last executing test programs: 27.57648396s ago: executing program 0 (id=7): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x1800, r4, 0xa}) 27.255638911s ago: executing program 0 (id=9): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "f5c99f"}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) 26.933947801s ago: executing program 0 (id=11): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x7) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffd, 0xaa, 0xf8, @buffer={0x0, 0x7f, &(0x7f00000003c0)=""/127}, &(0x7f0000000600)="ce85ca05eff4d51bafd78fb172d03aec530cec2e87a1cf667777d366dbb5dd5d3e1a86162c17e98b4e98e588a297dfdd7392ebffaab0e96e5a6329387229f129e452cd2d41308aabeb2d292dea3901e335794e3cbc2442ec33ac87b1e32c988d8f93ded5ca3175758cdaef61d5b2f6f7310de40d7aef98d06586de303b79176c70f1340dd25f976c52968d38629512a78b534e64729a1ed1b61761e607ed42717b3d8656a2493965217b", &(0x7f00000006c0)=""/170, 0x8, 0x12, 0x3, &(0x7f0000000080)}) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 26.853030082s ago: executing program 0 (id=12): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f00000002c0)='./bus\x00', r0, 0x4000, r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r5 = open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x297881, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) sendfile(r5, r4, 0x0, 0x8000000d) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 26.689950552s ago: executing program 0 (id=14): mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000001) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) io_setup(0x5ff, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, &(0x7f0000000040)) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) open(0x0, 0x0, 0x0) statx(r2, 0x0, 0x6000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x24, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aaff0200000000000000000000007f00000000000000000000fe8000000000000000000000000000aa0e02000000000000000000000000000101012025b07f3c5809369f40775df3b342a0863d45dd73f27ce0664c47a14742b72e734b2dc45623cf6457097f4ca2e087aba26e065aac592ef87c9f53fe3c3bf6477635443fb4e8599cfcde2d323218b148ca6f1fce0d93036d9d8bc254f8f76677d320b0c3a8091b04aff680acc50f607d9fe4f675cdd986600bc79d4bc23ee205a8282cfa8400a0bc0c8ccdf9517665f4b877b01d20e4ed10892060bf33a9fd7eae0932"], 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x0, 0x97, 0x40}, 0x10) 25.970499244s ago: executing program 0 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x800}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 25.970169054s ago: executing program 32 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x800}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 23.256563722s ago: executing program 5 (id=18): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = open(0x0, 0x165542, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001200)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a09030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214", @ANYRESDEC], 0xc0}, 0x1, 0x0, 0x0, 0x40895}, 0x20008800) 22.360687155s ago: executing program 5 (id=52): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (fail_nth: 2) 21.799875536s ago: executing program 5 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r3}, 0x14) (fail_nth: 2) 21.760602286s ago: executing program 5 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) (async) mount$9p_tcp(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e21}}) 21.478496717s ago: executing program 5 (id=55): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000003000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$eJzs3U1vG1sZAODXzpeTm3uTW7oABLSUQkFVncRto6oLKCuEUCVElyC1IXGjKHYcxU5pQhfpf0CiEitY8gNYd8WeDYIdm7JA4iMCNZVYGM14kpo0bkKT2CF+Hmk0c+Y4fs+pNefYr+s5AfStyxGxFRHDEfEoIiay87lsi3utLXnc6+1n8zvbz+Zz0Ww++HsurU/ORdvfJD7KnrMQET/4TsSPc+/GrW9sLs9VKuW1VnF0qlFdnapvbN5Yqs4tlhfLK6XS7Mzs9J2bt0sn1tdL1eHs6Iuvfrf1jZ8mzRrPzrT34yS1uj60FycxGBHfO41gPTCQ9We41w3hg+Qj4kJEXEmv/4kYSF9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXDuxhj+Uqt3rj+uLa+stDKlU3GUP7xUqU8neUKJ2Mol5Rn0uO35dK+8s2I+DQifjYympaL87XKQi/f+ABAH/to3/z/r5HW/A8AnHOFXjcAAOg68z8A9B/zPwD0H/M/APQf8z8A9B/zPwD0n8Pm/wPu3wkA/P/6/v37ydbcye5/vfBkY3259uTGQrm+XKyuzxfna2urxcVabTG9Z0/1sOer1GqrM7di/enkN1frjan6xubDam19pfEwva/3w/JQV3oFALzPp5de/jH5eL91dzTdom0tB3M1nG/5XjcA6JmBXjcA6BmrfUH/OsZnfOkBOCcO+y8+hYgY3X+y2Ww2T69JwCm79jn5f+hXbfl/vwKCPiP/D/1L/h/6V7OZO+qa/3HUBwIAZ5scP9Dh+/8L2f7X2ZcDP1rY/4gXp9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONt21/8tZmuBj0c+XyxGfBwRkzGUe7xUKU9HxCcR8YeRoZGkPNPjNgMAx5X/Sy5b/+vaxNXx/bXDuTcj6T4ifvKLBz9/OtdorP0+Of+PvfONF9n5Ui/aDwAcZneeTvdtH+Rfbz+b39262Z6/fjsiCq34O9vDsbMXfzAG030hhiJi7J+5rNySa8tdHMfW84j47EH9z8V4mgNprXy6P34S++Ouxs//V/x8WtfaJ/8WnzmBtkC/eZmMP/cOuv7ycTndH3z9F9IR6viy8S95qvmddAx8G393/BvoMP5dPmqMW7/9buto9N265xGfH4zYjb3TNv7sxs91iH/1iPH/9IUvXelU1/xlxLU4OH57rKlGdXWqvrF5Y6k6t1heLK+USrMzs9N3bt4uTaU56qnOs8Hf7l7/pFNd0v+xDvELh/T/q0fs/6/+/eiHX35P/K9/5aD4+bj4nvjJnPi1I8afG/tNoVNdEn+hQ/8Pe/2vHzH+qz9vvrNsOADQO/WNzeW5SqW81s2D3TcSXQ3q4BwctBIeibPRnvaDb3Ur1nD8T3/VbH5QrE4jxklk3YCzYO+ij4g3vW4MAAAAAAAAAAAAAABwoG78YqnXfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8+k8AAAD//2CSzDE=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x1800, r4, 0xa}) 20.64439391s ago: executing program 5 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000080009"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000000505000200070000003c0001800c00010062697477697365002c000280080001401000001408000340000000020800024000000012040005800c00048006000100d40f00000900010073797a30"], 0x110}}, 0x0) r9 = dup(r7) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000000a00)={0x0, 0x1000, 0xa36, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000f00)={r12, "ddf8f5923348fa457bd48dbfe90db350"}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x10000000, 0x8, 0x450}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 20.59358388s ago: executing program 33 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000080009"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000000505000200070000003c0001800c00010062697477697365002c000280080001401000001408000340000000020800024000000012040005800c00048006000100d40f00000900010073797a30"], 0x110}}, 0x0) r9 = dup(r7) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000000a00)={0x0, 0x1000, 0xa36, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000f00)={r12, "ddf8f5923348fa457bd48dbfe90db350"}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x10000000, 0x8, 0x450}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 2.198026403s ago: executing program 2 (id=310): socket$netlink(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000300), 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000580)=ANY=[], 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f0000000140)=0xc) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c80)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000e80)="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", 0x14e, r5}, 0x68) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(r8) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1.521186316s ago: executing program 2 (id=322): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027}) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40008c0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x8}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCGETA(r5, 0x5433, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) 1.209896936s ago: executing program 3 (id=326): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.200407826s ago: executing program 3 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 1.156237737s ago: executing program 4 (id=330): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.148526117s ago: executing program 3 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000011"], 0x24}}, 0x0) 1.103969097s ago: executing program 3 (id=332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pivot_root(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd(0x800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="1493ba74ed74ba32", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004030}, 0x4000) 997.350307ms ago: executing program 1 (id=335): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 9) 996.953497ms ago: executing program 2 (id=336): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x18}}, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) (async) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x18}}, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) (async) 996.660427ms ago: executing program 6 (id=337): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="163c8f3f8a5d66571e583e7c88a8de0688a823e786dd", 0x16, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 799.564698ms ago: executing program 6 (id=338): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x7) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffd, 0xaa, 0xf8, @buffer={0x0, 0x7f, &(0x7f00000003c0)=""/127}, &(0x7f0000000600)="ce85ca05eff4d51bafd78fb172d03aec530cec2e87a1cf667777d366dbb5dd5d3e1a86162c17e98b4e98e588a297dfdd7392ebffaab0e96e5a6329387229f129e452cd2d41308aabeb2d292dea3901e335794e3cbc2442ec33ac87b1e32c988d8f93ded5ca3175758cdaef61d5b2f6f7310de40d7aef98d06586de303b79176c70f1340dd25f976c52968d38629512a78b534e64729a1ed1b61761e607ed42717b3d8656a2493965217b", &(0x7f00000006c0)=""/170, 0x8, 0x12, 0x3, &(0x7f0000000080)}) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 799.167218ms ago: executing program 4 (id=339): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 797.261358ms ago: executing program 3 (id=340): syz_io_uring_setup(0x5fca, &(0x7f0000000a40)={0x0, 0xde53, 0x100, 0x1, 0x6b}, &(0x7f0000000980)=0x0, &(0x7f0000000ac0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xcf72c555b4dfa515, &(0x7f0000000b00)=0x8, 0x0, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3008018, &(0x7f00000003c0), 0x0, 0x535, &(0x7f0000000400)="$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") 771.303767ms ago: executing program 1 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 770.449308ms ago: executing program 4 (id=342): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="60008100", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000a47100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x258, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x230, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}]}], {0x14}}, 0x29c}, 0x1, 0x0, 0x0, 0x8}, 0x80) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x1}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4880) syz_clone(0x8000880, &(0x7f00000003c0)="d23cbe9b08138a171bab25bcae216885d1c5104c39764b0d3dfc857544f507981f817ee2b02513baf3ad77b674ac144952eb5ceac28da2659860bfccc7c73032901eaaf424469dc0d5297776670131e08cdbab9dfc70b5d1f11936fcc735d495f5740d6ec8217f5691d5689ddd5aeca5000120b2cc03d3a5f170c928db5b13e2abd178016d25cd8f60faf86c00713d3e2b48ddd375a245ed239afef389c305f83653c6567e3deda06c645f291dd3cbf5f359e0dbc560097fbfcda9f0c632294b5db5067fdd30c83e149a", 0xca, &(0x7f0000000540), &(0x7f0000000600), &(0x7f0000000640)="65403418832244fd132a28aa3e65e7d383cb127c2902f5a170ae405a6ae9dfc92a3d0b9136860c8ae539e70c670f8674dd0c44af638c07054875d6cd56ce787d4197f84969e53e78bcc6bbe9e3a558b253fffc37c5c033e1dd6d9584fbb36c71aeec579630c66f5e38af938c9c44dee8b9df2853e151d02e4b6616e301fa92f138142f309bbcf2c3523c51565d4f71abcf59d4a384b5985b24b67d760fec6cf23bd42df773a0945d3ae5630ccd99ec96ec169d738dcf17b74b8237f46030ad252c1691170c2ec58cde256a49d9406b06040d921d3ac2cebcaf6355224564") r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="b96b6e000100000008001f00010000000a001000000000000000000050001100fc0100000000000000000000000000007f000001000000000000000000000000fc0100000000000000000000000000010a0101010000000000000000000000006c0000000135000002000a000800160009000000"], 0xbc}, 0x1, 0x0, 0x0, 0x8881}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x12, 0xd, &(0x7f0000001b80)=ANY=[@ANYRES8=r4, @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xffffffffffffffc5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000001a40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r10, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0xa, 0x0, 0xfffffff9}, 0x50) ioctl$int_out(r9, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000a40)={{r8}, "d84b6046b7ea383a619d78169047101ca2faa7f5fafd86af2d80f46cda2b60d838200601168f903ee28d40e349f165799171267fdd4183b01a71601a9c821ac2c1a04f3e5248efcfca645b237e9ee1125258ba721516858512a125c0b29fa5294ab75fb904256c9b53391e00ae80a403bdd0d0bd2f393edc7a662ace046a4f20cadca9d6b549bf45a7b3f266169bf497c133744e7d10bd6520859529bd27c4e8aee6acaec0a498cf419b1dd034f78462369a3691d6bac0bb8a3800e001c390d03c6485473b08e2402493bf915f9688e3818ae3ad542eddd8df102a3dc011299b1a9716738be7d81233c11552f0016da241edd3f368b0d591921ac1662c665228ab1f0d32cb1b34295f186e82395f4580b8cac5ed4d2e410215c354be7024f9ff4bc7849dc4bd75de4cca940f609e062b840563274015dc3702a2f0123b9f5f83dc685b048336d288568b7774faf81060e87124b0044d7610346e18d37e88b2d7125ed478e1c094849eebcac8e755ea666ecdfd16b697b9caafb47197009a81e9eaeb16ffc748105d8de3420692b90aba693f2926d25f8b9928660a66daaf07908f15beb0aac35295ef53c48c289d0010487590438630e58526620a3fc2b492791ab36a2c3d796feab6fe83124d376d93323e0131c65c51af6123a85ac356a3f5ad974af5024306cdf8f4a5426611d725594645a697a2bae3a26d484d66fff64f10100858fb4e41fa01814fe14dbec46e17fd86ef85f053409a636ffeee61fda4b2e3081ddbff451258c8a9bd739a84466d2077f885a36f6bc62688cf4754255e1faf1b3b9e5fe25f472cc9f3f720534f28e480f3b933d8bb94562f15bd7514e9ac48b7db9b3c87d7aead85a81a8fa454d1b954cf756770c2049357a4f3482d228775ce13a546d59b58f098bb886514125a116af4404af92aceedfdde88ac7bcc5bb97d7b6ec22e55fe838a8905bcc259e94988d4c72f4964361413762bcec64bc7a82f9468f2cb38bf4562b9bf67b8504aea7199667c56ea50e0cc877c9d57386fdb15b67a85a2f863538abef5b8ed642821e6c705c0a927528d1d62692afa860c05f4054b2f71fc7fbf3d7d45eb622de947a1de12bb0acb32016150a4de8e00d39c45c2f8673177d45af5cf9477457e2f95905c4cb8d72422830569ce9c369edd849403e05db5a32ddc7879d1b5f6664cf2a283ec73f174790992f65a4a49ff6e36164c0eed5c38d403d8687403f5ccb372350509dd3f9c9b036bf5cd138fef1c5657188ceb46bc8c98a3b842f974b227ea9c0e29817ed83d4802d35be7e9f07bb515ee2a12d24fb64661f8d7990d633d7f6981c9e5d263c416570911b793d4b7bdc269945bb4e84f00ddfbcb15343518c5bfe52c21bd7bed31dd62544050a33b60e938e276d9e4ce93e75f408657c1779801e715051fca5e6eb9656dfd487d7ae7d1908b5756987a161a46006a3b42fb9c487b3630b5985e89fe0031d7647ce15373df5882a5c0cab513ae871171c03ed4ce0b1f4917929b7cb4b925386cf216798a93a05386cf19c7c56b7ba5c28fe4232b2ba59b415711752ade79c8040777544a9ed22d6ef2f5c9eae0b41fb860fcf5269c3d622ef79c4402c7ca71a8a7afbc9011044fef976444c0df90515afc10944fddbcfc570de21567eb0d6758936243263a6e0be1c504063cf9f4af3712d5fba9cf2103ce67a5e55b1f6deb82baacf45b05be50bc801049bf7298b60c658e0c8d38d1051db87ba7a5d043f938bcaae7d9652c01bc156b85ed65c86853aab4a6552a83dba1a8d2cb716f0cbc52b37af41470aa445b1d4ee9f8be212f5631c602bb98c0d4bc8cad8e8c4614c7b502eb2a31b16e016874dec143be67ea27ae6752edd95baf6cf6a1973d8f4cdf4ae19c548a4990c1417be6253baa71139d9413fc419054497ad85d362a2f96752bcf95d928765b1697c0174ff26fc9dbf5ee4e19335d59dcf9a1f357198ebe431f8bfd41b71e036ed903519113973e0ff0d73d4019dccadb73121a6aae8e7cc6f03881a497303b719f84ea5b8f39a104cea48605c713ae5f805acf97fd97433daea548eb48b8bd7e3ba26b7e4ecf2363b7362de1f964e2fded58847b3f8c8628a628bbe5251a2317c1aa511f60e7cab8ac60a646f602e7aad9fa5e6d59484db259ce60ca947f3c562a57ee34c448081a208f32e476dd557da72034a5f20976b5030eef896c50f474bc0c8d8a89585c49fccec7ab105dd22b7d56a6bb2497feb88d630e518bcf4f35933a8988f77e16a4a1c17a9e3ba04fb08ba0ea9f8aa8a7ba90177ce58dcce8aae2f5ef787c2b99d2b8276bdd545fa610aff64a164f24472e58d742c2f88bdfff9dc3570706a1a030045e60cb4cd6681b01757f064b38cfaa010750c8d3ba3050ab8cdae0d52a333e55d45bacd03ccb7dc9b1fa143a0801a60b45f9d0a39a401c527624b978b2b6fc9eab9b6f87851aec75d7e76d451841cb0b67f2bef3fdb3d294519d445bcfdee025b6bd0bc3e1167a25a4c0b80a6d4f234c0ea3cd81640ec870de019a674df784c42eca0a99b6830bbed03d4a5431348ad4cc848de9342e12feb86af3178bc0821b911a7dc13d55112c38b3325bcd529405a6b5a1103c5f8f41e8db9321edff5163410a637b0eaaf1de