6435] should_fail_usercopy+0x1a/0x20 [ 87.992191][ T6435] _copy_from_iter+0xd5/0xd00 [ 87.996921][ T6435] ? __virt_addr_valid+0x1ed/0x250 [ 88.002128][ T6435] ? __check_object_size+0x364/0x520 [ 88.007447][ T6435] sk_msg_memcopy_from_iter+0x1e1/0x300 [ 88.013057][ T6435] tls_sw_sendmsg+0xe3c/0x15f0 [ 88.017885][ T6435] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 88.023139][ T6435] inet6_sendmsg+0xc5/0xd0 [ 88.027576][ T6435] __sock_sendmsg+0x8b/0x180 [ 88.032220][ T6435] sock_write_iter+0x15e/0x1a0 [ 88.037036][ T6435] vfs_write+0x77f/0x920 [ 88.041292][ T6435] ? __pfx_sock_write_iter+0x10/0x10 [ 88.046624][ T6435] ksys_write+0xe8/0x1b0 [ 88.050939][ T6435] __x64_sys_write+0x42/0x50 [ 88.055542][ T6435] x64_sys_call+0x287e/0x2dc0 [ 88.060279][ T6435] do_syscall_64+0xc9/0x1c0 [ 88.064787][ T6435] ? clear_bhb_loop+0x55/0xb0 [ 88.069501][ T6435] ? clear_bhb_loop+0x55/0xb0 [ 88.074223][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.080198][ T6435] RIP: 0033:0x7fc230d45d29 [ 88.084621][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.104235][ T6435] RSP: 002b:00007fc22f3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.112670][ T6435] RAX: ffffffffffffffda RBX: 00007fc230f35fa0 RCX: 00007fc230d45d29 [ 88.120709][ T6435] RDX: 000000000000fc94 RSI: 0000000020000240 RDI: 0000000000000005 [ 88.128682][ T6435] RBP: 00007fc22f3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.136709][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.144747][ T6435] R13: 0000000000000000 R14: 00007fc230f35fa0 R15: 00007ffd6fe013f8 [ 88.152880][ T6435] [ 88.170112][ T24] net_ratelimit: 3 callbacks suppressed [ 88.170128][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.217554][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.231738][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 88.231756][ T29] audit: type=1326 audit(1734497398.205:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.261428][ T29] audit: type=1326 audit(1734497398.205:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.285444][ T29] audit: type=1326 audit(1734497398.205:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.308875][ T29] audit: type=1326 audit(1734497398.205:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.332386][ T29] audit: type=1326 audit(1734497398.205:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.355805][ T29] audit: type=1326 audit(1734497398.205:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.379389][ T29] audit: type=1326 audit(1734497398.205:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.402922][ T29] audit: type=1326 audit(1734497398.205:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.426420][ T29] audit: type=1326 audit(1734497398.205:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.449899][ T29] audit: type=1326 audit(1734497398.205:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc593b95d29 code=0x7ffc0000 [ 88.509739][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.510869][ T6451] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 88.531796][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.544721][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.560425][ T6460] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 88.594837][ T6454] loop1: detected capacity change from 0 to 1024 [ 88.624842][ T6454] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 88.628090][ T6462] loop5: detected capacity change from 0 to 256 [ 88.634425][ T6454] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.651166][ T6454] EXT4-fs (loop1): invalid journal inode [ 88.656960][ T6454] EXT4-fs (loop1): can't get journal size [ 88.681949][ T6462] FAT-fs (loop5): Directory bread(block 64) failed [ 88.688694][ T6462] FAT-fs (loop5): Directory bread(block 65) failed [ 88.695304][ T6462] FAT-fs (loop5): Directory bread(block 66) failed [ 88.701961][ T6462] FAT-fs (loop5): Directory bread(block 67) failed [ 88.712070][ T6462] FAT-fs (loop5): Directory bread(block 68) failed [ 88.739326][ T6462] FAT-fs (loop5): Directory bread(block 69) failed [ 88.751997][ T6462] FAT-fs (loop5): Directory bread(block 70) failed [ 88.764608][ T6462] FAT-fs (loop5): Directory bread(block 71) failed [ 88.771440][ T6462] FAT-fs (loop5): Directory bread(block 72) failed [ 88.778116][ T6462] FAT-fs (loop5): Directory bread(block 73) failed [ 88.843324][ T6462] No such timeout policy "syz1" [ 88.864153][ T6462] syz.5.1042: attempt to access beyond end of device [ 88.864153][ T6462] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 88.950486][ T6501] syz.5.1049[6501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.950617][ T6501] syz.5.1049[6501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.962157][ T6501] syz.5.1049[6501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.996805][ T6505] loop5: detected capacity change from 0 to 128 [ 89.015537][ T6505] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.038993][ T6505] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.165786][ T6521] netlink: 'syz.2.1057': attribute type 1 has an invalid length. [ 89.173533][ T6522] loop5: detected capacity change from 0 to 512 [ 89.197704][ T6521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.211149][ T6522] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1055: corrupted in-inode xattr: invalid ea_ino [ 89.225459][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.234001][ T6522] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1055: couldn't read orphan inode 15 (err -117) [ 89.274220][ T6522] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.1055: deleted inode referenced: 15 [ 89.290231][ T6522] IPv4: Oversized IP packet from 127.202.26.0 [ 89.545306][ T6236] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 89.652202][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.666137][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.695989][ T6564] loop3: detected capacity change from 0 to 1024 [ 89.711814][ T6564] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 89.730888][ T6567] loop2: detected capacity change from 0 to 256 [ 89.745617][ T6564] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.750578][ T6567] FAT-fs (loop2): Directory bread(block 64) failed [ 89.755947][ T6564] EXT4-fs (loop3): invalid journal inode [ 89.764542][ T6567] FAT-fs (loop2): Directory bread(block 65) failed [ 89.768144][ T6564] EXT4-fs (loop3): can't get journal size [ 89.774571][ T6567] FAT-fs (loop2): Directory bread(block 66) failed [ 89.786875][ T6567] FAT-fs (loop2): Directory bread(block 67) failed [ 89.793546][ T6567] FAT-fs (loop2): Directory bread(block 68) failed [ 89.800302][ T6567] FAT-fs (loop2): Directory bread(block 69) failed [ 89.806907][ T6567] FAT-fs (loop2): Directory bread(block 70) failed [ 89.813627][ T6567] FAT-fs (loop2): Directory bread(block 71) failed [ 89.820246][ T6567] FAT-fs (loop2): Directory bread(block 72) failed [ 89.827507][ T6567] FAT-fs (loop2): Directory bread(block 73) failed [ 89.867874][ T6567] No such timeout policy "syz1" [ 89.878236][ T6567] syz.2.1069: attempt to access beyond end of device [ 89.878236][ T6567] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 89.935493][ T6570] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 89.949183][ T6570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.990715][ T6579] loop5: detected capacity change from 0 to 256 [ 90.011171][ T6579] FAT-fs (loop5): Directory bread(block 64) failed [ 90.017996][ T6579] FAT-fs (loop5): Directory bread(block 65) failed [ 90.024550][ T6579] FAT-fs (loop5): Directory bread(block 66) failed [ 90.031245][ T6579] FAT-fs (loop5): Directory bread(block 67) failed [ 90.038304][ T6579] FAT-fs (loop5): Directory bread(block 68) failed [ 90.044891][ T6579] FAT-fs (loop5): Directory bread(block 69) failed [ 90.051460][ T6579] FAT-fs (loop5): Directory bread(block 70) failed [ 90.058092][ T6579] FAT-fs (loop5): Directory bread(block 71) failed [ 90.064616][ T6579] FAT-fs (loop5): Directory bread(block 72) failed [ 90.071310][ T6579] FAT-fs (loop5): Directory bread(block 73) failed [ 90.085449][ T6527] dccp_close: ABORT with 32 bytes unread [ 90.129782][ T6579] No such timeout policy "syz1" [ 90.145395][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.172855][ T6579] syz.5.1072: attempt to access beyond end of device [ 90.172855][ T6579] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 90.237135][ T6605] FAULT_INJECTION: forcing a failure. [ 