6606fbf8043b68571bb68e0ee5e4abcdd989e25eacd8feec571a387e4da1a43790837bbe91f24fd4a4529d8fc2600f858eb78dd4b70f6fdcc02a2f9b543b4cf63f5b94975281ea11a0b2ea15dd98a996e79abbb0bc4c6d3f150491592804aa2808c3040f6c9f5f0eeaae84222b53623de100ed8403e3f794595e2c2dfd7639bd46cd3d4836f5d5889bec538d8bf3f4efc769fa05832732a249a70c9bbdd927e4afbb4bd2d795ce18a65b543bfe53b6ff0fff4ff1ac711ec7d2136be02fc48e233f75fe32aa8aa62a0d1a12c25634beae294e8b1a7795ebc102ae7ef2cc311b6b8234a9809db366abd7774097e55517bc7d57141a2685fff4acedaba3f7e6398aa05635db6f9f5920c30c9fe3b865d548cd9aca43001e5bf889002c6c64628ccb027e7cecd462dc0cdbe0868873c15db0c41b0dd41adaee1d9c4f62fb61eede652b4adb24d3709dd2eb11b5feeb8acf8680c75313adf622ac8b3fee8b648d234a818725645876dc84bbfb915e41d2e7a01780402fa93e58867ac802e3c93c025888f85011cb323cced61b57b80dfc14fd144dd3dfe967fa34e867392af6a7f5696fcdb433d42e2939f3127bc7cb0d84b4be8f91760616eba374522c91067b1c67f9233a57f3527d63c1a2b705214c160547f9edb1e8a72851c67ca297dd42aa96959793a45b42a152b3c0a17ca69ec66d08c68f785e7dd91d68e23b21ae607abc7c3662826a49d10d98796e0fb2bf56178b3abd82d3f46488eacda55567c323a58617eefc778bf3277d17ea609b77604435f59507ac577d6e2759a2c4de84ee9664f776da26aedf94d23d5f9f5af130c641bf6bc82425d3dedd4f8dc4a8dc68358d7bc0574e164d3e621a4ed3700f5bfdd463e5d13c5662349ff37adeffe6097724933fd121f813fcd91758c544d8c2901016cc07213a0efcf805b7abf359f35359a9e52660d3789ae6d37c17c29f3edd042a7e707f416d3f3d856ba3cb76358c78c39ffe156524d651f87557e469b9fd68e6a83d3beae6d7c2edd0b47c5b0a5cd2854124a6be30c43d190a2e8bd23272ff8f9c17cb8ee5ebfac05b5e55cd8276295498660e2c967f78bd1d3a75645f89bccb280ef48811a321035a9ed441e2968c8a6c680d791f71a2fc90fc8a26724df411316592634cf5d5fb09b692b6e2e278df7633bb130254e667f08819f6416cee79119d6026a38b817de15786937bd01d769bdb677e4697ea7c3245297d2535cf57bec075a90ed73e8e86b236fcdb5d7b504fba3319623e14257ceda05d97ce92316759ab1015af4c3c12b9b3223eeedaeb3ba077be0df90eae03a335c3e0731bacbc921c827f03dad45fe1a5e5eabf642a8ed6e75cc6293acee3ad76b3164d0db8f3483d6eec9e9f54dc3e94e7c242f5b8f8746f77b8bdf319a6deb190591eaaa6642b8ba0f2182b774300d5803ca13fb3c37145f5c7d8fd7587266bd9824106baca9e7cf9d00bd2a54e24b591cc59adf6221b6071ecd246d9087bebeb462a8f7a3b551035cbe5ed45946e3f35bc07e488b58da834b600b67778af555923eaa90857d4b194306b3621899ee894b2bda350fb7ce732333b05f08d9317ddaa060bdaf86ecfcc06306490d29a094d23ab4dbd54364c69d18bee29ef212a974111531158fb12b0878997b7e95b728ef4fcc5090c8e088ba4e8edacdb6dabe4e97fad46b45fc64b9cea489b73ac7f9ef86deedb030ba96ac0e21d28a8cff000e2be224afbcb2c4a90651db4ade3937f2a3ae14d8a1541506bc5b6f71920175778d358c2c019af7e74b1c2aac49937a4e4b2c88fccc5fe043bd8eca88e05a0135d40ccbe2442b3b334055d6919539ca166fb04a5b9e003a1d0210347fd328e6f8f354055345d064748aec0178d84d7f54718afd19ee21340fa08fef8731f4071a7bc97819f811c8d1fb0c111d5cd7dd7cf4d3f416e66014714a928545bfe03481d6e88cb5fef04f9d6553f608f61d4fa733791784306e8ee3da92df58c5dc07c9a18bd7f23e69a995ea787f8df82d80c7abaf0ca45140e15056df1883f0352b3fbe275d6a76db4ac172665cf03610026b406f648211cde0ce287677be19d2aa5d3c7c5ad9c79b5b742ff70a4dbdecccc5e5e0f71052fe48e89a58b9aa24d412a4ebd6b48a736255700b701c9b1cd42554553be936337d7bc778360c64dfa5c1818ff5f8422e9477e0716ad4b8934eb8ad3c26a5a940c9e7add6ed441168f06b3ef74b3f7eef64ef0406f75df86911a51b185ed38caa4d5bf043bc866f63f153014f2bf13fc2a820558258042f848a07c13e7705bf3e576e3661d25483841a70019d60809dfeb5fd152e64e77791190d0a2cb64abe7c060f1cb1d2f48dc7a4c1a2403b1cccd533cb3d32beec163cc927d847fa1730ccb1b509a151effa834dbfcf723c2489ef6a93f813b8f7b27289704719e3370528e9fe8e81c17f2621a3eab2dc0e1efb7f1e8e43d47183915ebea4d5021851ae4e9e28643312860c605760dddb270676d17e06b18215d75f614dc362713c778d7b0c1c93fed63dd365cb12bd5f39973f32a8274a7c01ed372cd98558506da6390cb540861253e551a7a35ce49f50c6626c0572fdffb238125aa0f31edd0c23e0c3046b9b5f6668f009de892240a48ad5179224a70c7e68d002ee4f9e2dc828cd8fb2ebede45cd0f48995cfebddfa5949da698abe9c4863e9cd5e30efb1e7bc1eae38d2ff3562e4baa08801f06e2219809ed07a9a08c35bccdb3709433d3d450aee19336bcd22361e0a33d3a391b0040f428593a005b26f4cd260cab49366431aea03dbde9a990ea792b71b573f96a92605787763e277ca6543714b2e3be3824f59fdf258e6a3ca596d66785660da0a8017e82412eca2908e29f11f0c7ce7cb57c7c2de6d90aa99d7848c8d8189cea6ee58c5cd8f0a5bc663f37836532cb3cbb8fd13665fc0f3c00719c726c1d4bb477dc45839607d1ca1934e646932c586711960a4fe0d46b95c6cf67d55dee5919697532874771b7bf175c42f32ee5e39dabe528359acdd18d34875d46fcf84161a575207a36d48c90574333242fc0283a3aa13c20761abd059dcea288d283af166ab739d3cd9f6836b5ddc45932a4f31a"}) 724.187278ms ago: executing program 6 (id=343): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r2, r2, 0x0, 0x80000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) umount2(0x0, 0x9) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r6, 0xd4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x80, 0xf3, 0x21, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0x80, 0x7}}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 716.742558ms ago: executing program 1 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x400000, 0x18c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff7e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioperm(0x83, 0x6, 0x4) ioperm(0x5, 0xfffffffffffffa05, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='bcache_journal_write\x00', r2, 0x0, 0x8000004}, 0x18) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x7}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/92, 0x5c}], 0x1, 0x60, 0xffffffff00000003}}, @rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, 0x0, 0x0, 0x72, 0x5}}], 0x90, 0x24028858}, 0x0) 639.282628ms ago: executing program 2 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 638.717008ms ago: executing program 4 (id=346): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00000000c0)='.\x00', 0x591002, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x5f8, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 610.693328ms ago: executing program 1 (id=347): syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x17) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xfffffffe}}}, &(0x7f0000000280), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 595.488058ms ago: executing program 2 (id=348): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000020000000000000000800ad71cb60000cb85bcfb6ee866b7eb7a28b83bd2e7a9104a52dab44230a344608012a8ee746bfe85974e223ba1fde298fcdcfb2f0b53a45632fe813eb5997ac1e98d76d2d0186955963c77f9732807c761b17f6c0d5ad244dceb6616f62ab3c740a6f4b5272545314f44f85097a5c1a32cef94ffbb055dbd54727a6e6e70621ed46fcf45a57f340f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000600000000b70500000000000085000000a500000018010000202064050000000000202020751af8ff00000000bfa100000000000007010000f8ffffffb702400008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58006a266250000000000000000000000900020073797a31000000000500010007000000050005000a0000000c0007800800d365d1290070e92c0300686173683a6e67bf9af177d7748c9b8bd065742c6e657400000000050004b9cfa5af00"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000400", @ANYRES32, @ANYBLOB="000000cf133e0000000000b78677307e44b065f01b9bf79ca3000000000000000008ff3975ed44ef096ccb57de8c48b3bedea71f20106b53f216dab23aade015c0842e2f681f7424a7c057669095017db40cde91a10666ea1b8b3029bbd7cbf113ec", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) writev(0xffffffffffffffff, &(0x7f00000030c0)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_map={0x1000000000000006, 0x3, 0x4002, 0x2, 0x72, 0x81}}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x41c, &(0x7f0000000000)=ANY=[@ANYBLOB='size=%']) 502.983818ms ago: executing program 4 (id=349): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001006b04c9010000000000000000000000000000000008000200ac1414aa"], 0x24}}, 0x0) stat(&(0x7f0000000780)='./file0\x00', 0x0) 501.586428ms ago: executing program 3 (id=350): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) pivot_root(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd(0x800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="1493ba74ed74ba32", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004030}, 0x4000) 437.125949ms ago: executing program 4 (id=351): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendfile(r0, r0, &(0x7f00000004c0)=0x7fffffff, 0x2708) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x40040, 0x110) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="4e09000000000000fc6bb823732cdc4f47a9cfb349b6c0a7", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r2}, 0x9) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f0000000040)}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x420381, 0x4) io_uring_setup(0x738b, &(0x7f0000000240)={0x0, 0xa542, 0x2, 0xfffffffe, 0x21d, 0x0, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x42) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)}, 0x10) chdir(0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448dc, &(0x7f00000005c0)="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") close_range(r5, 0xffffffffffffffff, 0x0) 434.848649ms ago: executing program 2 (id=352): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) (fail_nth: 9) 378.545669ms ago: executing program 6 (id=353): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 356.347129ms ago: executing program 1 (id=354): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x7) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4], 0x3c}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffd, 0xaa, 0xf8, @buffer={0x0, 0x7f, &(0x7f00000003c0)=""/127}, &(0x7f0000000600)="ce85ca05eff4d51bafd78fb172d03aec530cec2e87a1cf667777d366dbb5dd5d3e1a86162c17e98b4e98e588a297dfdd7392ebffaab0e96e5a6329387229f129e452cd2d41308aabeb2d292dea3901e335794e3cbc2442ec33ac87b1e32c988d8f93ded5ca3175758cdaef61d5b2f6f7310de40d7aef98d06586de303b79176c70f1340dd25f976c52968d38629512a78b534e64729a1ed1b61761e607ed42717b3d8656a2493965217b", &(0x7f00000006c0)=""/170, 0x8, 0x12, 0x3, &(0x7f0000000080)}) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 33.98788ms ago: executing program 6 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 10.65906ms ago: executing program 6 (id=356): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@restrict, @datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x204, 0x0, 0x800}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "327f"}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000540)=""/145, 0x52, 0x91, 0x1, 0xfffffffe, 0x0, @void, @value}, 0x28) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20000000000000) ioctl$VT_ACTIVATE(r1, 0x5606, 0x2) (async) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000040)={[{}]}, 0x1, 0x4e2, &(0x7f0000000b80)="$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") r4 = creat(&(0x7f0000000340)='./bus\x00', 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) (async, rerun: 64) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x200, @mcast1}}, 0x0, 0x62}, 0x5000) (async) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) 0s ago: executing program 1 (id=357): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x1800, r4, 0xa}) kernel console output (not intermixed with test programs): x1c0 [ 32.270619][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 32.275284][ T3616] ? clear_bhb_loop+0x55/0xb0 [ 32.279955][ T3616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.285851][ T3616] RIP: 0033:0x7f6d006bfed9 [ 32.290281][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.309886][ T3616] RSP: 002b:00007f6cfed37058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.318288][ T3616] RAX: ffffffffffffffda RBX: 00007f6d00885fa0 RCX: 00007f6d006bfed9 [ 32.326329][ T3616] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 32.334550][ T3616] RBP: 00007f6cfed370a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.342556][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.350521][ T3616] R13: 0000000000000000 R14: 00007f6d00885fa0 R15: 00007ffd0a311d88 [ 32.358572][ T3616] [ 32.368177][ T2280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.437381][ T2280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.461699][ T3619] FAULT_INJECTION: forcing a failure. [ 32.461699][ T3619] name failslab, interval 1, probability 0, space 0, times 0 [ 32.475072][ T3619] CPU: 0 UID: 0 PID: 3619 Comm: syz.5.53 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 32.485606][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 32.495681][ T3619] Call Trace: [ 32.498954][ T3619] [ 32.501904][ T3619] dump_stack_lvl+0xf2/0x150 [ 32.506578][ T3619] dump_stack+0x15/0x1a [ 32.510742][ T3619] should_fail_ex+0x223/0x230 [ 32.515465][ T3619] should_failslab+0x8f/0xb0 [ 32.520065][ T3619] kmem_cache_alloc_node_noprof+0x59/0x320 [ 32.525954][ T3619] ? __alloc_skb+0x10b/0x310 [ 32.530554][ T3619] __alloc_skb+0x10b/0x310 [ 32.534981][ T3619] alloc_skb_with_frags+0x80/0x450 [ 32.540116][ T3619] ? avc_has_perm+0xd4/0x160 [ 32.544706][ T3619] sock_alloc_send_pskb+0x435/0x4f0 [ 32.549973][ T3619] ? __rcu_read_unlock+0x4e/0x70 [ 32.554906][ T3619] packet_sendmsg+0x2485/0x3670 [ 32.559787][ T3619] ? terminate_walk+0x260/0x280 [ 32.564644][ T3619] ? avc_has_perm+0xd4/0x160 [ 32.569255][ T3619] ? selinux_socket_sendmsg+0x185/0x1c0 [ 32.574855][ T3619] ? __pfx_packet_sendmsg+0x10/0x10 [ 32.580111][ T3619] __sock_sendmsg+0x140/0x180 [ 32.584830][ T3619] __sys_sendto+0x1a8/0x230 [ 32.589419][ T3619] __x64_sys_sendto+0x78/0x90 [ 32.594087][ T3619] x64_sys_call+0x29fa/0x2dc0 [ 32.598758][ T3619] do_syscall_64+0xc9/0x1c0 [ 32.603328][ T3619] ? clear_bhb_loop+0x55/0xb0 [ 32.608067][ T3619] ? clear_bhb_loop+0x55/0xb0 [ 32.612735][ T3619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.618648][ T3619] RIP: 0033:0x7f6d006bfed9 [ 32.623093][ T3619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.642690][ T3619] RSP: 002b:00007f6cfed37058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 32.651192][ T3619] RAX: ffffffffffffffda RBX: 00007f6d00885fa0 RCX: 00007f6d006bfed9 [ 32.659183][ T3619] RDX: 0000000000000004 RSI: 0000000020000340 RDI: 0000000000000006 [ 32.667179][ T3619] RBP: 00007f6cfed370a0 R08: 0000000020000080 R09: 0000000000000014 [ 32.675263][ T3619] R10: 0000000020000084 R11: 0000000000000246 R12: 0000000000000001 [ 32.683292][ T3619] R13: 0000000000000000 R14: 00007f6d00885fa0 R15: 00007ffd0a311d88 [ 32.691297][ T3619] [ 32.696280][ T2280] bond0 (unregistering): Released all slaves [ 32.824764][ T3624] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.51'. [ 32.921549][ T29] audit: type=1400 audit(1733660131.375:437): avc: denied { mounton } for pid=3620 comm="syz.5.54" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 33.009392][ T2280] hsr_slave_0: left promiscuous mode [ 33.029196][ T2280] hsr_slave_1: left promiscuous mode [ 33.040132][ T2280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.047593][ T2280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.061936][ T3296] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 33.072072][ T2280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.079516][ T2280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.090190][ T2280] veth1_macvtap: left promiscuous mode [ 33.095794][ T2280] veth0_macvtap: left promiscuous mode [ 33.101498][ T2280] veth1_vlan: left promiscuous mode [ 33.106885][ T2280] veth0_vlan: left promiscuous mode [ 33.173848][ T2280] team0 (unregistering): Port device team_slave_1 removed [ 33.183777][ T2280] team0 (unregistering): Port device team_slave_0 removed [ 33.276998][ T29] audit: type=1400 audit(1733660131.735:438): avc: denied { search } for pid=3636 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.437811][ T3662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3662 comm=syz.4.65 [ 33.443343][ T3658] loop3: detected capacity change from 0 to 1764 [ 33.461504][ T3665] loop2: detected capacity change from 0 to 512 [ 33.487036][ T3665] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.66: invalid indirect mapped block 256 (level 2) [ 33.487365][ T3665] EXT4-fs (loop2): 2 truncates cleaned up [ 33.509461][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.558161][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.662293][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 33.662590][ T3677] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 33.662613][ T3677] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 34.113486][ T2280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.197860][ T3690] chnl_net:caif_netlink_parms(): no params data found [ 34.315470][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.322598][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.356506][ T3690] bridge_slave_0: entered allmulticast mode [ 34.369933][ T3721] xt_NFQUEUE: number of total queues is 0 [ 34.389421][ T3690] bridge_slave_0: entered promiscuous mode [ 34.419527][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.426770][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.438788][ T3727] netlink: 'syz.3.74': attribute type 153 has an invalid length. [ 34.438753][ T3690] bridge_slave_1: entered allmulticast mode [ 34.439361][ T3690] bridge_slave_1: entered promiscuous mode [ 34.474259][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 34.514307][ T3690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.548358][ T3690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.583825][ T3690] team0: Port device team_slave_0 added [ 34.598694][ T3723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.607629][ T3723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.622900][ T3690] team0: Port device team_slave_1 added [ 34.639443][ T3723] loop2: detected capacity change from 0 to 512 [ 34.647264][ T3735] FAULT_INJECTION: forcing a failure. [ 34.647264][ T3735] name failslab, interval 1, probability 0, space 0, times 0 [ 34.660009][ T3735] CPU: 1 UID: 0 PID: 3735 Comm: syz.3.76 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 34.670783][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.680847][ T3735] Call Trace: [ 34.684124][ T3735] [ 34.687089][ T3735] dump_stack_lvl+0xf2/0x150 [ 34.691698][ T3735] dump_stack+0x15/0x1a [ 34.695871][ T3735] should_fail_ex+0x223/0x230 [ 34.700675][ T3735] should_failslab+0x8f/0xb0 [ 34.705272][ T3735] kmem_cache_alloc_noprof+0x52/0x320 [ 34.710644][ T3735] ? flock_lock_inode+0x236/0xf50 [ 34.715754][ T3735] flock_lock_inode+0x236/0xf50 [ 34.720656][ T3735] ? __schedule+0x6fa/0x930 [ 34.725181][ T3735] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 34.730562][ T3735] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 34.736508][ T3735] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 34.741982][ T3735] locks_lock_inode_wait+0x6e/0x2c0 [ 34.747201][ T3735] ? __pfx_autoremove_wake_function+0x10/0x10 [ 34.753309][ T3735] __se_sys_flock+0x2ed/0x3b0 [ 34.758008][ T3735] __x64_sys_flock+0x31/0x40 [ 34.762599][ T3735] x64_sys_call+0x293c/0x2dc0 [ 34.767319][ T3735] do_syscall_64+0xc9/0x1c0 [ 34.771818][ T3735] ? clear_bhb_loop+0x55/0xb0 [ 34.776491][ T3735] ? clear_bhb_loop+0x55/0xb0 [ 34.781156][ T3735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.787054][ T3735] RIP: 0033:0x7fdb874afed9 [ 34.791463][ T3735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.811063][ T3735] RSP: 002b:00007fdb85b27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 34.819573][ T3735] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874afed9 [ 34.827539][ T3735] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 34.835611][ T3735] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 34.843623][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.851646][ T3735] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 34.859617][ T3735] [ 34.903829][ T3690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.910928][ T3690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.936878][ T3690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.949219][ T3690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.956212][ T3690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.982135][ T3690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.003065][ T3723] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.008188][ T3754] loop3: detected capacity change from 0 to 512 [ 35.019107][ T3723] EXT4-fs (loop2): mount failed [ 35.052791][ T3690] hsr_slave_0: entered promiscuous mode [ 35.062910][ T3690] hsr_slave_1: entered promiscuous mode [ 35.072939][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.086860][ T3690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.092240][ T3754] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.094405][ T3690] Cannot create hsr debugfs directory [ 35.118218][ T3723] dvmrp0: entered allmulticast mode [ 35.133573][ T3748] loop1: detected capacity change from 0 to 512 [ 35.148595][ T2280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.177742][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.197119][ T3748] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.77: Failed to acquire dquot type 1 [ 35.216632][ T3748] EXT4-fs (loop1): 1 truncate cleaned up [ 35.223988][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.251756][ T3764] loop3: detected capacity change from 0 to 128 [ 35.256187][ T2280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.264593][ T3748] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.407852][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.419530][ T3774] syz.3.79: attempt to access beyond end of device [ 35.419530][ T3774] loop3: rw=2049, sector=180, nr_sectors = 1 limit=128 [ 35.440011][ T2280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.470314][ T3780] Unsupported ieee802154 address type: 0 [ 35.517363][ T3774] syz.3.79: attempt to access beyond end of device [ 35.517363][ T3774] loop3: rw=2049, sector=180, nr_sectors = 8 limit=128 [ 35.531976][ T3774] syz.3.79: attempt to access beyond end of device [ 35.531976][ T3774] loop3: rw=2049, sector=244, nr_sectors = 8 limit=128 [ 35.548081][ T2280] bridge_slave_1: left allmulticast mode [ 35.553979][ T2280] bridge_slave_1: left promiscuous mode [ 35.559748][ T2280] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.573983][ T3774] syz.3.79: attempt to access beyond end of device [ 35.573983][ T3774] loop3: rw=2049, sector=260, nr_sectors = 8 limit=128 [ 35.607784][ T3774] syz.3.79: attempt to access beyond end of device [ 35.607784][ T3774] loop3: rw=2049, sector=276, nr_sectors = 8 limit=128 [ 35.621700][ T2280] bridge_slave_0: left allmulticast mode [ 35.627414][ T2280] bridge_slave_0: left promiscuous mode [ 35.633179][ T2280] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.638122][ T3774] syz.3.79: attempt to access beyond end of device [ 35.638122][ T3774] loop3: rw=2049, sector=292, nr_sectors = 8 limit=128 [ 35.681794][ T3774] syz.3.79: attempt to access beyond end of device [ 35.681794][ T3774] loop3: rw=2049, sector=308, nr_sectors = 8 limit=128 [ 35.715395][ T3774] syz.3.79: attempt to access beyond end of device [ 35.715395][ T3774] loop3: rw=2049, sector=324, nr_sectors = 8 limit=128 [ 35.739028][ T3774] syz.3.79: attempt to access beyond end of device [ 35.739028][ T3774] loop3: rw=2049, sector=340, nr_sectors = 8 limit=128 [ 35.774224][ T3774] syz.3.79: attempt to access beyond end of device [ 35.774224][ T3774] loop3: rw=2049, sector=356, nr_sectors = 8 limit=128 [ 35.844620][ T2280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.904885][ T2280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.923227][ T2280] bond0 (unregistering): Released all slaves [ 35.940997][ T3785] batman_adv: batadv0: Adding interface: geneve2 [ 35.947409][ T3785] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 35.965856][ T3690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 35.979318][ T3690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 36.025702][ T3690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 36.045606][ T2280] hsr_slave_0: left promiscuous mode [ 36.046210][ T3818] loop3: detected capacity change from 0 to 512 [ 36.074020][ T2280] hsr_slave_1: left promiscuous mode [ 36.091740][ T2280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.093212][ T3818] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.89: Failed to acquire dquot type 1 [ 36.099384][ T2280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.112306][ T3818] EXT4-fs (loop3): 1 truncate cleaned up [ 36.125581][ T3818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.138124][ T3818] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.170545][ T2280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.178053][ T2280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.186269][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.217369][ T2280] veth1_macvtap: left promiscuous mode [ 36.222878][ T2280] veth0_macvtap: left promiscuous mode [ 36.228453][ T2280] veth1_vlan: left promiscuous mode [ 36.233687][ T2280] veth0_vlan: left promiscuous mode [ 36.248231][ T3828] loop3: detected capacity change from 0 to 512 [ 36.285643][ T3828] EXT4-fs: inline encryption not supported [ 36.353845][ T2280] team0 (unregistering): Port device team_slave_1 removed [ 36.363633][ T3828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.382883][ T3828] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.393586][ T2280] team0 (unregistering): Port device team_slave_0 removed [ 36.433362][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.449864][ T3690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 36.478277][ T3825] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 36.507581][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'. [ 36.566543][ T3690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.578970][ T3846] FAULT_INJECTION: forcing a failure. [ 36.578970][ T3846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.581988][ T3690] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.592043][ T3846] CPU: 1 UID: 0 PID: 3846 Comm: syz.1.94 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 36.592067][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.592078][ T3846] Call Trace: [ 36.592083][ T3846] [ 36.618544][ T3845] mmap: syz.2.95 (3845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.619184][ T3846] dump_stack_lvl+0xf2/0x150 [ 36.641730][ T3846] dump_stack+0x15/0x1a [ 36.645902][ T3846] should_fail_ex+0x223/0x230 [ 36.650636][ T3846] should_fail+0xb/0x10 [ 36.654796][ T3846] should_fail_usercopy+0x1a/0x20 [ 36.659824][ T3846] _copy_to_user+0x20/0xa0 [ 36.664248][ T3846] simple_read_from_buffer+0xa0/0x110 [ 36.669739][ T3846] proc_fail_nth_read+0xf9/0x140 [ 36.674719][ T3846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 36.680282][ T3846] vfs_read+0x1a2/0x700 [ 36.684576][ T3846] ? __rcu_read_unlock+0x4e/0x70 [ 36.689556][ T3846] ? __fget_files+0x17c/0x1c0 [ 36.694232][ T3846] ksys_read+0xe8/0x1b0 [ 36.698384][ T3846] __x64_sys_read+0x42/0x50 [ 36.702935][ T3846] x64_sys_call+0x2874/0x2dc0 [ 36.707652][ T3846] do_syscall_64+0xc9/0x1c0 [ 36.712144][ T3846] ? clear_bhb_loop+0x55/0xb0 [ 36.716827][ T3846] ? clear_bhb_loop+0x55/0xb0 [ 36.721537][ T3846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.727472][ T3846] RIP: 0033:0x7f250539e8ec [ 36.731884][ T3846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 36.751502][ T3846] RSP: 002b:00007f2503a17050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.760016][ T3846] RAX: ffffffffffffffda RBX: 00007f2505565fa0 RCX: 00007f250539e8ec [ 36.767980][ T3846] RDX: 000000000000000f RSI: 00007f2503a170b0 RDI: 0000000000000006 [ 36.775966][ T3846] RBP: 00007f2503a170a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.783930][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.791951][ T3846] R13: 0000000000000000 R14: 00007f2505565fa0 R15: 00007ffe3608c7c8 [ 36.799922][ T3846] [ 36.863701][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 36.863789][ T29] audit: type=1326 audit(1733660135.315:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 36.895830][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.902918][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.920411][ T3857] hub 5-0:1.0: USB hub found [ 36.925163][ T29] audit: type=1326 audit(1733660135.355:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 36.937839][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.948340][ T29] audit: type=1326 audit(1733660135.355:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 36.955331][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.978397][ T29] audit: type=1326 audit(1733660135.355:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 36.986218][ T3857] hub 5-0:1.0: 8 ports detected [ 37.008769][ T29] audit: type=1326 audit(1733660135.355:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 37.036854][ T29] audit: type=1326 audit(1733660135.355:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 37.060087][ T29] audit: type=1326 audit(1733660135.355:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 37.083415][ T29] audit: type=1326 audit(1733660135.355:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 37.106561][ T29] audit: type=1326 audit(1733660135.355:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 37.129727][ T29] audit: type=1326 audit(1733660135.355:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f250539fed9 code=0x7ffc0000 [ 37.169941][ T3690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.180449][ T3690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.281235][ T3668] syz.4.65 (3668) used greatest stack depth: 6360 bytes left [ 37.298935][ T3875] FAULT_INJECTION: forcing a failure. [ 37.298935][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 37.303086][ T3690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.311595][ T3875] CPU: 0 UID: 0 PID: 3875 Comm: syz.1.100 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 37.328945][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.339053][ T3875] Call Trace: [ 37.342339][ T3875] [ 37.345281][ T3875] dump_stack_lvl+0xf2/0x150 [ 37.349908][ T3875] dump_stack+0x15/0x1a [ 37.353089][ T3879] loop4: detected capacity change from 0 to 2048 [ 37.354091][ T3875] should_fail_ex+0x223/0x230 [ 37.365136][ T3875] should_failslab+0x8f/0xb0 [ 37.369741][ T3875] kmem_cache_alloc_node_noprof+0x59/0x320 [ 37.375586][ T3875] ? __alloc_skb+0x10b/0x310 [ 37.380286][ T3875] __alloc_skb+0x10b/0x310 [ 37.384709][ T3875] ? audit_log_start+0x34c/0x6b0 [ 37.389651][ T3875] audit_log_start+0x368/0x6b0 [ 37.394418][ T3875] audit_seccomp+0x4b/0x130 [ 37.398915][ T3875] __seccomp_filter+0x6fa/0x1180 [ 37.403879][ T3875] ? __rcu_read_unlock+0x4e/0x70 [ 37.408848][ T3875] ? bpf_trace_run3+0x12b/0x1d0 [ 37.413694][ T3875] ? getname_flags+0x2be/0x3b0 [ 37.418529][ T3875] __secure_computing+0x9f/0x1c0 [ 37.423516][ T3875] syscall_trace_enter+0xd1/0x1f0 [ 37.428542][ T3875] do_syscall_64+0xaa/0x1c0 [ 37.433106][ T3875] ? clear_bhb_loop+0x55/0xb0 [ 37.437773][ T3875] ? clear_bhb_loop+0x55/0xb0 [ 37.442439][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.448423][ T3875] RIP: 0033:0x7f250539e8ec [ 37.452839][ T3875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 37.472460][ T3875] RSP: 002b:00007f2503a17050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.480907][ T3875] RAX: ffffffffffffffda RBX: 00007f2505565fa0 RCX: 00007f250539e8ec [ 37.488917][ T3875] RDX: 000000000000000f RSI: 00007f2503a170b0 RDI: 0000000000000005 [ 37.496944][ T3875] RBP: 00007f2503a170a0 R08: 0000000000000000 R09: 0000000000000000 [ 37.504904][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.512865][ T3875] R13: 0000000000000000 R14: 00007f2505565fa0 R15: 00007ffe3608c7c8 [ 37.520936][ T3875] [ 37.548985][ T3884] loop2: detected capacity change from 0 to 1024 [ 37.602048][ T3884] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.102: Invalid inode table block 0 in block_group 0 [ 37.618926][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 37.632062][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 37.636203][ T3884] EXT4-fs (loop2): get root inode failed [ 37.639498][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.645082][ T3884] EXT4-fs (loop2): mount failed [ 37.657452][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.664848][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.672359][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 