90.237135][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 90.249902][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.2.1077 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 90.260696][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 90.270784][ T6605] Call Trace: [ 90.274065][ T6605] [ 90.276996][ T6605] dump_stack_lvl+0xf2/0x150 [ 90.281666][ T6605] dump_stack+0x15/0x1a [ 90.285874][ T6605] should_fail_ex+0x223/0x230 [ 90.290564][ T6605] should_failslab+0x8f/0xb0 [ 90.295214][ T6605] kmem_cache_alloc_node_noprof+0x59/0x320 [ 90.301096][ T6605] ? __alloc_skb+0x10b/0x310 [ 90.305686][ T6605] ? avc_has_perm_noaudit+0x1cc/0x210 [ 90.311345][ T6605] __alloc_skb+0x10b/0x310 [ 90.315823][ T6605] alloc_skb_with_frags+0x80/0x450 [ 90.320945][ T6605] ? selinux_file_open+0x34a/0x3b0 [ 90.326154][ T6605] sock_alloc_send_pskb+0x435/0x4f0 [ 90.331392][ T6605] ? mntput+0x49/0x70 [ 90.335427][ T6605] tun_get_user+0xa33/0x25b0 [ 90.340090][ T6605] ? avc_has_perm+0xd4/0x160 [ 90.344755][ T6605] ? ref_tracker_alloc+0x1f5/0x2f0 [ 90.349907][ T6605] tun_chr_write_iter+0x188/0x240 [ 90.355134][ T6605] vfs_write+0x77f/0x920 [ 90.359403][ T6605] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 90.365037][ T6605] ksys_write+0xe8/0x1b0 [ 90.369376][ T6605] __x64_sys_write+0x42/0x50 [ 90.373978][ T6605] x64_sys_call+0x287e/0x2dc0 [ 90.378670][ T6605] do_syscall_64+0xc9/0x1c0 [ 90.383306][ T6605] ? clear_bhb_loop+0x55/0xb0 [ 90.387988][ T6605] ? clear_bhb_loop+0x55/0xb0 [ 90.392676][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.398749][ T6605] RIP: 0033:0x7fd68a6d47df [ 90.403245][ T6605] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 90.422862][ T6605] RSP: 002b:00007fd688d47000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 90.431283][ T6605] RAX: ffffffffffffffda RBX: 00007fd68a8c5fa0 RCX: 00007fd68a6d47df [ 90.439291][ T6605] RDX: 00000000ffffffc1 RSI: 0000000000000000 RDI: 00000000000000c8 [ 90.447265][ T6605] RBP: 00007fd688d47090 R08: 0000000000000000 R09: 0000000000000000 [ 90.455268][ T6605] R10: ffffffffffffffc1 R11: 0000000000000293 R12: 0000000000000001 [ 90.463242][ T6605] R13: 0000000000000001 R14: 00007fd68a8c5fa0 R15: 00007ffe33f280a8 [ 90.471327][ T6605] [ 90.476482][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.567448][ T6613] loop2: detected capacity change from 0 to 256 [ 90.582896][ T6615] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 90.595138][ T6615] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.616004][ T6613] FAT-fs (loop2): Directory bread(block 64) failed [ 90.622771][ T6613] FAT-fs (loop2): Directory bread(block 65) failed [ 90.641324][ T6613] FAT-fs (loop2): Directory bread(block 66) failed [ 90.642215][ T6623] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 90.654515][ T6613] FAT-fs (loop2): Directory bread(block 67) failed [ 90.657386][ T6623] FAULT_INJECTION: forcing a failure. [ 90.657386][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 90.675826][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.1.1083 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 90.686533][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 90.692828][ T6613] FAT-fs (loop2): Directory bread(block 68) failed [ 90.696597][ T6623] Call Trace: [ 90.696608][ T6623] [ 90.696617][ T6623] dump_stack_lvl+0xf2/0x150 [ 90.704385][ T6613] FAT-fs (loop2): Directory bread(block 69) failed [ 90.706435][ T6623] dump_stack+0x15/0x1a [ 90.706496][ T6623] should_fail_ex+0x223/0x230 [ 90.706540][ T6623] should_failslab+0x8f/0xb0 [ 90.710556][ T6613] FAT-fs (loop2): Directory bread(block 70) failed [ 90.714032][ T6623] kmem_cache_alloc_noprof+0x52/0x320 [ 90.721082][ T6613] FAT-fs (loop2): Directory bread(block 71) failed [ 90.724712][ T6623] ? audit_log_start+0x34c/0x6b0 [ 90.729495][ T6613] FAT-fs (loop2): Directory bread(block 72) failed [ 90.733967][ T6623] audit_log_start+0x34c/0x6b0 [ 90.768767][ T6623] audit_seccomp+0x4b/0x130 [ 90.773313][ T6623] __seccomp_filter+0x6fa/0x1180 [ 90.778281][ T6623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 90.784003][ T6623] ? vfs_write+0x596/0x920 [ 90.788439][ T6623] __secure_computing+0x9f/0x1c0 [ 90.793444][ T6623] syscall_trace_enter+0xd1/0x1f0 [ 90.798489][ T6623] ? fpregs_assert_state_consistent+0x83/0xa0 [ 90.804579][ T6623] do_syscall_64+0xaa/0x1c0 [ 90.809159][ T6623] ? clear_bhb_loop+0x55/0xb0 [ 90.813906][ T6623] ? clear_bhb_loop+0x55/0xb0 [ 90.818659][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.824588][ T6623] RIP: 0033:0x7fcfe3585d29 [ 90.829105][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.848910][ T6623] RSP: 002b:00007fcfe1bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000138 [ 90.857340][ T6623] RAX: ffffffffffffffda RBX: 00007fcfe3775fa0 RCX: 00007fcfe3585d29 [ 90.865310][ T6623] RDX: 0000000000000007 RSI: 00000000000001f3 RDI: 00000000000001f3 [ 90.873320][ T6623] RBP: 00007fcfe1bf7090 R08: 00000000200000c0 R09: 0000000000000000 [ 90.881368][ T6623] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 90.889362][ T6623] R13: 0000000000000000 R14: 00007fcfe3775fa0 R15: 00007ffcfb664c88 [ 90.897389][ T6623] [ 90.917145][ T6613] FAT-fs (loop2): Directory bread(block 73) failed [ 90.996232][ T6613] No such timeout policy "syz1" [ 91.013870][ T6613] syz.2.1080: attempt to access beyond end of device [ 91.013870][ T6613] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 91.030715][ T6642] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 91.044145][ T6642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.076163][ T6648] loop1: detected capacity change from 0 to 128 [ 91.124649][ T6648] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.146219][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.154566][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.187676][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.198139][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.212704][ T6670] loop1: detected capacity change from 0 to 1024 [ 91.231663][ T6670] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 91.241602][ T6670] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.253084][ T6670] EXT4-fs (loop1): invalid journal inode [ 91.259207][ T6670] EXT4-fs (loop1): can't get journal size [ 91.294884][ T3377] IPVS: starting estimator thread 0... [ 91.376287][ T6695] __nla_validate_parse: 3 callbacks suppressed [ 91.376306][ T6695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1093'. [ 91.391787][ T6695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1093'. [ 91.395147][ T6688] IPVS: using max 2400 ests per chain, 120000 per kthread [ 91.403891][ T6695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1093'. [ 91.435475][ T6699] loop2: detected capacity change from 0 to 512 [ 91.444386][ T6699] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 91.461691][ T6699] syz.2.1095[6699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.461808][ T6699] syz.2.1095[6699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.473479][ T6699] syz.2.1095[6699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.510854][ T6705] loop3: detected capacity change from 0 to 128 [ 91.518252][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.537610][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.552292][ T6705] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.619895][ T6705] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 91.648560][ T6705] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 91.747911][ T6729] loop3: detected capacity change from 0 to 256 [ 91.761215][ T6729] FAT-fs (loop3): Directory bread(block 64) failed [ 91.767862][ T6729] FAT-fs (loop3): Directory bread(block 65) failed [ 91.774499][ T6729] FAT-fs (loop3): Directory bread(block 66) failed [ 91.781068][ T6729] FAT-fs (loop3): Directory bread(block 67) failed [ 91.788575][ T6729] FAT-fs (loop3): Directory bread(block 68) failed [ 91.795281][ T6729] FAT-fs (loop3): Directory bread(block 69) failed [ 91.802068][ T6729] FAT-fs (loop3): Directory bread(block 70) failed [ 91.809442][ T6729] FAT-fs (loop3): Directory bread(block 71) failed [ 91.816108][ T6729] FAT-fs (loop3): Directory bread(block 72) failed [ 91.822702][ T6729] FAT-fs (loop3): Directory bread(block 73) failed [ 91.890329][ T6729] No such timeout policy "syz1" [ 91.911596][ T6729] syz.3.1099: attempt to access beyond end of device [ 91.911596][ T6729] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 91.948883][ T6751] xt_hashlimit: size too large, truncated to 1048576 [ 92.120930][ T6764] loop2: detected capacity change from 0 to 512 [ 92.219822][ T6764] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.236083][ T6774] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1109'. [ 92.245676][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.264042][ T6764] FAULT_INJECTION: forcing a failure. [ 92.264042][ T6764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.277149][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.2.1107 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 92.287904][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 92.297988][ T6764] Call Trace: [ 92.301278][ T6764] [ 92.304219][ T6764] dump_stack_lvl+0xf2/0x150 [ 92.308843][ T6764] dump_stack+0x15/0x1a [ 92.313087][ T6764] should_fail_ex+0x223/0x230 [ 92.317862][ T6764] should_fail+0xb/0x10 [ 92.322030][ T6764] should_fail_usercopy+0x1a/0x20 [ 92.327082][ T6764] strncpy_from_user+0x25/0x210 [ 92.331969][ T6764] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 92.337696][ T6764] ? getname_flags+0x81/0x3b0 [ 92.342433][ T6764] getname_flags+0xb0/0x3b0 [ 92.347008][ T6764] user_path_at+0x26/0x120 [ 92.351457][ T6764] __se_sys_mount_setattr+0x49c/0x1330 [ 92.356938][ T6764] ? fput+0x1c4/0x200 [ 92.361027][ T6764] __x64_sys_mount_setattr+0x67/0x80 [ 92.366347][ T6764] x64_sys_call+0x2c0c/0x2dc0 [ 92.371034][ T6764] do_syscall_64+0xc9/0x1c0 [ 92.375633][ T6764] ? clear_bhb_loop+0x55/0xb0 [ 92.380365][ T6764] ? clear_bhb_loop+0x55/0xb0 [ 92.385194][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.391184][ T6764] RIP: 0033:0x7fd68a6d5d29 [ 92.395624][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.415248][ T6764] RSP: 002b:00007fd688d47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 92.423732][ T6764] RAX: ffffffffffffffda RBX: 00007fd68a8c5fa0 RCX: 00007fd68a6d5d29 [ 92.431722][ T6764] RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffffffffffffff9c [ 92.439697][ T6764] RBP: 00007fd688d47090 R08: 0000000000000020 R09: 0000000000000000 [ 92.447727][ T6764] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 92.455701][ T6764] R13: 0000000000000000 R14: 00007fd68a8c5fa0 R15: 00007ffe33f280a8 [ 92.463726][ T6764] [ 92.469685][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.484181][ T6783] loop1: detected capacity change from 0 to 1024 [ 92.510989][ T6783] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 92.525228][ T6783] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.538612][ T6783] EXT4-fs (loop1): invalid journal inode [ 92.544402][ T6783] EXT4-fs (loop1): can't get journal size [ 92.665062][ T6800] loop2: detected capacity change from 0 to 256 [ 92.684843][ T6800] FAT-fs (loop2): Directory bread(block 64) failed [ 92.692075][ T6800] FAT-fs (loop2): Directory bread(block 65) failed [ 92.699939][ T6800] FAT-fs (loop2): Directory bread(block 66) failed [ 92.707815][ T6800] FAT-fs (loop2): Directory bread(block 67) failed [ 92.714518][ T6800] FAT-fs (loop2): Directory bread(block 68) failed [ 92.721350][ T6800] FAT-fs (loop2): Directory bread(block 69) failed [ 92.728165][ T6800] FAT-fs (loop2): Directory bread(block 70) failed [ 92.734834][ T6800] FAT-fs (loop2): Directory bread(block 71) failed [ 92.741587][ T6800] FAT-fs (loop2): Directory bread(block 72) failed [ 92.748280][ T6800] FAT-fs (loop2): Directory bread(block 73) failed [ 92.786759][ T6800] No such timeout policy "syz1" [ 92.798257][ T6800] syz.2.1115: attempt to access beyond end of device [ 92.798257][ T6800] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 92.978394][ T6833] loop2: detected capacity change from 0 to 512 [ 92.998901][ T6833] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.305653][ T6886] loop2: detected capacity change from 0 to 512 [ 93.337817][ T6886] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.435626][ T6900] FAULT_INJECTION: forcing a failure. [ 93.435626][ T6900] name failslab, interval 1, probability 0, space 0, times 0 [ 93.448391][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: syz.5.1135 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 93.459093][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 93.469175][ T6900] Call Trace: [ 93.472475][ T6900] [ 93.475435][ T6900] dump_stack_lvl+0xf2/0x150 [ 93.480117][ T6900] dump_stack+0x15/0x1a [ 93.484390][ T6900] should_fail_ex+0x223/0x230 [ 93.489084][ T6900] should_failslab+0x8f/0xb0 [ 93.493736][ T6900] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 93.499536][ T6900] ? alloc_inode+0x6a/0x160 [ 93.504056][ T6900] ? __rcu_read_unlock+0x4e/0x70 [ 93.509077][ T6900] alloc_inode+0x6a/0x160 [ 93.513408][ T6900] iget_locked+0xf2/0x5d0 [ 93.517741][ T6900] ? rcu_sync_func+0xc5/0xf0 [ 93.522370][ T6900] ? rcu_sync_enter+0x131/0x170 [ 93.527307][ T6900] kernfs_get_inode+0x2e/0x350 [ 93.532093][ T6900] cgroup_attach_permissions+0xea/0x5a0 [ 93.537742][ T6900] __cgroup_procs_write+0x17a/0x210 [ 93.543019][ T6900] ? __pfx_cgroup_procs_write+0x10/0x10 [ 93.548587][ T6900] cgroup_procs_write+0x29/0x50 [ 93.553446][ T6900] ? __pfx_cgroup_procs_write+0x10/0x10 [ 93.559139][ T6900] cgroup_file_write+0x16f/0x320 [ 93.564083][ T6900] ? __check_object_size+0x364/0x520 [ 93.569394][ T6900] ? __pfx_cgroup_file_write+0x10/0x10 [ 93.574933][ T6900] kernfs_fop_write_iter+0x1c8/0x2c0 [ 93.580330][ T6900] vfs_write+0x77f/0x920 [ 93.584588][ T6900] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.590486][ T6900] ksys_write+0xe8/0x1b0 [ 93.594751][ T6900] __x64_sys_write+0x42/0x50 [ 93.599376][ T6900] x64_sys_call+0x287e/0x2dc0 [ 93.604082][ T6900] do_syscall_64+0xc9/0x1c0 [ 93.608604][ T6900] ? clear_bhb_loop+0x55/0xb0 [ 93.613325][ T6900] ? clear_bhb_loop+0x55/0xb0 [ 93.618023][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.624093][ T6900] RIP: 0033:0x7fc230d45d29 [ 93.628507][ T6900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.648120][ T6900] RSP: 002b:00007fc22f3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.656625][ T6900] RAX: ffffffffffffffda RBX: 00007fc230f35fa0 RCX: 00007fc230d45d29 [ 93.664603][ T6900] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000004 [ 93.672579][ T6900] RBP: 00007fc22f3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.680556][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.688534][ T6900] R13: 0000000000000000 R14: 00007fc230f35fa0 R15: 00007ffd6fe013f8 [ 93.696517][ T6900] [ 93.703203][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 93.703219][ T29] audit: type=1400 audit(1734497403.445:6386): avc: denied { getopt } for pid=6851 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.735596][ T24] net_ratelimit: 4 callbacks suppressed [ 93.735612][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.782535][ T29] audit: type=1400 audit(1734497403.755:6387): avc: denied { write } for pid=6916 comm="syz.3.1140" name="netstat" dev="proc" ino=4026532541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.813513][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.838211][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.856277][ T29] audit: type=1400 audit(1734497403.835:6388): avc: denied { getopt } for pid=6920 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.876843][ T6915] loop5: detected capacity change from 0 to 1024 [ 93.896091][ T6915] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 93.906481][ T6915] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.944166][ T6915] EXT4-fs (loop5): invalid journal inode [ 93.959818][ T6915] EXT4-fs (loop5): can't get journal size [ 94.059106][ T29] audit: type=1400 audit(1734497404.035:6389): avc: denied { setopt } for pid=6952 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.113381][ T6966] FAULT_INJECTION: forcing a failure. [ 94.113381][ T6966] name failslab, interval 1, probability 0, space 0, times 0 [ 94.126090][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.2.1151 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 94.134110][ T6968] program syz.0.1150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.136777][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 94.136795][ T6966] Call Trace: [ 94.136802][ T6966] [ 94.136821][ T6966] dump_stack_lvl+0xf2/0x150 [ 94.165926][ T6954] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 94.166960][ T6966] dump_stack+0x15/0x1a [ 94.178069][ T6966] should_fail_ex+0x223/0x230 [ 94.182811][ T6966] should_failslab+0x8f/0xb0 [ 94.185213][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.187535][ T6966] kmem_cache_alloc_noprof+0x52/0x320 [ 94.187566][ T6966] ? skb_clone+0x154/0x1f0 [ 94.187592][ T6966] skb_clone+0x154/0x1f0 [ 94.209801][ T6966] __netlink_deliver_tap+0x2bd/0x4f0 [ 94.215188][ T6966] netlink_unicast+0x64a/0x670 [ 94.219961][ T6966] netlink_sendmsg+0x5cc/0x6e0 [ 94.224834][ T6966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.230179][ T6966] __sock_sendmsg+0x140/0x180 [ 94.234873][ T6966] ____sys_sendmsg+0x312/0x410 [ 94.239724][ T6966] __sys_sendmsg+0x19d/0x230 [ 94.244386][ T6966] __x64_sys_sendmsg+0x46/0x50 [ 94.249226][ T6966] x64_sys_call+0x2734/0x2dc0 [ 94.253931][ T6966] do_syscall_64+0xc9/0x1c0 [ 94.258439][ T6966] ? clear_bhb_loop+0x55/0xb0 [ 94.263152][ T6966] ? clear_bhb_loop+0x55/0xb0 [ 94.267887][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.273799][ T6966] RIP: 0033:0x7fd68a6d5d29 [ 94.278272][ T6966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.297946][ T6966] RSP: 002b:00007fd688d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.306364][ T6966] RAX: ffffffffffffffda RBX: 00007fd68a8c5fa0 RCX: 00007fd68a6d5d29 [ 94.314395][ T6966] RDX: 0000000004000080 RSI: 0000000020001200 RDI: 0000000000000003 [ 94.322367][ T6966] RBP: 00007fd688d47090 R08: 0000000000000000 R09: 0000000000000000 [ 94.330428][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.338444][ T6966] R13: 0000000000000000 R14: 00007fd68a8c5fa0 R15: 00007ffe33f280a8 [ 94.346434][ T6966] [ 94.386433][ T29] audit: type=1326 audit(1734497404.365:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe057d75d29 code=0x7ffc0000 [ 94.413754][ T6978] loop3: detected capacity change from 0 to 128 [ 94.436354][ T29] audit: type=1326 audit(1734497404.385:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe057d75d29 code=0x7ffc0000 [ 94.460081][ T29] audit: type=1326 audit(1734497404.385:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe057d75d29 code=0x7ffc0000 [ 94.474102][ T6978] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.483530][ T29] audit: type=1326 audit(1734497404.385:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe057d75d29 code=0x7ffc0000 [ 94.538447][ T29] audit: type=1326 audit(1734497404.385:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe057d75d29 code=0x7ffc0000 [ 94.561569][ T29] audit: type=1326 audit(1734497404.385:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe057d75d29 code=0x7ffc0000 [ 94.692510][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 94.732756][ T7017] SELinux: syz.0.1160 (7017) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 94.746658][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.757955][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 94.817941][ T7032] xt_hashlimit: size too large, truncated to 1048576 [ 94.830102][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1165'. [ 94.853703][ T7035] FAULT_INJECTION: forcing a failure. [ 94.853703][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 94.866447][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.5.1165 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 94.877236][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 94.887390][ T7035] Call Trace: [ 94.890678][ T7035] [ 94.893724][ T7035] dump_stack_lvl+0xf2/0x150 [ 94.898378][ T7035] dump_stack+0x15/0x1a [ 94.902559][ T7035] should_fail_ex+0x223/0x230 [ 94.907369][ T7035] should_failslab+0x8f/0xb0 [ 94.911984][ T7035] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 94.918393][ T7035] ? xfrm_add_sa+0x159a/0x2080 [ 94.923182][ T7035] ? strcmp+0x21/0x50 [ 94.927195][ T7035] kmemdup_noprof+0x2a/0x60 [ 94.931723][ T7035] xfrm_add_sa+0x159a/0x2080 [ 94.936404][ T7035] xfrm_user_rcv_msg+0x55a/0x650 [ 94.941426][ T7035] ? __kfree_skb+0x102/0x150 [ 94.946036][ T7035] ? consume_skb+0x49/0x160 [ 94.950583][ T7035] netlink_rcv_skb+0x12c/0x230 [ 94.955377][ T7035] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 94.960866][ T7035] xfrm_netlink_rcv+0x47/0x60 [ 94.965736][ T7035] netlink_unicast+0x599/0x670 [ 94.970546][ T7035] netlink_sendmsg+0x5cc/0x6e0 [ 94.975394][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.980746][ T7035] __sock_sendmsg+0x140/0x180 [ 94.985452][ T7035] ____sys_sendmsg+0x312/0x410 [ 94.990259][ T7035] __sys_sendmsg+0x19d/0x230 [ 94.994984][ T7035] __x64_sys_sendmsg+0x46/0x50 [ 94.999778][ T7035] x64_sys_call+0x2734/0x2dc0 [ 95.004484][ T7035] do_syscall_64+0xc9/0x1c0 [ 95.009059][ T7035] ? clear_bhb_loop+0x55/0xb0 [ 95.013824][ T7035] ? clear_bhb_loop+0x55/0xb0 [ 95.018513][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.024456][ T7035] RIP: 0033:0x7fc230d45d29 [ 95.028976][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.048632][ T7035] RSP: 002b:00007fc22f3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.057074][ T7035] RAX: ffffffffffffffda RBX: 00007fc230f35fa0 RCX: 00007fc230d45d29 [ 95.065073][ T7035] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 95.073126][ T7035] RBP: 00007fc22f3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.081205][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.089289][ T7035] R13: 0000000000000000 R14: 00007fc230f35fa0 R15: 00007ffd6fe013f8 [ 95.097282][ T7035] [ 95.270070][ T7053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 95.284101][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.306550][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.349912][ T7057] loop5: detected capacity change from 0 to 1024 [ 95.367614][ T7057] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 95.389687][ T7057] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.405214][ T7057] EXT4-fs (loop5): invalid journal inode [ 95.411642][ T7057] EXT4-fs (loop5): can't get journal size [ 95.460008][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.1.1175 [ 95.506231][ T7073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7073 comm=syz.1.1176 [ 95.556139][ T7075] bond4: entered promiscuous mode [ 95.561332][ T7075] bond4: entered allmulticast mode [ 95.572510][ T7075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.591503][ T7075] bond4 (unregistering): Released all slaves [ 95.662577][ T7092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.670821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.785337][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.803390][ T7110] loop1: detected capacity change from 0 to 512 [ 95.810664][ T7110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.821710][ T7110] EXT4-fs (loop1): 1 truncate cleaned up [ 95.858400][ T7114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7114 comm=syz.1.1186 [ 96.001286][ T7118] xt_hashlimit: size too large, truncated to 1048576 [ 96.033250][ T7120] FAULT_INJECTION: forcing a failure. [ 96.033250][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 96.046089][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.0.1189 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 96.056805][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 96.066885][ T7120] Call Trace: [ 96.070194][ T7120] [ 96.073147][ T7120] dump_stack_lvl+0xf2/0x150 [ 96.077776][ T7120] dump_stack+0x15/0x1a [ 96.082037][ T7120] should_fail_ex+0x223/0x230 [ 96.086744][ T7120] should_failslab+0x8f/0xb0 [ 96.091373][ T7120] __kmalloc_cache_node_noprof+0x56/0x320 [ 96.097131][ T7120] ? __get_vm_area_node+0xfb/0x1c0 [ 96.102294][ T7120] __get_vm_area_node+0xfb/0x1c0 [ 96.107337][ T7120] __vmalloc_node_range_noprof+0x280/0xe80 [ 96.113190][ T7120] ? n_tty_open+0x1b/0xe0 [ 96.117597][ T7120] ? perf_trace_run_bpf_submit+0xb0/0x110 [ 96.123335][ T7120] ? perf_trace_kmalloc+0xe2/0x110 [ 96.128514][ T7120] ? tty_ldisc_get+0x1d0/0x200 [ 96.133316][ T7120] ? n_tty_open+0x1b/0xe0 [ 96.137671][ T7120] vzalloc_noprof+0x5e/0x70 [ 96.142214][ T7120] ? n_tty_open+0x1b/0xe0 [ 96.146565][ T7120] n_tty_open+0x1b/0xe0 [ 96.150743][ T7120] tty_ldisc_reinit+0x21a/0x320 [ 96.155696][ T7120] tty_reopen+0x188/0x1b0 [ 96.160156][ T7120] tty_open+0x8ff/0xb00 [ 96.164390][ T7120] chrdev_open+0x2f9/0x370 [ 96.168843][ T7120] ? __pfx_chrdev_open+0x10/0x10 [ 96.173822][ T7120] do_dentry_open+0x621/0xa20 [ 96.178512][ T7120] vfs_open+0x38/0x1f0 [ 96.182690][ T7120] path_openat+0x1ac2/0x1fa0 [ 96.187308][ T7120] ? _parse_integer_limit+0x167/0x180 [ 96.192695][ T7120] ? kstrtouint_from_user+0xb0/0xe0 [ 96.197979][ T7120] do_filp_open+0x107/0x230 [ 96.202520][ T7120] do_sys_openat2+0xab/0x120 [ 96.207190][ T7120] __x64_sys_openat+0xf3/0x120 [ 96.212070][ T7120] x64_sys_call+0x2b30/0x2dc0 [ 96.216787][ T7120] do_syscall_64+0xc9/0x1c0 [ 96.221322][ T7120] ? clear_bhb_loop+0x55/0xb0 [ 96.226007][ T7120] ? clear_bhb_loop+0x55/0xb0 [ 96.230691][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.236735][ T7120] RIP: 0033:0x7fc593b95d29 [ 96.241161][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.260782][ T7120] RSP: 002b:00007fc592207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.269216][ T7120] RAX: ffffffffffffffda RBX: 00007fc593d85fa0 RCX: 00007fc593b95d29 [ 96.277189][ T7120] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 96.285214][ T7120] RBP: 00007fc592207090 R08: 0000000000000000 R09: 0000000000000000 [ 96.293182][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.301174][ T7120] R13: 0000000000000000 R14: 00007fc593d85fa0 R15: 00007ffe33595028 [ 96.309214][ T7120] [ 96.312355][ T7120] syz.0.1189: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 96.327429][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.0.1189 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 96.338199][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 96.348323][ T7120] Call Trace: [ 96.351614][ T7120] [ 96.354549][ T7120] dump_stack_lvl+0xf2/0x150 [ 96.359233][ T7120] dump_stack+0x15/0x1a [ 96.363422][ T7120] warn_alloc+0x145/0x1b0 [ 96.367808][ T7120] ? __get_vm_area_node+0xfb/0x1c0 [ 96.373015][ T7120] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 96.378861][ T7120] ? perf_trace_run_bpf_submit+0xb0/0x110 [ 96.384605][ T7120] ? perf_trace_kmalloc+0xe2/0x110 [ 96.389777][ T7120] ? tty_ldisc_get+0x1d0/0x200 [ 96.394570][ T7120] ? n_tty_open+0x1b/0xe0 [ 96.398919][ T7120] vzalloc_noprof+0x5e/0x70 [ 96.403515][ T7120] ? n_tty_open+0x1b/0xe0 [ 96.407853][ T7120] n_tty_open+0x1b/0xe0 [ 96.412060][ T7120] tty_ldisc_reinit+0x21a/0x320 [ 96.416952][ T7120] tty_reopen+0x188/0x1b0 [ 96.421304][ T7120] tty_open+0x8ff/0xb00 [ 96.425624][ T7120] chrdev_open+0x2f9/0x370 [ 96.430103][ T7120] ? __pfx_chrdev_open+0x10/0x10 [ 96.435149][ T7120] do_dentry_open+0x621/0xa20 [ 96.439876][ T7120] vfs_open+0x38/0x1f0 [ 96.444012][ T7120] path_openat+0x1ac2/0x1fa0 [ 96.448624][ T7120] ? _parse_integer_limit+0x167/0x180 [ 96.454110][ T7120] ? kstrtouint_from_user+0xb0/0xe0 [ 96.459335][ T7120] do_filp_open+0x107/0x230 [ 96.463929][ T7120] do_sys_openat2+0xab/0x120 [ 96.468532][ T7120] __x64_sys_openat+0xf3/0x120 [ 96.473394][ T7120] x64_sys_call+0x2b30/0x2dc0 [ 96.478081][ T7120] do_syscall_64+0xc9/0x1c0 [ 96.482675][ T7120] ? clear_bhb_loop+0x55/0xb0 [ 96.487422][ T7120] ? clear_bhb_loop+0x55/0xb0 [ 96.492126][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.498128][ T7120] RIP: 0033:0x7fc593b95d29 [ 96.502560][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.522282][ T7120] RSP: 002b:00007fc592207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.530977][ T7120] RAX: ffffffffffffffda RBX: 00007fc593d85fa0 RCX: 00007fc593b95d29 [ 96.539119][ T7120] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 96.547109][ T7120] RBP: 00007fc592207090 R08: 0000000000000000 R09: 0000000000000000 [ 96.555194][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.563223][ T7120] R13: 0000000000000000 R14: 00007fc593d85fa0 R15: 00007ffe33595028 [ 96.571220][ T7120] [ 96.574648][ T7120] Mem-Info: [ 96.577793][ T7120] active_anon:8832 inactive_anon:0 isolated_anon:0 [ 96.577793][ T7120] active_file:7457 inactive_file:12260 isolated_file:0 [ 96.577793][ T7120] unevictable:4 dirty:384 writeback:0 [ 96.577793][ T7120] slab_reclaimable:2895 slab_unreclaimable:14154 [ 96.577793][ T7120] mapped:28862 shmem:287 pagetables:921 [ 96.577793][ T7120] sec_pagetables:0 bounce:0 [ 96.577793][ T7120] kernel_misc_reclaimable:0 [ 96.577793][ T7120] free:1889421 free_pcp:5341 free_cma:0 [ 96.622636][ T7120] Node 0 active_anon:35212kB inactive_anon:0kB active_file:29828kB inactive_file:49040kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:115448kB dirty:1536kB writeback:0kB shmem:1148kB writeback_tmp:0kB kernel_stack:3184kB pagetables:3684kB sec_pagetables:0kB all_unreclaimable? no [ 96.650613][ T7120] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.677822][ T7120] lowmem_reserve[]: 0 2866 7844 0 [ 96.682944][ T7120] Node 0 DMA32 free:2950380kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 96.711793][ T7120] lowmem_reserve[]: 0 0 4978 0 [ 96.716690][ T7120] Node 0 Normal free:4591944kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:35212kB inactive_anon:0kB active_file:29828kB inactive_file:49040kB unevictable:16kB writepending:1448kB present:5242880kB managed:5098208kB mlocked:16kB bounce:0kB free_pcp:18460kB local_pcp:712kB free_cma:0kB [ 96.747137][ T7120] lowmem_reserve[]: 0 0 0 0 [ 96.751717][ T7120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.764807][ T7120] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950380kB [ 96.781161][ T7120] Node 0 Normal: 441*4kB (UME) 526*8kB (UME) 418*16kB (ME) 336*32kB (ME) 308*64kB (UME) 173*128kB (UME) 124*256kB (UME) 97*512kB (UME) 85*1024kB (UME) 60*2048kB (UME) 1034*4096kB (UM) = 4591860kB [ 96.784010][ T7134] FAULT_INJECTION: forcing a failure. [ 96.784010][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 96.800833][ T7120] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 96.813385][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.3.1193 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 96.813415][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 96.822838][ T7120] 20003 total pagecache pages [ 96.833529][ T7134] Call Trace: [ 96.833539][ T7134] [ 96.833549][ T7134] dump_stack_lvl+0xf2/0x150 [ 96.843668][ T7120] 0 pages in swap cache [ 96.848293][ T7134] dump_stack+0x15/0x1a [ 96.851582][ T7120] Free swap = 124532kB [ 96.851592][ T7120] Total swap = 124996kB [ 96.851600][ T7120] 2097051 pages RAM [ 96.854586][ T7134] should_fail_ex+0x223/0x230 [ 96.859199][ T7120] 0 pages HighMem/MovableOnly [ 96.863295][ T7134] should_failslab+0x8f/0xb0 [ 96.867470][ T7120] 80181 pages reserved [ 96.871583][ T7134] kmem_cache_alloc_noprof+0x52/0x320 [ 96.879490][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.879509][ T7134] ? __inet_hash_connect+0x601/0x1160 [ 96.916632][ T7134] ? inet_sk_get_local_port_range+0x80/0x100 [ 96.922645][ T7134] __inet_hash_connect+0x601/0x1160 [ 96.927847][ T7134] ? __pfx___inet6_check_established+0x10/0x10 [ 96.934018][ T7134] ? secure_ipv6_port_ephemeral+0xa4/0x130 [ 96.939962][ T7134] inet6_hash_connect+0x72/0x80 [ 96.944823][ T7134] tcp_v6_connect+0x9b0/0xc60 [ 96.949625][ T7134] __inet_stream_connect+0x162/0x790 [ 96.954941][ T7134] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 96.960370][ T7134] ? __kmalloc_cache_noprof+0x28c/0x320 [ 96.965953][ T7134] tcp_sendmsg_fastopen+0x40e/0x4f0 [ 96.971239][ T7134] tcp_sendmsg_locked+0x2513/0x2710 [ 96.976540][ T7134] ? mntput_no_expire+0x70/0x3c0 [ 96.981514][ T7134] ? __rcu_read_unlock+0x4e/0x70 [ 96.986481][ T7134] ? avc_has_perm_noaudit+0x1cc/0x210 [ 96.991943][ T7134] ? avc_has_perm+0xd4/0x160 [ 96.996556][ T7134] ? _raw_spin_unlock_bh+0x36/0x40 [ 97.001695][ T7134] ? __pfx_tcp_sendmsg+0x10/0x10 [ 97.006646][ T7134] tcp_sendmsg+0x30/0x50 [ 97.010904][ T7134] inet6_sendmsg+0x77/0xd0 [ 97.015337][ T7134] __sock_sendmsg+0x8b/0x180 [ 97.020003][ T7134] __sys_sendto+0x1a8/0x230 [ 97.024581][ T7134] __x64_sys_sendto+0x78/0x90 [ 97.029785][ T7134] x64_sys_call+0x29fa/0x2dc0 [ 97.034472][ T7134] do_syscall_64+0xc9/0x1c0 [ 97.038986][ T7134] ? clear_bhb_loop+0x55/0xb0 [ 97.043750][ T7134] ? clear_bhb_loop+0x55/0xb0 [ 97.048481][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.054398][ T7134] RIP: 0033:0x7fe057d75d29 [ 97.058816][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.078501][ T7134] RSP: 002b:00007fe0563e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.087016][ T7134] RAX: ffffffffffffffda RBX: 00007fe057f65fa0 RCX: 00007fe057d75d29 [ 97.095045][ T7134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 97.103095][ T7134] RBP: 00007fe0563e1090 R08: 0000000020000100 R09: 000000000000001c [ 97.111077][ T7134] R10: fffffefffbfbbfbe R11: 0000000000000246 R12: 0000000000000001 [ 97.119187][ T7134] R13: 0000000000000000 R14: 00007fe057f65fa0 R15: 00007fff286d4c88 [ 97.127183][ T7134] [ 97.142552][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.205653][ T7147] __nla_validate_parse: 4 callbacks suppressed [ 97.205671][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1196'. [ 