37.679998][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.687673][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.695072][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.702570][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.710056][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 37.715135][ T3690] veth0_vlan: entered promiscuous mode [ 37.717458][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.730406][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.737841][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.742720][ T3690] veth1_vlan: entered promiscuous mode [ 37.745218][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.757817][ T3690] veth0_macvtap: entered promiscuous mode [ 37.758089][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.765919][ T3690] veth1_macvtap: entered promiscuous mode [ 37.771132][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.781561][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.784253][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.794672][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.802056][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.811866][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.819224][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.829612][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.837039][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.846823][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.846837][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.854205][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.864598][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.874424][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.881776][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.909970][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.917431][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.924964][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.932382][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.939812][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.942822][ T3690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.947208][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.961857][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.969320][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.976730][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.984128][ T3359] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.993723][ T3884] loop2: detected capacity change from 0 to 128 [ 37.994922][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.010456][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.020555][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.023117][ T3884] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.031060][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.031074][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.062912][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.073249][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.083891][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.093930][ T3359] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.119047][ T3690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.127803][ T3690] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.136679][ T3690] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.145437][ T3690] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.154127][ T3690] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.274899][ T3932] vlan1: entered promiscuous mode [ 38.300854][ T3932] vlan1: left promiscuous mode [ 38.330107][ T3938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3938 comm=syz.3.110 [ 38.370589][ T3947] loop6: detected capacity change from 0 to 512 [ 38.377111][ T3945] SELinux: syz.4.111 (3945) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 38.412982][ T3945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'. [ 38.426393][ T3950] netlink: 120 bytes leftover after parsing attributes in process `syz.1.113'. [ 38.435532][ T3950] tc_dump_action: action bad kind [ 38.442611][ T3947] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.112: Failed to acquire dquot type 1 [ 38.492206][ T3947] EXT4-fs (loop6): 1 truncate cleaned up [ 38.498994][ T3947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.526003][ T3958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 38.529874][ T3947] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.534895][ T3958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 38.688170][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.722530][ T3987] FAULT_INJECTION: forcing a failure. [ 38.722530][ T3987] name failslab, interval 1, probability 0, space 0, times 0 [ 38.735328][ T3987] CPU: 1 UID: 0 PID: 3987 Comm: syz.6.118 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 38.745943][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.756091][ T3987] Call Trace: [ 38.759403][ T3987] [ 38.762344][ T3987] dump_stack_lvl+0xf2/0x150 [ 38.767044][ T3987] dump_stack+0x15/0x1a [ 38.771229][ T3987] should_fail_ex+0x223/0x230 [ 38.775922][ T3987] should_failslab+0x8f/0xb0 [ 38.780556][ T3987] __kmalloc_noprof+0xab/0x3f0 [ 38.785476][ T3987] ? bpf_test_init+0xc7/0x170 [ 38.790198][ T3987] bpf_test_init+0xc7/0x170 [ 38.794810][ T3987] bpf_prog_test_run_xdp+0x321/0x8b0 [ 38.800164][ T3987] ? __rcu_read_unlock+0x4e/0x70 [ 38.805261][ T3987] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 38.811141][ T3987] bpf_prog_test_run+0x20f/0x3a0 [ 38.816077][ T3987] __sys_bpf+0x400/0x7a0 [ 38.820402][ T3987] __x64_sys_bpf+0x43/0x50 [ 38.825001][ T3987] x64_sys_call+0x2914/0x2dc0 [ 38.829721][ T3987] do_syscall_64+0xc9/0x1c0 [ 38.834219][ T3987] ? clear_bhb_loop+0x55/0xb0 [ 38.838992][ T3987] ? clear_bhb_loop+0x55/0xb0 [ 38.843660][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.849591][ T3987] RIP: 0033:0x7f8770dafed9 [ 38.853996][ T3987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.873664][ T3987] RSP: 002b:00007f876f427058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.882073][ T3987] RAX: ffffffffffffffda RBX: 00007f8770f75fa0 RCX: 00007f8770dafed9 [ 38.890037][ T3987] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 38.898109][ T3987] RBP: 00007f876f4270a0 R08: 0000000000000000 R09: 0000000000000000 [ 38.906076][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.914039][ T3987] R13: 0000000000000000 R14: 00007f8770f75fa0 R15: 00007ffe9dfe9818 [ 38.922079][ T3987] [ 38.991452][ T3994] loop4: detected capacity change from 0 to 512 [ 39.018879][ T3994] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.031997][ T3994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.096302][ T3994] EXT4-fs (loop4): 1 truncate cleaned up [ 39.114822][ T3994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.190225][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.229883][ T4003] Zero length message leads to an empty skb [ 39.256140][ T4008] FAULT_INJECTION: forcing a failure. [ 39.256140][ T4008] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 39.269458][ T4008] CPU: 1 UID: 0 PID: 4008 Comm: syz.2.125 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 39.280131][ T4008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.290191][ T4008] Call Trace: [ 39.293462][ T4008] [ 39.296454][ T4008] dump_stack_lvl+0xf2/0x150 [ 39.301052][ T4008] dump_stack+0x15/0x1a [ 39.305225][ T4008] should_fail_ex+0x223/0x230 [ 39.310005][ T4008] should_fail_alloc_page+0xfd/0x110 [ 39.315291][ T4008] __alloc_pages_noprof+0x109/0x340 [ 39.320532][ T4008] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 39.325944][ T4008] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 39.331324][ T4008] handle_mm_fault+0xdd7/0x2ac0 [ 39.336209][ T4008] ? __rcu_read_lock+0x36/0x50 [ 39.341033][ T4008] __get_user_pages+0xf2c/0x2670 [ 39.345982][ T4008] __gup_longterm_locked+0x932/0xf90 [ 39.351358][ T4008] ? down_read_killable+0x172/0x6b0 [ 39.356664][ T4008] ? should_fail_ex+0xd7/0x230 [ 39.361499][ T4008] ? down_read+0x171/0x4b0 [ 39.365941][ T4008] pin_user_pages_remote+0x7f/0xb0 [ 39.371051][ T4008] process_vm_rw+0x4bc/0x890 [ 39.375657][ T4008] ? __secure_computing+0x9f/0x1c0 [ 39.380766][ T4008] __x64_sys_process_vm_writev+0x7a/0x90 [ 39.386398][ T4008] x64_sys_call+0x2c48/0x2dc0 [ 39.391064][ T4008] do_syscall_64+0xc9/0x1c0 [ 39.395633][ T4008] ? clear_bhb_loop+0x55/0xb0 [ 39.400299][ T4008] ? clear_bhb_loop+0x55/0xb0 [ 39.404965][ T4008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.410856][ T4008] RIP: 0033:0x7fd0b722fed9 [ 39.415329][ T4008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.434999][ T4008] RSP: 002b:00007fd0b58a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 39.443401][ T4008] RAX: ffffffffffffffda RBX: 00007fd0b73f5fa0 RCX: 00007fd0b722fed9 [ 39.451362][ T4008] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 000000000000005c [ 39.459348][ T4008] RBP: 00007fd0b58a70a0 R08: 000000000000023a R09: 0000000000000000 [ 39.467308][ T4008] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000002 [ 39.475269][ T4008] R13: 0000000000000000 R14: 00007fd0b73f5fa0 R15: 00007ffdc53d0038 [ 39.483235][ T4008] [ 39.888565][ T4029] loop6: detected capacity change from 0 to 164 [ 39.913555][ T4032] loop2: detected capacity change from 0 to 512 [ 39.928163][ T4029] Unable to read rock-ridge attributes [ 39.968780][ T4032] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 39.984601][ T4035] loop1: detected capacity change from 0 to 512 [ 40.013441][ T4039] FAULT_INJECTION: forcing a failure. [ 40.013441][ T4039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.026753][ T4039] CPU: 0 UID: 0 PID: 4039 Comm: syz.4.131 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 40.037348][ T4039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.047471][ T4039] Call Trace: [ 40.050784][ T4039] [ 40.053716][ T4039] dump_stack_lvl+0xf2/0x150 [ 40.058323][ T4039] dump_stack+0x15/0x1a [ 40.062558][ T4039] should_fail_ex+0x223/0x230 [ 40.067238][ T4039] should_fail_alloc_page+0xfd/0x110 [ 40.072668][ T4039] __alloc_pages_noprof+0x109/0x340 [ 40.077874][ T4039] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 40.083412][ T4039] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 40.088788][ T4039] handle_mm_fault+0xdd7/0x2ac0 [ 40.093735][ T4039] ? __rcu_read_lock+0x36/0x50 [ 40.098513][ T4039] __get_user_pages+0xf2c/0x2670 [ 40.103467][ T4039] __gup_longterm_locked+0x932/0xf90 [ 40.108803][ T4039] ? selinux_ptrace_access_check+0x100/0x110 [ 40.114880][ T4039] ? security_ptrace_access_check+0x67/0x80 [ 40.120817][ T4039] ? down_read+0x171/0x4b0 [ 40.125264][ T4039] ? __ptrace_may_access+0x2cb/0x350 [ 40.130665][ T4039] pin_user_pages_remote+0x7f/0xb0 [ 40.135785][ T4039] process_vm_rw+0x4bc/0x890 [ 40.140437][ T4039] ? ksys_write+0x176/0x1b0 [ 40.145046][ T4039] __x64_sys_process_vm_writev+0x7a/0x90 [ 40.150695][ T4039] x64_sys_call+0x2c48/0x2dc0 [ 40.155370][ T4039] do_syscall_64+0xc9/0x1c0 [ 40.159874][ T4039] ? clear_bhb_loop+0x55/0xb0 [ 40.164624][ T4039] ? clear_bhb_loop+0x55/0xb0 [ 40.169301][ T4039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.175256][ T4039] RIP: 0033:0x7ff5bf37fed9 [ 40.179668][ T4039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.199296][ T4039] RSP: 002b:00007ff5bd9f7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 40.207885][ T4039] RAX: ffffffffffffffda RBX: 00007ff5bf545fa0 RCX: 00007ff5bf37fed9 [ 40.215887][ T4039] RDX: 0000000000000001 RSI: 0000000020001c80 RDI: 000000000000002d [ 40.223859][ T4039] RBP: 00007ff5bd9f70a0 R08: 0000000000000001 R09: 0000000000000000 [ 40.231833][ T4039] R10: 0000000020001d80 R11: 0000000000000246 R12: 0000000000000002 [ 40.239881][ T4039] R13: 0000000000000000 R14: 00007ff5bf545fa0 R15: 00007ffcf8d2c288 [ 40.247884][ T4039] [ 40.269508][ T4032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 40.279549][ T4032] bridge_slave_1: left allmulticast mode [ 40.285193][ T4032] bridge_slave_1: left promiscuous mode [ 40.290985][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.343976][ T4032] bridge_slave_0: left allmulticast mode [ 40.349716][ T4032] bridge_slave_0: left promiscuous mode [ 40.355435][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.415283][ T4035] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.130: Failed to acquire dquot type 1 [ 40.453273][ T4044] No such timeout policy "syz0" [ 40.478946][ T4035] EXT4-fs (loop1): 1 truncate cleaned up [ 40.500993][ T4059] loop2: detected capacity change from 0 to 128 [ 40.508834][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.542230][ T4059] FAT-fs (loop2): bogus number of reserved sectors [ 40.548907][ T4059] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 40.558233][ T4059] FAT-fs (loop2): Can't find a valid FAT filesystem [ 40.575123][ T4035] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.746133][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.824511][ T4084] netlink: 'syz.4.137': attribute type 29 has an invalid length. [ 40.832821][ T4032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.129'. [ 40.833251][ T4084] netlink: 'syz.4.137': attribute type 29 has an invalid length. [ 40.874483][ T4084] netlink: 500 bytes leftover after parsing attributes in process `syz.4.137'. [ 40.883549][ T4084] unsupported nla_type 40 [ 40.907181][ T4094] loop1: detected capacity change from 0 to 128 [ 40.942303][ T4094] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.004154][ T4096] FAULT_INJECTION: forcing a failure. [ 41.004154][ T4096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.017403][ T4096] CPU: 0 UID: 0 PID: 4096 Comm: syz.2.141 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 41.028073][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.038131][ T4096] Call Trace: [ 41.041417][ T4096] [ 41.044357][ T4096] dump_stack_lvl+0xf2/0x150 [ 41.049042][ T4096] dump_stack+0x15/0x1a [ 41.053342][ T4096] should_fail_ex+0x223/0x230 [ 41.058030][ T4096] should_fail+0xb/0x10 [ 41.062197][ T4096] should_fail_usercopy+0x1a/0x20 [ 41.067305][ T4096] _copy_from_user+0x1e/0xb0 [ 41.071908][ T4096] restore_altstack+0x48/0xd0 [ 41.076602][ T4096] __do_sys_rt_sigreturn+0xd7/0x160 [ 41.081809][ T4096] x64_sys_call+0x2982/0x2dc0 [ 41.086476][ T4096] do_syscall_64+0xc9/0x1c0 [ 41.090978][ T4096] ? clear_bhb_loop+0x55/0xb0 [ 41.095646][ T4096] ? clear_bhb_loop+0x55/0xb0 [ 41.100321][ T4096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.106224][ T4096] RIP: 0033:0x7fd0b71cc0e9 [ 41.110663][ T4096] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 41.130696][ T4096] RSP: 002b:00007fd0b58a6ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 41.139100][ T4096] RAX: ffffffffffffffda RBX: 00007fd0b73f5fa0 RCX: 00007fd0b71cc0e9 [ 41.147063][ T4096] RDX: 00007fd0b58a6ac0 RSI: 00007fd0b58a6bf0 RDI: 0000000000000021 [ 41.155035][ T4096] RBP: 00007fd0b58a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.163040][ T4096] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 41.171030][ T4096] R13: 0000000000000000 R14: 00007fd0b73f5fa0 R15: 00007ffdc53d0038 [ 41.178999][ T4096] [ 41.188848][ T4105] loop4: detected capacity change from 0 to 512 [ 41.202837][ T4105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.243114][ T4115] loop3: detected capacity change from 0 to 8192 [ 41.364660][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 41.429816][ T4115] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.438573][ T4115] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.447322][ T4115] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.456029][ T4115] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.482505][ T4105] EXT4-fs (loop4): 1 truncate cleaned up [ 41.556837][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.581114][ T4130] netlink: 'syz.2.146': attribute type 322 has an invalid length. [ 41.625064][ T4115] vxlan0: entered promiscuous mode [ 41.630305][ T4115] vxlan0: entered allmulticast mode [ 41.666546][ T4136] bio_check_eod: 24 callbacks suppressed [ 41.666561][ T4136] syz.3.144: attempt to access beyond end of device [ 41.666561][ T4136] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 41.696511][ T4140] loop6: detected capacity change from 0 to 512 [ 41.701151][ T4137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 41.709375][ T4137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 41.716913][ T4137] vhci_hcd vhci_hcd.0: Device attached [ 41.726294][ T4140] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.735481][ T4140] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 41.737585][ T4136] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.751687][ T4136] FAT-fs (loop3): Filesystem has been set read-only [ 41.768229][ T4136] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.768812][ T4140] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 41.788801][ T4136] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.827590][ T4140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 41.834126][ T4138] usbip_core: unknown command [ 41.835798][ T4140] System zones: [ 41.840317][ T4138] vhci_hcd: unknown pdu 4227858432 [ 41.840328][ T4138] usbip_core: unknown command [ 41.853854][ T4140] 0-2, 18-18, 34-34 [ 41.855096][ T11] vhci_hcd: stop threads [ 41.862016][ T11] vhci_hcd: release socket [ 41.866539][ T11] vhci_hcd: disconnect device [ 41.878192][ T4140] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.894247][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.913507][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 41.913538][ T29] audit: type=1400 audit(1733660140.365:769): avc: denied { write } for pid=4152 comm="syz.3.149" path="socket:[7230]" dev="sockfs" ino=7230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.913934][ T4140] EXT4-fs (loop6): 1 truncate cleaned up [ 41.949641][ T3373] vhci_hcd: vhci_device speed not set [ 41.955559][ T4159] geneve0: entered allmulticast mode [ 41.963611][ T4140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.976602][ T4159] netem: unknown loss type 5 [ 41.981202][ T4159] netem: change failed [ 41.989634][ T4163] FAULT_INJECTION: forcing a failure. [ 41.989634][ T4163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.002738][ T4163] CPU: 1 UID: 0 PID: 4163 Comm: syz.1.152 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 42.013330][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.023417][ T4163] Call Trace: [ 42.026690][ T4163] [ 42.029660][ T4163] dump_stack_lvl+0xf2/0x150 [ 42.034294][ T4163] dump_stack+0x15/0x1a [ 42.038449][ T4163] should_fail_ex+0x223/0x230 [ 42.043188][ T4163] should_fail+0xb/0x10 [ 42.047338][ T4163] should_fail_usercopy+0x1a/0x20 [ 42.052429][ T4163] _copy_to_user+0x20/0xa0 [ 42.056910][ T4163] simple_read_from_buffer+0xa0/0x110 [ 42.062281][ T4163] proc_fail_nth_read+0xf9/0x140 [ 42.067220][ T4163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.072760][ T4163] vfs_read+0x1a2/0x700 [ 42.076914][ T4163] ? __rcu_read_unlock+0x4e/0x70 [ 42.081914][ T4163] ? __fget_files+0x17c/0x1c0 [ 42.086593][ T4163] ksys_read+0xe8/0x1b0 [ 42.090751][ T4163] __x64_sys_read+0x42/0x50 [ 42.095350][ T4163] x64_sys_call+0x2874/0x2dc0 [ 42.100026][ T4163] do_syscall_64+0xc9/0x1c0 [ 42.104588][ T4163] ? clear_bhb_loop+0x55/0xb0 [ 42.109321][ T4163] ? clear_bhb_loop+0x55/0xb0 [ 42.114072][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.119965][ T4163] RIP: 0033:0x7f250539e8ec [ 42.124369][ T4163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.143986][ T4163] RSP: 002b:00007f2503a17050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.152395][ T4163] RAX: ffffffffffffffda RBX: 00007f2505565fa0 RCX: 00007f250539e8ec [ 42.160418][ T4163] RDX: 000000000000000f RSI: 00007f2503a170b0 RDI: 0000000000000004 [ 42.168383][ T4163] RBP: 00007f2503a170a0 R08: 0000000000000000 R09: 0000000000000000 [ 42.176386][ T4163] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000002 [ 42.184346][ T4163] R13: 0000000000000000 R14: 00007f2505565fa0 R15: 00007ffe3608c7c8 [ 42.192413][ T4163] [ 42.195588][ T29] audit: type=1400 audit(1733660140.455:770): avc: denied { read } for pid=4152 comm="syz.3.149" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 42.218712][ T29] audit: type=1400 audit(1733660140.455:771): avc: denied { open } for pid=4152 comm="syz.3.149" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 42.242192][ T29] audit: type=1400 audit(1733660140.455:772): avc: denied { ioctl } for pid=4152 comm="syz.3.149" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 42.267122][ T29] audit: type=1400 audit(1733660140.455:773): avc: denied { ioctl } for pid=4152 comm="syz.3.149" path="socket:[7230]" dev="sockfs" ino=7230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.292636][ T29] audit: type=1400 audit(1733660140.745:774): avc: denied { sys_module } for pid=4152 comm="syz.3.149" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 42.399068][ T4140] IPv6: Can't replace route, no match found [ 42.442508][ T4190] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 42.453291][ T29] audit: type=1326 audit(1733660140.905:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb874afed9 code=0x7ffc0000 [ 42.499143][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.502020][ T29] audit: type=1326 audit(1733660140.905:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb874afed9 code=0x7ffc0000 [ 42.531564][ T29] audit: type=1326 audit(1733660140.905:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdb874afed9 code=0x7ffc0000 [ 42.555044][ T29] audit: type=1326 audit(1733660140.905:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb874afed9 code=0x7ffc0000 [ 42.580573][ T4190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4190 comm=syz.1.156 [ 42.728469][ T4216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.738297][ T4216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.768701][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.161'. [ 42.777414][ T4216] loop1: detected capacity change from 0 to 764 [ 42.777543][ T4218] netlink: 44 bytes leftover after parsing attributes in process `syz.6.161'. [ 42.800662][ T4216] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 42.821085][ T4221] netlink: 'syz.6.161': attribute type 322 has an invalid length. [ 43.074828][ T4234] loop6: detected capacity change from 0 to 512 [ 43.141979][ T4234] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.164: Failed to acquire dquot type 1 [ 43.232720][ T4234] EXT4-fs (loop6): 1 truncate cleaned up [ 43.249024][ T4245] team0 (unregistering): Port device team_slave_0 removed [ 43.253119][ T4234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.270605][ T4245] team0 (unregistering): Port device team_slave_1 removed [ 43.301672][ T4234] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.398083][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.420883][ T4257] loop3: detected capacity change from 0 to 764 [ 43.484180][ T4257] syz.3.171: attempt to access beyond end of device [ 43.484180][ T4257] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 43.553984][ T4257] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 43.601515][ T4272] ip6gre1: entered allmulticast mode [ 43.772923][ T4279] loop3: detected capacity change from 0 to 128 [ 43.834886][ T4279] syz.3.176[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.834981][ T4279] syz.3.176[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.892143][ T4279] syz.3.176[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.967749][ T4294] __nla_validate_parse: 2 callbacks suppressed [ 43.967767][ T4294] netlink: 280 bytes leftover after parsing attributes in process `syz.3.181'. [ 43.998831][ T4295] loop2: detected capacity change from 0 to 512 [ 43.999196][ T4293] loop4: detected capacity change from 0 to 512 [ 44.013330][ T4295] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 44.031723][ T4295] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 44.038864][ T4295] EXT4-fs (loop2): mount failed [ 44.086841][ T4293] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.183: Failed to acquire dquot type 1 [ 44.108953][ T4293] EXT4-fs (loop4): 1 truncate cleaned up [ 44.114923][ T4293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.127955][ T4293] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.149617][ T4311] FAULT_INJECTION: forcing a failure. [ 44.149617][ T4311] name failslab, interval 1, probability 0, space 0, times 0 [ 44.162440][ T4311] CPU: 1 UID: 0 PID: 4311 Comm: syz.3.187 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 44.173042][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.183091][ T4311] Call Trace: [ 44.186356][ T4311] [ 44.189277][ T4311] dump_stack_lvl+0xf2/0x150 [ 44.193887][ T4311] dump_stack+0x15/0x1a [ 44.198092][ T4311] should_fail_ex+0x223/0x230 [ 44.202787][ T4311] should_failslab+0x8f/0xb0 [ 44.207464][ T4311] kmem_cache_alloc_node_noprof+0x59/0x320 [ 44.213262][ T4311] ? __alloc_skb+0x10b/0x310 [ 44.217904][ T4311] __alloc_skb+0x10b/0x310 [ 44.222401][ T4311] ? audit_log_start+0x34c/0x6b0 [ 44.227465][ T4311] audit_log_start+0x368/0x6b0 [ 44.232252][ T4311] ? fixup_exception+0x7c0/0xca0 [ 44.237191][ T4311] audit_seccomp+0x4b/0x130 [ 44.241686][ T4311] ? cgroup_rstat_updated+0x9f/0x570 [ 44.247012][ T4311] __seccomp_filter+0x6fa/0x1180 [ 44.251973][ T4311] ? __perf_event_task_sched_out+0x138/0x1010 [ 44.258059][ T4311] ? __dequeue_entity+0x22/0x310 [ 44.262997][ T4311] __secure_computing+0x9f/0x1c0 [ 44.267936][ T4311] syscall_trace_enter+0xd1/0x1f0 [ 44.273002][ T4311] do_syscall_64+0xaa/0x1c0 [ 44.277534][ T4311] ? clear_bhb_loop+0x55/0xb0 [ 44.282200][ T4311] ? clear_bhb_loop+0x55/0xb0 [ 44.286940][ T4311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.292878][ T4311] RIP: 0033:0x7fdb874ae8ec [ 44.297283][ T4311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.316890][ T4311] RSP: 002b:00007fdb85b27050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.325399][ T4311] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874ae8ec [ 44.333362][ T4311] RDX: 000000000000000f RSI: 00007fdb85b270b0 RDI: 0000000000000003 [ 44.341326][ T4311] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.349288][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.357259][ T4311] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 44.365224][ T4311] [ 44.376661][ T4313] loop6: detected capacity change from 0 to 512 [ 44.389825][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.403982][ T4313] EXT4-fs: Ignoring removed orlov option [ 44.416270][ T4313] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 44.446230][ T4313] EXT4-fs (loop6): 1 orphan inode deleted [ 44.452007][ T4313] EXT4-fs (loop6): 1 truncate cleaned up [ 44.452389][ T4325] loop2: detected capacity change from 0 to 1024 [ 44.460129][ T4313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.477484][ T4307] FAULT_INJECTION: forcing a failure. [ 44.477484][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 44.479415][ T4319] IPVS: Unknown mcast interface: wlan0 [ 44.490123][ T4307] CPU: 1 UID: 0 PID: 4307 Comm: syz.6.186 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 44.490148][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.490158][ T4307] Call Trace: [ 44.519540][ T4307] [ 44.522475][ T4307] dump_stack_lvl+0xf2/0x150 [ 44.523175][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 44.527071][ T4307] dump_stack+0x15/0x1a [ 44.527101][ T4307] should_fail_ex+0x223/0x230 [ 44.527122][ T4307] should_failslab+0x8f/0xb0 [ 44.534765][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 44.538863][ T4307] __kmalloc_noprof+0xab/0x3f0 [ 44.538885][ T4307] ? __d_alloc+0x8f/0x340 [ 44.538907][ T4307] __d_alloc+0x8f/0x340 [ 44.554746][ T4325] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.191: Failed to acquire dquot type 0 [ 44.555731][ T4307] d_alloc_parallel+0x54/0xc60 [ 44.561987][ T4325] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 44.564811][ T4307] ? __rcu_read_unlock+0x4e/0x70 [ 44.568987][ T4325] inode 13: [ 44.580038][ T4307] ? __d_lookup+0x342/0x370 [ 44.584847][ T4325] block 144: [ 44.592362][ T4307] ? try_to_unlazy+0x279/0x3b0 [ 44.597316][ T4325] freeing already freed block (bit 9); block bitmap corrupt. [ 44.600473][ T4307] path_openat+0x6c8/0x1fa0 [ 44.608839][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.612956][ T4307] ? kstrtoull+0x110/0x140 [ 44.612984][ T4307] do_filp_open+0x107/0x230 [ 44.620408][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.624859][ T4307] do_sys_openat2+0xab/0x120 [ 44.632493][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.636812][ T4307] __x64_sys_creat+0x66/0x90 [ 44.636835][ T4307] x64_sys_call+0x1084/0x2dc0 [ 44.641316][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.648903][ T4307] do_syscall_64+0xc9/0x1c0 [ 44.648948][ T4307] ? clear_bhb_loop+0x55/0xb0 [ 44.653531][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.661114][ T4307] ? clear_bhb_loop+0x55/0xb0 [ 44.661134][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.665722][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.670398][ T4307] RIP: 0033:0x7f8770dafed9 [ 44.678035][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.682474][ T4307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.687325][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.694813][ T4307] RSP: 002b:00007f876f427058 EFLAGS: 00000246 [ 44.699501][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.705330][ T4307] ORIG_RAX: 0000000000000055 [ 44.705339][ T4307] RAX: ffffffffffffffda RBX: 00007f8770f75fa0 RCX: 00007f8770dafed9 [ 44.705382][ T4307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 44.705394][ T4307] RBP: 00007f876f4270a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.705404][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.705415][ T4307] R13: 0000000000000000 R14: 00007f8770f75fa0 R15: 00007ffe9dfe9818 [ 44.713032][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.717417][ T4307] [ 44.717931][ T4325] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.191: corrupted inode contents [ 44.725050][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.842618][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.850326][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.858120][ T3359] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 44.869135][ T3359] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.872638][ T4325] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.191: mark_inode_dirty error [ 44.891836][ T4325] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.191: corrupted inode contents [ 44.913273][ T4325] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.191: mark_inode_dirty error [ 44.924964][ T4325] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.191: corrupted inode contents [ 44.926206][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.942088][ T4325] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 44.954688][ T4325] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.191: corrupted inode contents [ 44.967310][ T4325] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.191: mark_inode_dirty error [ 44.992579][ T4325] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 45.017443][ T4325] EXT4-fs (loop2): 1 truncate cleaned up [ 45.028904][ T4325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.064398][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 45.075644][ C0] hrtimer: interrupt took 27324 ns [ 45.102053][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.124935][ T4363] Cannot find add_set index 0 as target [ 45.145897][ T4366] syzkaller0: entered promiscuous mode [ 45.151471][ T4366] syzkaller0: entered allmulticast mode [ 45.163004][ T4370] IPv6: Can't replace route, no match found [ 45.169384][ T4366] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 45.294688][ T4381] pim6reg1: entered promiscuous mode [ 45.300066][ T4381] pim6reg1: entered allmulticast mode [ 45.341488][ T4384] loop2: detected capacity change from 0 to 512 [ 45.350051][ T4384] EXT4-fs: inline encryption not supported [ 45.369286][ T4384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.373609][ T4390] loop3: detected capacity change from 0 to 2048 [ 45.383593][ T4391] ip6gre1: entered allmulticast mode [ 45.399206][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 45.406718][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.414166][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.421593][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.429077][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 45.436490][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.443871][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.450288][ T4384] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.213: Failed to acquire dquot type 1 [ 45.451291][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.463105][ T4384] EXT4-fs (loop2): 1 truncate cleaned up [ 45.469757][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.479382][ T4384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.482796][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 45.495273][ T4384] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.502597][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.502620][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.528099][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.529222][ T4385] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.213: Failed to acquire dquot type 1 [ 45.535491][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.552744][ T4384] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.213: Failed to acquire dquot type 1 [ 45.554048][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.572580][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.580029][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.587471][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.594941][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.602424][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.609890][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.617337][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.624727][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.632151][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.639599][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.647067][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.654539][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.662060][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.669507][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.676929][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.684321][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.691477][ T4385] bond1: entered promiscuous mode [ 45.691721][ T3375] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 45.696721][ T4385] bond1: entered allmulticast mode [ 45.704555][ T3375] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 45.722134][ T4385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.738553][ T4385] bond1 (unregistering): Released all slaves [ 45.825051][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.946033][ T4432] loop6: detected capacity change from 0 to 128 [ 46.000975][ T4433] loop2: detected capacity change from 0 to 164 [ 46.003328][ T4429] loop1: detected capacity change from 0 to 2048 [ 46.013981][ T4433] Unable to read rock-ridge attributes [ 46.022167][ T4433] Unable to read rock-ridge attributes [ 46.028807][ T4433] +}[@[4433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.028928][ T4433] +}[@[4433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.040036][ T4433] +}[@[4433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.044934][ T4429] Alternate GPT is invalid, using primary GPT. [ 46.067928][ T4429] loop1: p2 p3 p7 [ 46.129745][ T4446] ip6gre1: entered allmulticast mode [ 46.134325][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 46.138870][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 46.189485][ T4425] geneve0: entered allmulticast mode [ 46.264719][ T4458] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 46.277523][ T4458] loop4: detected capacity change from 0 to 512 [ 46.300302][ T4460] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 46.312065][ T4460] bridge_slave_1: left allmulticast mode [ 46.317866][ T4460] bridge_slave_1: left promiscuous mode [ 46.318500][ T4464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.323578][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.338341][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 46.344066][ T4458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.361947][ T4458] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.378984][ T4464] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.388117][ T4460] bridge_slave_0: left allmulticast mode [ 46.393971][ T4460] bridge_slave_0: left promiscuous mode [ 46.397917][ T4464] loop2: detected capacity change from 0 to 512 [ 46.399780][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.413443][ T4464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.438972][ T4464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.451799][ T4464] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.463460][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.485651][ T4473] loop4: detected capacity change from 0 to 512 [ 46.492568][ T4473] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 46.501566][ T4473] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 46.508571][ T4473] EXT4-fs (loop4): mount failed [ 46.528440][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.529181][ T4473] loop4: detected capacity change from 0 to 512 [ 46.557743][ T4473] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 46.577757][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 46.586725][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 46.688300][ T4477] loop2: detected capacity change from 0 to 8192 [ 46.699775][ T4477] vfat: Unknown parameter 'ÿÿ00000000000000000008ÿÿ' [ 46.714910][ T4483] netlink: 133536 bytes leftover after parsing attributes in process `syz.4.238'. [ 46.761199][ T4485] ip6gre1: entered allmulticast mode [ 46.792560][ T4487] loop2: detected capacity change from 0 to 2048 [ 46.814052][ T4489] loop6: detected capacity change from 0 to 128 [ 46.840177][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 46.847747][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.855143][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.862665][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.870133][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 46.877608][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.885062][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.892554][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.900071][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.907572][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 46.914997][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.922584][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.930237][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.937671][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.945129][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.952651][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.960189][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.967635][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.975064][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.982497][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.989987][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.997395][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.004773][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.012189][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.019588][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.027097][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.034553][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.041962][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.049350][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.056828][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.064326][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.071819][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.081494][ T3373] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.130704][ T4501] FAULT_INJECTION: forcing a failure. [ 47.130704][ T4501] name failslab, interval 1, probability 0, space 0, times 0 [ 47.143413][ T4501] CPU: 1 UID: 0 PID: 4501 Comm: syz.3.246 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 47.154161][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.158942][ T4504] loop6: detected capacity change from 0 to 512 [ 47.164212][ T4501] Call Trace: [ 47.173766][ T4501] [ 47.176700][ T4501] dump_stack_lvl+0xf2/0x150 [ 47.181393][ T4501] dump_stack+0x15/0x1a [ 47.185572][ T4501] should_fail_ex+0x223/0x230 [ 47.190293][ T4501] should_failslab+0x8f/0xb0 [ 47.194980][ T4501] kmem_cache_alloc_node_noprof+0x59/0x320 [ 47.195549][ T4504] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.243: invalid indirect mapped block 256 (level 2) [ 47.200781][ T4501] ? perf_event_alloc+0x157/0x12e0 [ 47.219149][ T4501] perf_event_alloc+0x157/0x12e0 [ 47.224083][ T4501] ? __pfx_ptrace_triggered+0x10/0x10 [ 47.229449][ T4501] ? __pfx_ptrace_triggered+0x10/0x10 [ 47.234842][ T4501] perf_event_create_kernel_counter+0xa5/0x370 [ 47.241073][ T4501] ? __pfx_ptrace_triggered+0x10/0x10 [ 47.246494][ T4501] register_user_hw_breakpoint+0x32/0x40 [ 47.252130][ T4501] ptrace_set_debugreg+0x276/0x740 [ 47.257250][ T4501] ? get_pid_task+0x8e/0xc0 [ 47.261746][ T4501] ? proc_fail_nth_write+0x12a/0x150 [ 47.267089][ T4501] arch_ptrace+0x36b/0x400 [ 47.271531][ T4501] __se_sys_ptrace+0xf4/0x2b0 [ 47.276221][ T4501] __x64_sys_ptrace+0x55/0x70 [ 47.280900][ T4501] x64_sys_call+0x2225/0x2dc0 [ 47.285667][ T4501] do_syscall_64+0xc9/0x1c0 [ 47.290173][ T4501] ? clear_bhb_loop+0x55/0xb0 [ 47.294847][ T4501] ? clear_bhb_loop+0x55/0xb0 [ 47.299532][ T4501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.305506][ T4501] RIP: 0033:0x7fdb874afed9 [ 47.309913][ T4501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.329523][ T4501] RSP: 002b:00007fdb85b27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 47.338013][ T4501] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874afed9 [ 47.345980][ T4501] RDX: 0000000000000358 RSI: 0000000000000085 RDI: 0000000000000006 [ 47.353945][ T4501] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 47.361943][ T4501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.369913][ T4501] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 47.377961][ T4501] [ 47.384396][ T4504] EXT4-fs (loop6): 2 truncates cleaned up [ 47.390733][ T4504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.414383][ T4513] FAULT_INJECTION: forcing a failure. [ 47.414383][ T4513] name failslab, interval 1, probability 0, space 0, times 0 [ 47.427182][ T4513] CPU: 1 UID: 0 PID: 4513 Comm: syz.3.249 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 47.437793][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.447993][ T4513] Call Trace: [ 47.451353][ T4513] [ 47.454286][ T4513] dump_stack_lvl+0xf2/0x150 [ 47.458899][ T4513] dump_stack+0x15/0x1a [ 47.463061][ T4513] should_fail_ex+0x223/0x230 [ 47.467744][ T4513] should_failslab+0x8f/0xb0 [ 47.472337][ T4513] kmem_cache_alloc_noprof+0x52/0x320 [ 47.477841][ T4513] ? __anon_vma_prepare+0xcf/0x310 [ 47.483071][ T4513] __anon_vma_prepare+0xcf/0x310 [ 47.488051][ T4513] ? do_wp_page+0x100e/0x2340 [ 47.492721][ T4513] do_wp_page+0x1016/0x2340 [ 47.497293][ T4513] ? __rcu_read_lock+0x36/0x50 [ 47.502109][ T4513] handle_mm_fault+0xc63/0x2ac0 [ 47.506961][ T4513] exc_page_fault+0x3b9/0x650 [ 47.511678][ T4513] asm_exc_page_fault+0x26/0x30 [ 47.516560][ T4513] RIP: 0033:0x7fdb87371b63 [ 47.521055][ T4513] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 47.540668][ T4513] RSP: 002b:00007fdb85b26410 EFLAGS: 00010202 [ 47.546767][ T4513] RAX: 00000000000001c0 RBX: 00007fdb85b264b0 RCX: 00007fdb7d707000 [ 47.554743][ T4513] RDX: 00007fdb85b26650 RSI: 0000000000000001 RDI: 00007fdb85b26550 [ 47.562725][ T4513] RBP: 00000000000000bd R08: 0000000000000007 R09: 0000000000000032 [ 47.570832][ T4513] R10: 0000000000000046 R11: 00007fdb85b264b0 R12: 0000000000000001 [ 47.578937][ T4513] R13: 00007fdb87538720 R14: 0000000000000002 R15: 00007fdb85b26550 [ 47.586965][ T4513] [ 47.590178][ T4513] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 47.593277][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 47.593289][ T29] audit: type=1400 audit(1733660146.045:1179): avc: denied { write } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.606895][ T4513] loop3: detected capacity change from 0 to 2048 [ 47.625450][ T29] audit: type=1400 audit(1733660146.045:1180): avc: denied { remove_name } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.654500][ T29] audit: type=1400 audit(1733660146.045:1181): avc: denied { rename } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.676861][ T29] audit: type=1400 audit(1733660146.045:1182): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.699459][ T29] audit: type=1400 audit(1733660146.045:1183): avc: denied { unlink } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.721924][ T29] audit: type=1400 audit(1733660146.045:1184): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.743404][ T29] audit: type=1400 audit(1733660146.205:1185): avc: denied { bind } for pid=4516 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.762979][ T4520] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 47.770658][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 47.779624][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 47.780553][ T4513] Alternate GPT is invalid, using primary GPT. [ 47.788436][ T4517] netlink: 2 bytes leftover after parsing attributes in process `syz.4.250'. [ 47.792064][ T4520] loop2: detected capacity change from 0 to 512 [ 47.794839][ T4513] loop3: p2 p3 p7 [ 47.827438][ T2999] Alternate GPT is invalid, using primary GPT. [ 47.833747][ T2999] loop3: p2 p3 p7 [ 47.858340][ T29] audit: type=1326 audit(1733660146.315:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf37fed9 code=0x7ffc0000 [ 47.872690][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 47.887096][ T4523] FAULT_INJECTION: forcing a failure. [ 47.887096][ T4523] name failslab, interval 1, probability 0, space 0, times 0 [ 47.893062][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 47.903989][ T4523] CPU: 1 UID: 0 PID: 4523 Comm: syz.4.252 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 47.904017][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.904028][ T4523] Call Trace: [ 47.904035][ T4523] [ 47.916379][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.924393][ T4523] dump_stack_lvl+0xf2/0x150 [ 47.940866][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 47.950358][ T4523] dump_stack+0x15/0x1a [ 47.956271][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 47.964661][ T4523] should_fail_ex+0x223/0x230 [ 47.970752][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.978576][ T4523] should_failslab+0x8f/0xb0 [ 47.997751][ T4523] kmem_cache_alloc_noprof+0x52/0x320 [ 48.002727][ T29] audit: type=1326 audit(1733660146.335:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff5bf37fed9 code=0x7ffc0000 [ 48.003195][ T4523] ? skb_clone+0x154/0x1f0 [ 48.026518][ T29] audit: type=1326 audit(1733660146.335:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf37fed9 code=0x7ffc0000 [ 48.030853][ T4523] skb_clone+0x154/0x1f0 [ 48.058360][ T4523] dev_queue_xmit_nit+0x14b/0x680 [ 48.063405][ T4523] dev_hard_start_xmit+0xcc/0x3f0 [ 48.068469][ T4523] sch_direct_xmit+0x1a9/0x580 [ 48.073323][ T4523] ? fixup_exception+0x7c0/0xca0 [ 48.078312][ T4523] __dev_queue_xmit+0xf6a/0x2090 [ 48.083303][ T4523] ? __dev_queue_xmit+0x186/0x2090 [ 48.088493][ T4523] ? bsearch+0x98/0xc0 [ 48.092610][ T4523] ? ___slab_alloc+0x2b7/0x980 [ 48.095796][ T4520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.097371][ T4523] ? __pfx_eth_header+0x10/0x10 [ 48.109967][ T4520] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.114613][ T4523] lapbeth_data_transmit+0x18e/0x1b0 [ 48.130095][ T4532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.130348][ T4523] ? __pfx_lapbeth_data_transmit+0x10/0x10 [ 48.140136][ T4532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.145038][ T4523] lapb_data_transmit+0x5a/0x80 [ 48.157717][ T4523] lapb_transmit_buffer+0x139/0x180 [ 48.162934][ T4523] lapb_send_control+0x1ed/0x200 [ 48.167911][ T4523] __lapb_disconnect_request+0x70/0xf0 [ 48.173379][ T4523] lapb_device_event+0x1d5/0x3d0 [ 48.178330][ T4523] ? __pfx_lapb_device_event+0x10/0x10 [ 48.183853][ T4523] raw_notifier_call_chain+0x6f/0x1d0 [ 48.189295][ T4523] ? bstr_printf+0x99a/0x9e0 [ 48.193927][ T4523] ? copy_from_kernel_nofault+0x60/0x1d0 [ 48.199556][ T4523] call_netdevice_notifiers_info+0xae/0x100 [ 48.205448][ T4523] __dev_close_many+0xa4/0x1e0 [ 48.210208][ T4523] dev_close_many+0x103/0x240 [ 48.214879][ T4523] ? bond_netdev_event+0x5e/0x750 [ 48.219907][ T4523] ? __pfx_netdevice_event+0x10/0x10 [ 48.225250][ T4523] dev_close+0xce/0x140 [ 48.229403][ T4523] lapbeth_device_event+0x27b/0x6d0 [ 48.234665][ T4523] ? __pfx_lapbeth_device_event+0x10/0x10 [ 48.240373][ T4523] raw_notifier_call_chain+0x6f/0x1d0 [ 48.245790][ T4523] call_netdevice_notifiers_info+0xae/0x100 [ 48.251735][ T4523] __dev_close_many+0xa4/0x1e0 [ 48.256502][ T4523] __dev_change_flags+0x366/0x410 [ 48.261601][ T4523] dev_change_flags+0x59/0xd0 [ 48.266342][ T4523] dev_ifsioc+0x67f/0xa10 [ 48.270671][ T4523] dev_ioctl+0x7fa/0xab0 [ 48.274950][ T4523] sock_do_ioctl+0x11c/0x260 [ 48.279542][ T4523] sock_ioctl+0x40f/0x600 [ 48.283939][ T4523] ? __pfx_sock_ioctl+0x10/0x10 [ 48.288789][ T4523] __se_sys_ioctl+0xc9/0x140 [ 48.293376][ T4523] __x64_sys_ioctl+0x43/0x50 [ 48.297960][ T4523] x64_sys_call+0x1690/0x2dc0 [ 48.302670][ T4523] do_syscall_64+0xc9/0x1c0 [ 48.307166][ T4523] ? clear_bhb_loop+0x55/0xb0 [ 48.311858][ T4523] ? clear_bhb_loop+0x55/0xb0 [ 48.316532][ T4523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.322471][ T4523] RIP: 0033:0x7ff5bf37fed9 [ 48.326901][ T4523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.346499][ T4523] RSP: 002b:00007ff5bd9f7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.354906][ T4523] RAX: ffffffffffffffda RBX: 00007ff5bf545fa0 RCX: 00007ff5bf37fed9 [ 48.362957][ T4523] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 000000000000000d [ 48.370958][ T4523] RBP: 00007ff5bd9f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.379024][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.386987][ T4523] R13: 0000000000000000 R14: 00007ff5bf545fa0 R15: 00007ffcf8d2c288 [ 48.394966][ T4523] [ 48.410958][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.421398][ T4520] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 48.434924][ T4530] ip6gre1: entered allmulticast mode [ 48.517149][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.522915][ T4552] FAULT_INJECTION: forcing a failure. [ 48.522915][ T4552] name failslab, interval 1, probability 0, space 0, times 0 [ 48.538950][ T4552] CPU: 0 UID: 0 PID: 4552 Comm: syz.3.258 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 48.549569][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.559636][ T4552] Call Trace: [ 48.562926][ T4552] [ 48.565910][ T4552] dump_stack_lvl+0xf2/0x150 [ 48.570563][ T4552] dump_stack+0x15/0x1a [ 48.574738][ T4552] should_fail_ex+0x223/0x230 [ 48.579441][ T4552] should_failslab+0x8f/0xb0 [ 48.584142][ T4552] __kmalloc_node_noprof+0xad/0x410 [ 48.589397][ T4552] ? __kvmalloc_node_noprof+0x72/0x170 [ 48.594875][ T4552] ? cgroup_rstat_updated+0x9f/0x570 [ 48.600298][ T4552] __kvmalloc_node_noprof+0x72/0x170 [ 48.605618][ T4552] seq_read_iter+0x144/0x930 [ 48.610203][ T4552] ? __alloc_pages_noprof+0x194/0x340 [ 48.615713][ T4552] kernfs_fop_read_iter+0xc0/0x310 [ 48.620903][ T4552] ? __kmalloc_noprof+0x1e3/0x3f0 [ 48.625938][ T4552] copy_splice_read+0x3a0/0x5d0 [ 48.630797][ T4552] ? __pfx_copy_splice_read+0x10/0x10 [ 48.636215][ T4552] splice_direct_to_actor+0x269/0x670 [ 48.641640][ T4552] ? __pfx_direct_splice_actor+0x10/0x10 [ 48.647315][ T4552] do_splice_direct+0xd7/0x150 [ 48.652179][ T4552] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 48.658090][ T4552] do_sendfile+0x398/0x660 [ 48.662509][ T4552] __x64_sys_sendfile64+0x110/0x150 [ 48.667803][ T4552] x64_sys_call+0xfbd/0x2dc0 [ 48.672400][ T4552] do_syscall_64+0xc9/0x1c0 [ 48.676912][ T4552] ? clear_bhb_loop+0x55/0xb0 [ 48.681587][ T4552] ? clear_bhb_loop+0x55/0xb0 [ 48.686338][ T4552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.692344][ T4552] RIP: 0033:0x7fdb874afed9 [ 48.696797][ T4552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.716445][ T4552] RSP: 002b:00007fdb85b27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 48.724850][ T4552] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874afed9 [ 48.732816][ T4552] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 48.740786][ T4552] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.748763][ T4552] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 48.756763][ T4552] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 48.764731][ T4552] [ 48.827599][ T4573] loop4: detected capacity change from 0 to 2048 [ 48.843553][ T4573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.890165][ T4583] loop6: detected capacity change from 0 to 128 [ 48.908392][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.923455][ T4587] FAULT_INJECTION: forcing a failure. [ 48.923455][ T4587] name failslab, interval 1, probability 0, space 0, times 0 [ 48.936231][ T4587] CPU: 0 UID: 0 PID: 4587 Comm: syz.3.260 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 48.946939][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.957053][ T4587] Call Trace: [ 48.960345][ T4587] [ 48.963289][ T4587] dump_stack_lvl+0xf2/0x150 [ 48.967993][ T4587] dump_stack+0x15/0x1a [ 48.972181][ T4587] should_fail_ex+0x223/0x230 [ 48.976910][ T4587] ? audit_log_d_path+0x96/0x250 [ 48.981888][ T4587] should_failslab+0x8f/0xb0 [ 48.986506][ T4587] __kmalloc_cache_noprof+0x4e/0x320 [ 48.991830][ T4587] audit_log_d_path+0x96/0x250 [ 48.996655][ T4587] ? __rcu_read_unlock+0x4e/0x70 [ 49.001627][ T4587] audit_log_d_path_exe+0x42/0x70 [ 49.006670][ T4587] audit_log_task+0x192/0x1c0 [ 49.011359][ T4587] audit_seccomp+0x68/0x130 [ 49.015882][ T4587] __seccomp_filter+0x6fa/0x1180 [ 49.020839][ T4587] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.026529][ T4587] ? vfs_write+0x596/0x920 [ 49.030962][ T4587] __secure_computing+0x9f/0x1c0 [ 49.035978][ T4587] syscall_trace_enter+0xd1/0x1f0 [ 49.041034][ T4587] ? fpregs_assert_state_consistent+0x83/0xa0 [ 49.047121][ T4587] do_syscall_64+0xaa/0x1c0 [ 49.051631][ T4587] ? clear_bhb_loop+0x55/0xb0 [ 49.056310][ T4587] ? clear_bhb_loop+0x55/0xb0 [ 49.060980][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.066874][ T4587] RIP: 0033:0x7fdb874afed9 [ 49.071410][ T4587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.091014][ T4587] RSP: 002b:00007fdb85b06058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.099434][ T4587] RAX: ffffffffffffffda RBX: 00007fdb87676080 RCX: 00007fdb874afed9 [ 49.107475][ T4587] RDX: 0000000020000000 RSI: 0000000040182103 RDI: 0000000000000005 [ 49.115452][ T4587] RBP: 00007fdb85b060a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.123440][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.131431][ T4587] R13: 0000000000000000 R14: 00007fdb87676080 R15: 00007ffe7974b8c8 [ 49.139398][ T4587] [ 49.167908][ T4592] netlink: 40 bytes leftover after parsing attributes in process `syz.6.265'. [ 49.250580][ T4604] loop4: detected capacity change from 0 to 512 [ 49.250729][ T4604] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.260491][ T4604] loop4: detected capacity change from 0 to 512 [ 49.290222][ T4611] loop6: detected capacity change from 0 to 512 [ 49.292027][ T4604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.292148][ T4604] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.328103][ T4611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.328232][ T4611] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.373490][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.396843][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.573636][ T4649] loop4: detected capacity change from 0 to 512 [ 49.624656][ T4649] loop4: detected capacity change from 0 to 1024 [ 49.668053][ T4657] loop3: detected capacity change from 0 to 512 [ 49.697229][ T4649] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.273: Failed to acquire dquot type 0 [ 49.711130][ T4657] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 49.728689][ T4649] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.746559][ T4657] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 49.762932][ T4657] EXT4-fs (loop3): mount failed [ 49.769718][ T4663] loop2: detected capacity change from 0 to 512 [ 49.795626][ T4657] loop3: detected capacity change from 0 to 512 [ 49.805237][ T4649] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.273: corrupted inode contents [ 49.830937][ T4657] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 49.846487][ T4649] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #13: comm syz.4.273: mark_inode_dirty error [ 49.864746][ T4657] FAULT_INJECTION: forcing a failure. [ 49.864746][ T4657] name failslab, interval 1, probability 0, space 0, times 0 [ 49.877430][ T4657] CPU: 0 UID: 0 PID: 4657 Comm: syz.3.275 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 49.888020][ T4657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.890738][ T4626] loop1: detected capacity change from 0 to 8192 [ 49.898182][ T4657] Call Trace: [ 49.898191][ T4657] [ 49.898213][ T4657] dump_stack_lvl+0xf2/0x150 [ 49.915295][ T4657] dump_stack+0x15/0x1a [ 49.919503][ T4657] should_fail_ex+0x223/0x230 [ 49.920769][ T4626] vfat: Unknown parameter 'ÿÿ00000000000000000008ÿÿ' [ 49.924183][ T4657] should_failslab+0x8f/0xb0 [ 49.935593][ T4657] kmem_cache_alloc_noprof+0x52/0x320 [ 49.940976][ T4657] ? alloc_empty_file+0xd0/0x200 [ 49.946002][ T4657] ? _raw_spin_unlock+0x26/0x50 [ 49.950927][ T4657] alloc_empty_file+0xd0/0x200 [ 49.955773][ T4657] alloc_file_pseudo+0xc3/0x140 [ 49.960650][ T4657] anon_inode_getfile+0xa3/0x120 [ 49.965595][ T4657] do_eventfd+0x10a/0x1b0 [ 49.970026][ T4657] __x64_sys_eventfd+0x20/0x30 [ 49.974942][ T4657] x64_sys_call+0x2626/0x2dc0 [ 49.979625][ T4657] do_syscall_64+0xc9/0x1c0 [ 49.984212][ T4657] ? clear_bhb_loop+0x55/0xb0 [ 49.988900][ T4657] ? clear_bhb_loop+0x55/0xb0 [ 49.993641][ T4657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.999599][ T4657] RIP: 0033:0x7fdb874afed9 [ 50.004023][ T4657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.023706][ T4657] RSP: 002b:00007fdb85b27058 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 50.032200][ T4657] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874afed9 [ 50.040180][ T4657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.048172][ T4657] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.056234][ T4657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.064214][ T4657] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 50.072243][ T4657] [ 50.082480][ T4649] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.273: corrupted inode contents [ 50.128984][ T4649] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.273: mark_inode_dirty error [ 50.140766][ T4649] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.273: corrupted inode contents [ 50.153691][ T4663] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 50.168395][ T4663] EXT4-fs (loop2): mount failed [ 50.168693][ T4649] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 50.174179][ T4649] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.273: corrupted inode contents [ 50.228522][ T4644] loop6: detected capacity change from 0 to 8192 [ 50.240518][ T4704] Cannot find del_set index 4 as target [ 50.249438][ T4644] vfat: Unknown parameter 'ÿÿ00000000000000000006ÿÿ' [ 50.266677][ T4649] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.273: mark_inode_dirty error [ 50.322887][ T4649] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 50.333344][ T4649] EXT4-fs (loop4): 1 truncate cleaned up [ 50.339939][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.569336][ T4714] netlink: 16 bytes leftover after parsing attributes in process `syz.6.280'. [ 50.663017][ T4719] FAULT_INJECTION: forcing a failure. [ 50.663017][ T4719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.664424][ T4715] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.273: Failed to acquire dquot type 0 [ 50.676195][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: syz.6.282 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 50.697795][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.707887][ T4719] Call Trace: [ 50.711157][ T4719] [ 50.714077][ T4719] dump_stack_lvl+0xf2/0x150 [ 50.718770][ T4719] dump_stack+0x15/0x1a [ 50.722942][ T4719] should_fail_ex+0x223/0x230 [ 50.727619][ T4719] should_fail+0xb/0x10 [ 50.731766][ T4719] should_fail_usercopy+0x1a/0x20 [ 50.736863][ T4719] _copy_from_user+0x1e/0xb0 [ 50.741452][ T4719] ____sys_sendmsg+0x1a4/0x410 [ 50.746213][ T4719] __sys_sendmsg+0x19d/0x230 [ 50.750802][ T4719] __x64_sys_sendmsg+0x46/0x50 [ 50.755733][ T4719] x64_sys_call+0x2734/0x2dc0 [ 50.760449][ T4719] do_syscall_64+0xc9/0x1c0 [ 50.764958][ T4719] ? clear_bhb_loop+0x55/0xb0 [ 50.769639][ T4719] ? clear_bhb_loop+0x55/0xb0 [ 50.774328][ T4719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.780253][ T4719] RIP: 0033:0x7f8770dafed9 [ 50.784773][ T4719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.804400][ T4719] RSP: 002b:00007f876f427058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.812809][ T4719] RAX: ffffffffffffffda RBX: 00007f8770f75fa0 RCX: 00007f8770dafed9 [ 50.820818][ T4719] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 50.828796][ T4719] RBP: 00007f876f4270a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.836849][ T4719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.844815][ T4719] R13: 0000000000000000 R14: 00007f8770f75fa0 R15: 00007ffe9dfe9818 [ 50.852843][ T4719] [ 50.884899][ T4721] FAULT_INJECTION: forcing a failure. [ 50.884899][ T4721] name failslab, interval 1, probability 0, space 0, times 0 [ 50.897573][ T4721] CPU: 1 UID: 0 PID: 4721 Comm: syz.3.283 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 50.908168][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.918679][ T4721] Call Trace: [ 50.922038][ T4721] [ 50.925030][ T4721] dump_stack_lvl+0xf2/0x150 [ 50.929654][ T4721] dump_stack+0x15/0x1a [ 50.933985][ T4721] should_fail_ex+0x223/0x230 [ 50.938682][ T4721] should_failslab+0x8f/0xb0 [ 50.943315][ T4721] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 50.949762][ T4721] ? security_context_to_sid_core+0x66/0x3b0 [ 50.955886][ T4721] kmemdup_nul+0x30/0x80 [ 50.960253][ T4721] security_context_to_sid_core+0x66/0x3b0 [ 50.966249][ T4721] security_context_to_sid+0x2f/0x40 [ 50.971638][ T4721] selinux_inode_setxattr+0x4d8/0x700 [ 50.977037][ T4721] security_inode_setxattr+0x169/0x1f0 [ 50.982601][ T4721] __vfs_setxattr_locked+0x88/0x1d0 [ 50.987981][ T4721] vfs_setxattr+0x140/0x290 [ 50.992309][ T4724] loop2: detected capacity change from 0 to 512 [ 50.992489][ T4721] file_setxattr+0x139/0x1b0 [ 51.003329][ T4721] path_setxattrat+0x2c2/0x310 [ 51.008164][ T4721] __x64_sys_fsetxattr+0x6d/0x80 [ 51.013116][ T4721] x64_sys_call+0x29d2/0x2dc0 [ 51.017806][ T4721] do_syscall_64+0xc9/0x1c0 [ 51.022386][ T4721] ? clear_bhb_loop+0x55/0xb0 [ 51.027119][ T4721] ? clear_bhb_loop+0x55/0xb0 [ 51.031914][ T4721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.037810][ T4721] RIP: 0033:0x7fdb874afed9 [ 51.042214][ T4721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.061814][ T4721] RSP: 002b:00007fdb85b27058 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 51.070301][ T4721] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874afed9 [ 51.078380][ T4721] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000000000004 [ 51.086345][ T4721] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.094370][ T4721] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000002 [ 51.102399][ T4721] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 51.110378][ T4721] [ 51.146554][ T4726] loop3: detected capacity change from 0 to 512 [ 51.156949][ T4726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.176859][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.192082][ T4726] EXT4-fs (loop3): 1 truncate cleaned up [ 51.193853][ T4731] ip6gre2: entered allmulticast mode [ 51.198541][ T4726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.258318][ T4736] loop4: detected capacity change from 0 to 512 [ 51.265130][ T4724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.283991][ T4736] EXT4-fs: Ignoring removed orlov option [ 51.291023][ T4724] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.319817][ T4739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.332167][ T4736] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 51.366386][ T4736] EXT4-fs (loop4): too many log groups per flexible block group [ 51.374138][ T4736] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 51.385715][ T4736] EXT4-fs (loop4): mount failed [ 51.422032][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.449114][ T4739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.504289][ T4753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.292'. [ 51.529684][ T4739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.604230][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.628064][ T4739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.646737][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.296'. [ 51.694585][ T4739] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.717013][ T4739] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.737271][ T4739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.756145][ T4739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.760838][ T4785] loop3: detected capacity change from 0 to 512 [ 51.805482][ T4785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.838297][ T4785] EXT4-fs (loop3): 1 truncate cleaned up [ 51.844373][ T4785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.897293][ T4797] bond2: entered promiscuous mode [ 51.902363][ T4797] bond2: entered allmulticast mode [ 51.907844][ T4797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.918809][ T4797] bond2 (unregistering): Released all slaves [ 51.937620][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.010549][ T4808] FAULT_INJECTION: forcing a failure. [ 52.010549][ T4808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.023666][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: syz.2.305 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 52.024371][ T4812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'. [ 52.034270][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.034285][ T4808] Call Trace: [ 52.034291][ T4808] [ 52.034298][ T4808] dump_stack_lvl+0xf2/0x150 [ 52.034332][ T4808] dump_stack+0x15/0x1a [ 52.063015][ T4810] loop1: detected capacity change from 0 to 512 [ 52.064033][ T4808] should_fail_ex+0x223/0x230 [ 52.064063][ T4808] should_fail+0xb/0x10 [ 52.083243][ T4808] should_fail_usercopy+0x1a/0x20 [ 52.088288][ T4808] _copy_to_user+0x20/0xa0 [ 52.092723][ T4808] simple_read_from_buffer+0xa0/0x110 [ 52.098119][ T4808] proc_fail_nth_read+0xf9/0x140 [ 52.103062][ T4808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.108617][ T4808] vfs_read+0x1a2/0x700 [ 52.112775][ T4808] ? __rcu_read_unlock+0x4e/0x70 [ 52.117802][ T4808] ? __fget_files+0x17c/0x1c0 [ 52.122536][ T4808] ksys_read+0xe8/0x1b0 [ 52.127203][ T4808] __x64_sys_read+0x42/0x50 [ 52.131817][ T4808] x64_sys_call+0x2874/0x2dc0 [ 52.136581][ T4808] do_syscall_64+0xc9/0x1c0 [ 52.141148][ T4808] ? clear_bhb_loop+0x55/0xb0 [ 52.145834][ T4808] ? clear_bhb_loop+0x55/0xb0 [ 52.150607][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.156584][ T4808] RIP: 0033:0x7fd0b722e8ec [ 52.160996][ T4808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.180606][ T4808] RSP: 002b:00007fd0b58a7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.189038][ T4808] RAX: ffffffffffffffda RBX: 00007fd0b73f5fa0 RCX: 00007fd0b722e8ec [ 52.197096][ T4808] RDX: 000000000000000f RSI: 00007fd0b58a70b0 RDI: 0000000000000004 [ 52.205063][ T4808] RBP: 00007fd0b58a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.213111][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.221422][ T4808] R13: 0000000000000000 R14: 00007fd0b73f5fa0 R15: 00007ffdc53d0038 [ 52.229510][ T4808] [ 52.256878][ T4810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.275902][ T4810] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.309040][ T4814] loop3: detected capacity change from 0 to 1024 [ 52.324229][ T4814] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 52.334998][ T4826] loop4: detected capacity change from 0 to 2048 [ 52.335175][ T4814] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 52.351905][ T4814] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.363918][ T4814] EXT4-fs (loop3): invalid journal inode [ 52.370600][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.370880][ T4814] EXT4-fs (loop3): can't get journal size [ 52.396750][ T4827] loop2: detected capacity change from 0 to 512 [ 52.396701][ T4814] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.308: blocks 2-2 from inode overlap system zone [ 52.418791][ T4826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.433017][ T4814] EXT4-fs (loop3): failed to initialize system zone (-117) [ 52.443489][ T4825] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.461856][ T4814] EXT4-fs (loop3): mount failed [ 52.467109][ T4825] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 52.479526][ T4825] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.479526][ T4825] [ 52.481336][ T4827] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 52.489169][ T4825] EXT4-fs (loop4): Total free blocks count 0 [ 52.489191][ T4825] EXT4-fs (loop4): Free/Dirty block details [ 52.489202][ T4825] EXT4-fs (loop4): free_blocks=2415919104 [ 52.489215][ T4825] EXT4-fs (loop4): dirty_blocks=32 [ 52.520191][ T4827] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 52.522039][ T4825] EXT4-fs (loop4): Block reservation details [ 52.538282][ T4825] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 52.539205][ T4827] EXT4-fs (loop2): 1 truncate cleaned up [ 52.564479][ T4827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.578476][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.598614][ T4839] loop1: detected capacity change from 0 to 2048 [ 52.609745][ T4827] Driver unsupported XDP return value 0 on prog (id 284) dev N/A, expect packet loss! [ 52.621899][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 52.621912][ T29] audit: type=1400 audit(1733660151.075:1569): avc: denied { create } for pid=4824 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.637285][ T4839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.660448][ T29] audit: type=1400 audit(1733660151.115:1570): avc: denied { shutdown } for pid=4824 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.685709][ T29] audit: type=1400 audit(1733660151.135:1571): avc: denied { setopt } for pid=4824 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.692477][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.705132][ T29] audit: type=1400 audit(1733660151.135:1572): avc: denied { getopt } for pid=4824 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.727280][ T4852] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 52.733576][ T29] audit: type=1400 audit(1733660151.135:1573): avc: denied { connect } for pid=4824 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.761478][ T29] audit: type=1400 audit(1733660151.135:1574): avc: denied { name_connect } for pid=4824 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 52.761540][ T4827] EXT4-fs warning (device loop2): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 52.791950][ T29] audit: type=1400 audit(1733660151.175:1575): avc: denied { setopt } for pid=4851 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 52.811766][ T29] audit: type=1400 audit(1733660151.195:1576): avc: denied { mount } for pid=4849 comm="syz.3.319" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.829623][ T4827] ebtables: ebtables: counters copy to user failed while replacing table [ 52.844230][ T4852] netlink: 324 bytes leftover after parsing attributes in process `syz.4.314'. [ 52.844705][ T29] audit: type=1400 audit(1733660151.245:1577): avc: denied { create } for pid=4849 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.867365][ T4857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'. [ 52.873336][ T29] audit: type=1400 audit(1733660151.245:1578): avc: denied { write } for pid=4849 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.929272][ T4860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.939140][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.950500][ T4860] loop1: detected capacity change from 0 to 1024 [ 52.955220][ T4864] loop6: detected capacity change from 0 to 512 [ 52.989777][ T4860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.994331][ T4867] ip6gre2: entered allmulticast mode [ 53.004253][ T4864] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.321: Failed to acquire dquot type 1 [ 53.019296][ T4871] FAULT_INJECTION: forcing a failure. [ 53.019296][ T4871] name failslab, interval 1, probability 0, space 0, times 0 [ 53.032105][ T4871] CPU: 1 UID: 0 PID: 4871 Comm: syz.3.324 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 53.042753][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.052812][ T4871] Call Trace: [ 53.056146][ T4871] [ 53.059108][ T4871] dump_stack_lvl+0xf2/0x150 [ 53.063721][ T4871] dump_stack+0x15/0x1a [ 53.067944][ T4871] should_fail_ex+0x223/0x230 [ 53.072619][ T4871] should_failslab+0x8f/0xb0 [ 53.077210][ T4871] kmem_cache_alloc_noprof+0x52/0x320 [ 53.082768][ T4871] ? audit_log_start+0x34c/0x6b0 [ 53.087704][ T4871] audit_log_start+0x34c/0x6b0 [ 53.092538][ T4871] audit_seccomp+0x4b/0x130 [ 53.097060][ T4871] __seccomp_filter+0x6fa/0x1180 [ 53.102055][ T4871] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.107691][ T4871] ? vfs_write+0x596/0x920 [ 53.112140][ T4871] ? putname+0xcf/0xf0 [ 53.116257][ T4871] __secure_computing+0x9f/0x1c0 [ 53.121220][ T4871] syscall_trace_enter+0xd1/0x1f0 [ 53.126336][ T4871] ? fpregs_assert_state_consistent+0x83/0xa0 [ 53.132409][ T4871] do_syscall_64+0xaa/0x1c0 [ 53.136936][ T4871] ? clear_bhb_loop+0x55/0xb0 [ 53.141619][ T4871] ? clear_bhb_loop+0x55/0xb0 [ 53.146291][ T4871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.152278][ T4871] RIP: 0033:0x7fdb874afed9 [ 53.156684][ T4871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.176284][ T4871] RSP: 002b:00007fdb85b27058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 53.184716][ T4871] RAX: ffffffffffffffda RBX: 00007fdb87675fa0 RCX: 00007fdb874afed9 [ 53.192696][ T4871] RDX: 0000000000000000 RSI: 0000000020001d40 RDI: 0000000000000000 [ 53.200656][ T4871] RBP: 00007fdb85b270a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.208615][ T4871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.216603][ T4871] R13: 0000000000000000 R14: 00007fdb87675fa0 R15: 00007ffe7974b8c8 [ 53.224570][ T4871] [ 53.233396][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.237629][ T4864] EXT4-fs (loop6): 1 truncate cleaned up [ 53.248530][ T4864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.261217][ T4864] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.294537][ T3690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.324639][ T4881] loop2: detected capacity change from 0 to 512 [ 53.353616][ T4889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.331'. [ 53.367866][ T4881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.371663][ T4883] bond1: entered promiscuous mode [ 53.385473][ T4883] bond1: entered allmulticast mode [ 53.395513][ T4883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.400170][ T4881] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.418034][ T4883] bond1 (unregistering): Released all slaves [ 53.463849][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.464047][ T4903] FAULT_INJECTION: forcing a failure. [ 53.464047][ T4903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.485929][ T4903] CPU: 1 UID: 0 PID: 4903 Comm: syz.1.335 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 53.496537][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.506595][ T4903] Call Trace: [ 53.509913][ T4903] [ 53.512886][ T4903] dump_stack_lvl+0xf2/0x150 [ 53.517539][ T4903] dump_stack+0x15/0x1a [ 53.521776][ T4903] should_fail_ex+0x223/0x230 [ 53.526461][ T4903] should_fail+0xb/0x10 [ 53.530610][ T4903] should_fail_usercopy+0x1a/0x20 [ 53.535634][ T4903] _copy_from_user+0x1e/0xb0 [ 53.540225][ T4903] copy_msghdr_from_user+0x54/0x2a0 [ 53.545429][ T4903] __sys_sendmmsg+0x1e8/0x4b0 [ 53.550166][ T4903] __x64_sys_sendmmsg+0x57/0x70 [ 53.555089][ T4903] x64_sys_call+0x29aa/0x2dc0 [ 53.559758][ T4903] do_syscall_64+0xc9/0x1c0 [ 53.564358][ T4903] ? clear_bhb_loop+0x55/0xb0 [ 53.569026][ T4903] ? clear_bhb_loop+0x55/0xb0 [ 53.573730][ T4903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.579640][ T4903] RIP: 0033:0x7f250539fed9 [ 53.584057][ T4903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.603659][ T4903] RSP: 002b:00007f2503a17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.612182][ T4903] RAX: ffffffffffffffda RBX: 00007f2505565fa0 RCX: 00007f250539fed9 [ 53.620223][ T4903] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 53.628187][ T4903] RBP: 00007f2503a170a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.636265][ T4903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.644252][ T4903] R13: 0000000000000000 R14: 00007f2505565fa0 R15: 00007ffe3608c7c8 [ 53.652257][ T4903] [ 53.711316][ T4911] ip6gre2: entered allmulticast mode [ 53.756015][ T4919] netlink: 108 bytes leftover after parsing attributes in process `syz.4.342'. [ 53.781289][ T4915] loop3: detected capacity change from 0 to 512 [ 53.833445][ T4925] loop6: detected capacity change from 0 to 4096 [ 53.860464][ T4915] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.340: Failed to acquire dquot type 1 [ 53.912768][ T4915] EXT4-fs (loop3): 1 truncate cleaned up [ 53.920945][ T4915] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.948593][ T4943] syz.1.347[4943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.948711][ T4943] syz.1.347[4943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.965532][ T4943] syz.1.347[4943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.076507][ T4968] loop2: detected capacity change from 0 to 512 [ 54.117363][ T4968] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.163843][ T4968] FAULT_INJECTION: forcing a failure. [ 54.163843][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 54.165790][ T4981] ip6gre3: entered allmulticast mode [ 54.176566][ T4968] CPU: 0 UID: 0 PID: 4968 Comm: syz.2.352 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 54.192354][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.202416][ T4968] Call Trace: [ 54.205695][ T4968] [ 54.208676][ T4968] dump_stack_lvl+0xf2/0x150 [ 54.213357][ T4968] dump_stack+0x15/0x1a [ 54.217603][ T4968] should_fail_ex+0x223/0x230 [ 54.222300][ T4968] should_failslab+0x8f/0xb0 [ 54.226992][ T4968] kmem_cache_alloc_noprof+0x52/0x320 [ 54.232394][ T4968] ? ext4_mb_new_blocks+0x7ad/0x2020 [ 54.237694][ T4968] ext4_mb_new_blocks+0x7ad/0x2020 [ 54.242817][ T4968] ? ext4_inode_to_goal_block+0x1cb/0x1f0 [ 54.248544][ T4968] ext4_ext_map_blocks+0x1008/0x35c0 [ 54.253851][ T4968] ? invalidate_inode_pages2_range+0x71f/0x770 [ 54.259999][ T4968] ? cgroup_rstat_updated+0x9f/0x570 [ 54.265281][ T4