97.227178][ T7148] loop3: detected capacity change from 0 to 512 [ 97.260042][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.269595][ T7154] team0 (unregistering): Port device team_slave_0 removed [ 97.294675][ T7148] EXT4-fs mount: 41 callbacks suppressed [ 97.294694][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.319943][ T7148] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.321281][ T7154] team0 (unregistering): Port device team_slave_1 removed [ 97.366861][ T7154] team0 (unregistering): Port device bridge1 removed [ 97.394133][ T7165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7165 comm=syz.0.1201 [ 97.417220][ T7148] x_tables: duplicate underflow at hook 1 [ 97.453048][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.489949][ T7178] loop2: detected capacity change from 0 to 128 [ 97.524549][ T7178] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.537824][ T7178] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.592344][ T7184] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 97.625028][ T7178] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 97.665486][ T7178] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 97.706460][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7202 comm=syz.1.1212 [ 97.722133][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.778266][ T7210] FAULT_INJECTION: forcing a failure. [ 97.778266][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 97.791036][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz.2.1216 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 97.801748][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 97.811829][ T7210] Call Trace: [ 97.815242][ T7210] [ 97.818185][ T7210] dump_stack_lvl+0xf2/0x150 [ 97.822816][ T7210] dump_stack+0x15/0x1a [ 97.827088][ T7210] should_fail_ex+0x223/0x230 [ 97.831799][ T7210] should_failslab+0x8f/0xb0 [ 97.836526][ T7210] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 97.842915][ T7210] ? audit_log_vformat+0x23a/0x490 [ 97.848140][ T7210] ? sidtab_sid2str_get+0xb8/0x140 [ 97.853426][ T7210] kmemdup_noprof+0x2a/0x60 [ 97.857978][ T7210] sidtab_sid2str_get+0xb8/0x140 [ 97.862951][ T7210] security_sid_to_context_core+0x1eb/0x2f0 [ 97.868966][ T7210] security_sid_to_context+0x27/0x30 [ 97.874363][ T7210] avc_audit_post_callback+0x10d/0x530 [ 97.879859][ T7210] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 97.885906][ T7210] common_lsm_audit+0x90f/0x1010 [ 97.890917][ T7210] ? avc_denied+0xf1/0x110 [ 97.895367][ T7210] slow_avc_audit+0xf9/0x140 [ 97.900007][ T7210] avc_has_perm+0x129/0x160 [ 97.904551][ T7210] sel_write_load+0xe5/0x360 [ 97.909184][ T7210] ? __pfx_sel_write_load+0x10/0x10 [ 97.913119][ T7227] x_tables: duplicate underflow at hook 1 [ 97.914404][ T7210] vfs_write+0x281/0x920 [ 97.914445][ T7210] ? putname+0xcf/0xf0 [ 97.914465][ T7210] ? __fget_files+0x17c/0x1c0 [ 97.930233][ T7227] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 97.933158][ T7210] ksys_write+0xe8/0x1b0 [ 97.945790][ T7210] __x64_sys_write+0x42/0x50 [ 97.950439][ T7210] x64_sys_call+0x287e/0x2dc0 [ 97.955128][ T7210] do_syscall_64+0xc9/0x1c0 [ 97.959749][ T7210] ? clear_bhb_loop+0x55/0xb0 [ 97.964461][ T7210] ? clear_bhb_loop+0x55/0xb0 [ 97.969202][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.975293][ T7210] RIP: 0033:0x7fd68a6d5d29 [ 97.979707][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.999334][ T7210] RSP: 002b:00007fd688d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.007759][ T7210] RAX: ffffffffffffffda RBX: 00007fd68a8c5fa0 RCX: 00007fd68a6d5d29 [ 98.015776][ T7210] RDX: 0000000000002000 RSI: 0000000020000180 RDI: 0000000000000005 [ 98.023883][ T7210] RBP: 00007fd688d47090 R08: 0000000000000000 R09: 0000000000000000 [ 98.031852][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.040009][ T7210] R13: 0000000000000000 R14: 00007fd68a8c5fa0 R15: 00007ffe33f280a8 [ 98.048081][ T7210] [ 98.051428][ T7210] SELinux: policydb version 0 does not match my version range 15-33 [ 98.060081][ T7210] SELinux: failed to load policy [ 98.237283][ T7253] SELinux: policydb version 0 does not match my version range 15-33 [ 98.251149][ T7255] loop2: detected capacity change from 0 to 128 [ 98.264617][ T7243] random: crng reseeded on system resumption [ 98.270331][ T7253] SELinux: failed to load policy [ 98.284738][ T7243] FAULT_INJECTION: forcing a failure. [ 98.284738][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 98.297478][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.3.1219 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 98.308167][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 98.318367][ T7243] Call Trace: [ 98.321722][ T7243] [ 98.324651][ T7243] dump_stack_lvl+0xf2/0x150 [ 98.329262][ T7243] dump_stack+0x15/0x1a [ 98.333513][ T7243] should_fail_ex+0x223/0x230 [ 98.338202][ T7243] ? create_basic_memory_bitmaps+0x90/0x600 [ 98.344119][ T7243] should_failslab+0x8f/0xb0 [ 98.348726][ T7243] __kmalloc_cache_noprof+0x4e/0x320 [ 98.354038][ T7243] create_basic_memory_bitmaps+0x90/0x600 [ 98.359865][ T7243] snapshot_open+0x1b0/0x260 [ 98.364460][ T7243] ? __pfx_snapshot_open+0x10/0x10 [ 98.369577][ T7243] misc_open+0x1d5/0x200 [ 98.373851][ T7243] chrdev_open+0x2f9/0x370 [ 98.378360][ T7243] ? __pfx_chrdev_open+0x10/0x10 [ 98.383335][ T7243] do_dentry_open+0x621/0xa20 [ 98.388021][ T7243] vfs_open+0x38/0x1f0 [ 98.392096][ T7243] path_openat+0x1ac2/0x1fa0 [ 98.396697][ T7243] ? _parse_integer_limit+0x167/0x180 [ 98.402142][ T7243] ? kstrtouint_from_user+0xb0/0xe0 [ 98.407347][ T7243] do_filp_open+0x107/0x230 [ 98.412056][ T7243] do_sys_openat2+0xab/0x120 [ 98.416737][ T7243] __x64_sys_openat+0xf3/0x120 [ 98.421529][ T7243] x64_sys_call+0x2b30/0x2dc0 [ 98.426216][ T7243] do_syscall_64+0xc9/0x1c0 [ 98.430723][ T7243] ? clear_bhb_loop+0x55/0xb0 [ 98.435485][ T7243] ? clear_bhb_loop+0x55/0xb0 [ 98.440231][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.446146][ T7243] RIP: 0033:0x7fe057d75d29 [ 98.450597][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.470211][ T7243] RSP: 002b:00007fe0563e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.478628][ T7243] RAX: ffffffffffffffda RBX: 00007fe057f65fa0 RCX: 00007fe057d75d29 [ 98.486676][ T7243] RDX: 0000000000000401 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 98.494658][ T7243] RBP: 00007fe0563e1090 R08: 0000000000000000 R09: 0000000000000000 [ 98.502631][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.510604][ T7243] R13: 0000000000000000 R14: 00007fe057f65fa0 R15: 00007fff286d4c88 [ 98.518583][ T7243] [ 98.554580][ T7255] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.572483][ T7255] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.711178][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 98.711193][ T29] audit: type=1326 audit(1734497408.685:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.740316][ T29] audit: type=1326 audit(1734497408.685:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.748833][ T7285] netlink: 'syz.5.1228': attribute type 1 has an invalid length. [ 98.767655][ T7255] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 98.771042][ T7285] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1228'. [ 98.841562][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 98.854831][ T29] audit: type=1400 audit(1734497408.705:6699): avc: denied { setopt } for pid=7279 comm="syz.5.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.874617][ T29] audit: type=1326 audit(1734497408.735:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.897614][ T29] audit: type=1326 audit(1734497408.735:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.920630][ T29] audit: type=1326 audit(1734497408.735:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.943726][ T29] audit: type=1326 audit(1734497408.735:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.966961][ T29] audit: type=1326 audit(1734497408.765:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 98.989962][ T29] audit: type=1326 audit(1734497408.765:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 99.012880][ T29] audit: type=1326 audit(1734497408.765:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7254 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68a6d5d29 code=0x7ffc0000 [ 99.046343][ T7273] FAULT_INJECTION: forcing a failure. [ 99.046343][ T7273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.059473][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.0.1227 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 99.070339][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 99.080412][ T7273] Call Trace: [ 99.083734][ T7273] [ 99.086677][ T7273] dump_stack_lvl+0xf2/0x150 [ 99.091361][ T7273] dump_stack+0x15/0x1a [ 99.095571][ T7273] should_fail_ex+0x223/0x230 [ 99.100356][ T7273] should_fail+0xb/0x10 [ 99.104586][ T7273] should_fail_usercopy+0x1a/0x20 [ 99.109641][ T7273] _copy_to_user+0x20/0xa0 [ 99.114122][ T7273] store_msg+0x4e/0xf0 [ 99.118213][ T7273] do_mq_timedreceive+0x5a8/0x6d0 [ 99.123279][ T7273] __x64_sys_mq_timedreceive+0xca/0x150 [ 99.128871][ T7273] x64_sys_call+0x18f1/0x2dc0 [ 99.133565][ T7273] do_syscall_64+0xc9/0x1c0 [ 99.138153][ T7273] ? clear_bhb_loop+0x55/0xb0 [ 99.142838][ T7273] ? clear_bhb_loop+0x55/0xb0 [ 99.147599][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.153528][ T7273] RIP: 0033:0x7fc593b95d29 [ 99.157962][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.177700][ T7273] RSP: 002b:00007fc592207038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 99.186219][ T7273] RAX: ffffffffffffffda RBX: 00007fc593d85fa0 RCX: 00007fc593b95d29 [ 99.194262][ T7273] RDX: ffffffffffffffe7 RSI: 0000000000000000 RDI: 0000000000000003 [ 99.202307][ T7273] RBP: 00007fc592207090 R08: 0000000000000000 R09: 0000000000000000 [ 99.210395][ T7273] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 99.218510][ T7273] R13: 0000000000000000 R14: 00007fc593d85fa0 R15: 00007ffe33595028 [ 99.226506][ T7273] [ 99.258681][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.264525][ T7305] loop5: detected capacity change from 0 to 512 [ 99.276847][ T3377] net_ratelimit: 6 callbacks suppressed [ 99.276868][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.310098][ T7305] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1231: corrupted in-inode xattr: invalid ea_ino [ 99.375512][ T7305] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1231: couldn't read orphan inode 15 (err -117) [ 99.388050][ T7305] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.428432][ T7317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1236'. [ 99.472804][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1231'. [ 99.543966][ T7324] syz.3.1239[7324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.544055][ T7324] syz.3.1239[7324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.589683][ T7324] syz.3.1239[7324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.657415][ T7331] FAULT_INJECTION: forcing a failure. [ 99.657415][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.682038][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.0.1242 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 99.692745][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 99.702837][ T7331] Call Trace: [ 99.706127][ T7331] [ 99.709063][ T7331] dump_stack_lvl+0xf2/0x150 [ 99.713750][ T7331] dump_stack+0x15/0x1a [ 99.717926][ T7331] should_fail_ex+0x223/0x230 [ 99.722758][ T7331] should_fail+0xb/0x10 [ 99.726922][ T7331] should_fail_usercopy+0x1a/0x20 [ 99.732052][ T7331] _copy_from_user+0x1e/0xb0 [ 99.736691][ T7331] do_ipv6_getsockopt+0x12d/0x1430 [ 99.741826][ T7331] ? __rcu_read_unlock+0x4e/0x70 [ 99.746804][ T7331] ? avc_has_perm_noaudit+0x1cc/0x210 [ 99.752270][ T7331] ipv6_getsockopt+0x75/0x1e0 [ 99.757056][ T7331] tcp_getsockopt+0xaa/0xe0 [ 99.761581][ T7331] sock_common_getsockopt+0x5b/0x70 [ 99.766804][ T7331] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 99.772777][ T7331] do_sock_getsockopt+0x1ca/0x260 [ 99.777833][ T7331] __x64_sys_getsockopt+0x18c/0x200 [ 99.783170][ T7331] x64_sys_call+0x1288/0x2dc0 [ 99.787858][ T7331] do_syscall_64+0xc9/0x1c0 [ 99.792366][ T7331] ? clear_bhb_loop+0x55/0xb0 [ 99.797054][ T7331] ? clear_bhb_loop+0x55/0xb0 [ 99.801739][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.807678][ T7331] RIP: 0033:0x7fc593b95d29 [ 99.812251][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.831977][ T7331] RSP: 002b:00007fc592207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 99.840411][ T7331] RAX: ffffffffffffffda RBX: 00007fc593d85fa0 RCX: 00007fc593b95d29 [ 99.848392][ T7331] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 99.856399][ T7331] RBP: 00007fc592207090 R08: 0000000020000300 R09: 0000000000000000 [ 99.864372][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.872403][ T7331] R13: 0000000000000000 R14: 00007fc593d85fa0 R15: 00007ffe33595028 [ 99.880385][ T7331] [ 99.889088][ T5751] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 100.069025][ T7343] syz.5.1245[7343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.069159][ T7343] syz.5.1245[7343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.085156][ T7343] syz.5.1245[7343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.115835][ T7343] futex_wake_op: syz.5.1245 tries to shift op by 144; fix this program [ 100.167113][ T7354] random: crng reseeded on system resumption [ 100.258236][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7362 comm=syz.0.1250 [ 100.273491][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.319375][ T7364] loop3: detected capacity change from 0 to 256 [ 100.358727][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.385964][ T7364] FAT-fs (loop3): Directory bread(block 64) failed [ 100.394241][ T7364] FAT-fs (loop3): Directory bread(block 65) failed [ 100.402100][ T7364] FAT-fs (loop3): Directory bread(block 66) failed [ 100.414378][ T7364] FAT-fs (loop3): Directory bread(block 67) failed [ 100.425011][ T7364] FAT-fs (loop3): Directory bread(block 68) failed [ 100.431718][ T7364] FAT-fs (loop3): Directory bread(block 69) failed [ 100.438438][ T7364] FAT-fs (loop3): Directory bread(block 70) failed [ 100.453395][ T7364] FAT-fs (loop3): Directory bread(block 71) failed [ 100.460187][ T7364] FAT-fs (loop3): Directory bread(block 72) failed [ 100.467930][ T7364] FAT-fs (loop3): Directory bread(block 73) failed [ 100.548878][ T7364] No such timeout policy "syz1" [ 100.570674][ T7364] syz.3.1251: attempt to access beyond end of device [ 100.570674][ T7364] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 100.599213][ T7375] loop5: detected capacity change from 0 to 764 [ 100.794727][ T7391] loop3: detected capacity change from 0 to 512 [ 100.811995][ T7393] loop5: detected capacity change from 0 to 512 [ 100.817890][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.827865][ T7391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.846663][ T7393] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.859084][ T7391] EXT4-fs (loop3): 1 truncate cleaned up [ 100.869596][ T7391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.891858][ T7402] FAULT_INJECTION: forcing a failure. [ 100.891858][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.899475][ T7393] EXT4-fs (loop5): 1 truncate cleaned up [ 100.904973][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.2.1260 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 100.921277][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 100.924033][ T7393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.931402][ T7402] Call Trace: [ 100.931412][ T7402] [ 100.931422][ T7402] dump_stack_lvl+0xf2/0x150 [ 100.931478][ T7402] dump_stack+0x15/0x1a [ 100.958959][ T7402] should_fail_ex+0x223/0x230 [ 100.963736][ T7402] should_fail+0xb/0x10 [ 100.967960][ T7402] should_fail_usercopy+0x1a/0x20 [ 100.973012][ T7402] _copy_from_user+0x1e/0xb0 [ 100.977651][ T7402] vmemdup_user+0x12e/0x1b0 [ 100.982349][ T7402] path_setxattrat+0x1c9/0x310 [ 100.987601][ T7402] __x64_sys_lsetxattr+0x71/0x90 [ 100.992581][ T7402] x64_sys_call+0x29c8/0x2dc0 [ 100.997284][ T7402] do_syscall_64+0xc9/0x1c0 [ 101.001809][ T7402] ? clear_bhb_loop+0x55/0xb0 [ 101.006550][ T7402] ? clear_bhb_loop+0x55/0xb0 [ 101.011244][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.017251][ T7402] RIP: 0033:0x7fd68a6d5d29 [ 101.021679][ T7402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.041437][ T7402] RSP: 002b:00007fd688d47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.049888][ T7402] RAX: ffffffffffffffda RBX: 00007fd68a8c5fa0 RCX: 00007fd68a6d5d29 [ 101.057960][ T7402] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000020000400 [ 101.066047][ T7402] RBP: 00007fd688d47090 R08: 0000000000000000 R09: 0000000000000000 [ 101.066058][ T7408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7408 comm=syz.1.1263 [ 101.074026][ T7402] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001 [ 101.074044][ T7402] R13: 0000000000000000 R14: 00007fd68a8c5fa0 R15: 00007ffe33f280a8 [ 101.074067][ T7402] [ 101.106736][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.116904][ T5751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.134096][ T7414] loop2: detected capacity change from 0 to 256 [ 101.182756][ T7414] FAT-fs (loop2): Directory bread(block 64) failed [ 101.186567][ T7418] loop3: detected capacity change from 0 to 128 [ 101.194910][ T7414] FAT-fs (loop2): Directory bread(block 65) failed [ 101.202718][ T7414] FAT-fs (loop2): Directory bread(block 66) failed [ 101.209591][ T7414] FAT-fs (loop2): Directory bread(block 67) failed [ 101.216422][ T7414] FAT-fs (loop2): Directory bread(block 68) failed [ 101.223009][ T7414] FAT-fs (loop2): Directory bread(block 69) failed [ 101.229670][ T7414] FAT-fs (loop2): Directory bread(block 70) failed [ 101.234107][ T7418] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.236807][ T7414] FAT-fs (loop2): Directory bread(block 71) failed [ 101.255012][ T7414] FAT-fs (loop2): Directory bread(block 72) failed [ 101.261916][ T7414] FAT-fs (loop2): Directory bread(block 73) failed [ 101.320054][ T7414] No such timeout policy "syz1" [ 101.333015][ T7414] syz.2.1266: attempt to access beyond end of device [ 101.333015][ T7414] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 101.346760][ T7418] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.473074][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.489828][ T7443] xt_hashlimit: size too large, truncated to 1048576 [ 101.594085][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 101.660234][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 101.821927][ T7467] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 102.108975][ T7473] syzkaller1: entered promiscuous mode [ 102.114501][ T7473] syzkaller1: entered allmulticast mode [ 102.130175][ T7475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7475 comm=syz.0.1279 [ 102.155756][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.221819][ T7477] loop5: detected capacity change from 0 to 8192 [ 102.285354][ T7477] loop5: p1 p2 p3 p4 [ 102.289516][ T7477] loop5: p1 start 17760256 is beyond EOD, truncated [ 102.296256][ T7477] loop5: p2 size 64053 extends beyond EOD, truncated [ 102.300344][ T7481] No such timeout policy "syz1" [ 102.309732][ T7477] loop5: p3 start 458496 is beyond EOD, truncated [ 102.316353][ T7477] loop5: p4 size 50331648 extends beyond EOD, truncated [ 102.351056][ T2998] loop5: p1 p2 p3 p4 [ 102.361912][ T2998] loop5: p1 start 17760256 is beyond EOD, truncated [ 102.368699][ T2998] loop5: p2 size 64053 extends beyond EOD, truncated [ 102.382366][ T7487] loop3: detected capacity change from 0 to 1024 [ 102.389706][ T2998] loop5: p3 start 458496 is beyond EOD, truncated [ 102.396279][ T2998] loop5: p4 size 50331648 extends beyond EOD, truncated [ 102.403611][ T7487] EXT4-fs: Ignoring removed orlov option [ 102.409333][ T7487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.425762][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 102.437155][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 102.451993][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.471111][ T7497] FAULT_INJECTION: forcing a failure. [ 102.471111][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 102.483807][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.5.1287 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 102.494589][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 102.504662][ T7497] Call Trace: [ 102.507947][ T7497] [ 102.510957][ T7497] dump_stack_lvl+0xf2/0x150 [ 102.515583][ T7497] dump_stack+0x15/0x1a [ 102.519755][ T7497] should_fail_ex+0x223/0x230 [ 102.524486][ T7497] should_failslab+0x8f/0xb0 [ 102.529113][ T7497] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 102.535063][ T7497] ? shmem_alloc_inode+0x34/0x50 [ 102.540042][ T7497] shmem_alloc_inode+0x34/0x50 [ 102.543608][ T3804] udevd[3804]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 102.544820][ T7497] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 102.556045][ T3486] udevd[3486]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 102.559988][ T7497] alloc_inode+0x3c/0x160 [ 102.560023][ T7497] new_inode+0x1e/0x100 [ 102.560042][ T7497] shmem_get_inode+0x24e/0x730 [ 102.583103][ T7497] __shmem_file_setup+0x127/0x1f0 [ 102.588195][ T7497] shmem_file_setup+0x3b/0x50 [ 102.592911][ T7497] __se_sys_memfd_create+0x31d/0x5c0 [ 102.598230][ T7502] xt_hashlimit: size too large, truncated to 1048576 [ 102.598264][ T7497] __x64_sys_memfd_create+0x31/0x40 [ 102.610309][ T7497] x64_sys_call+0x2d4c/0x2dc0 [ 102.615036][ T7497] do_syscall_64+0xc9/0x1c0 [ 102.619684][ T7497] ? clear_bhb_loop+0x55/0xb0 [ 102.624374][ T7497] ? clear_bhb_loop+0x55/0xb0 [ 102.629100][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.635028][ T7497] RIP: 0033:0x7fc230d45d29 [ 102.639479][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.659156][ T7497] RSP: 002b:00007fc22f3b6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 102.667615][ T7497] RAX: ffffffffffffffda RBX: 000000000000105b RCX: 00007fc230d45d29 [ 102.675724][ T7497] RDX: 00007fc22f3b6dec RSI: 0000000000000000 RDI: 00007fc230dc2381 [ 102.683751][ T7497] RBP: 0000000020000000 R08: 00007fc22f3b6b07 R09: 0000000000000000 [ 102.691750][ T7497] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 102.699735][ T7497] R13: 00007fc22f3b6dec R14: 00007fc22f3b6df0 R15: 00007ffd6fe013f8 [ 102.707758][ T7497] [ 102.755573][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.060552][ T3286] ================================================================== [ 103.068763][ T3286] BUG: KCSAN: data-race in __mark_inode_dirty / redirty_tail_locked [ 103.076766][ T3286] [ 103.079106][ T3286] read-write to 0xffff8881064d2eb8 of 4 bytes by task 28 on cpu 0: [ 103.087011][ T3286] redirty_tail_locked+0x54/0x270 [ 103.092053][ T3286] writeback_sb_inodes+0x6e6/0xa30 [ 103.097189][ T3286] wb_writeback+0x262/0x640 [ 103.101700][ T3286] wb_workfn+0x1a8/0x940 [ 103.105972][ T3286] process_scheduled_works+0x483/0x9a0 [ 103.111463][ T3286] worker_thread+0x51d/0x6f0 [ 103.116165][ T3286] kthread+0x1d1/0x210 [ 103.120251][ T3286] ret_from_fork+0x4b/0x60 [ 103.124682][ T3286] ret_from_fork_asm+0x1a/0x30 [ 103.129475][ T3286] [ 103.131819][ T3286] read to 0xffff8881064d2eb8 of 4 bytes by task 3286 on cpu 1: [ 103.136034][ T7525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.139450][ T3286] __mark_inode_dirty+0x198/0x7e0 [ 103.139477][ T3286] mark_buffer_dirty+0x149/0x230 [ 103.139502][ T3286] block_page_mkwrite+0x29c/0x3f0 [ 103.139531][ T3286] ext4_page_mkwrite+0x73d/0xb70 [ 103.139549][ T3286] do_wp_page+0xca1/0x2340 [ 103.152712][ T7525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.157531][ T3286] handle_mm_fault+0xc63/0x2ac0 [ 103.157558][ T3286] exc_page_fault+0x3b9/0x650 [ 103.189596][ T3286] asm_exc_page_fault+0x26/0x30 [ 103.194478][ T3286] [ 103.196814][ T3286] value changed: 0x0001002a -> 0x00000028 [ 103.202536][ T3286] [ 103.204856][ T3286] Reported by Kernel Concurrency Sanitizer on: [ 103.211003][ T3286] CPU: 1 UID: 0 PID: 3286 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 103.221850][ T3286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 103.231904][ T3286] ================================================================== [ 103.325358][ T7527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7527 comm=syz.0.1292 [ 103.787436][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.885357][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.946946][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.827481][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.865974][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.505647][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.905253][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.913420][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.947632][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.987293][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.945421][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.027135][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.067345][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.117164][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.985430][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog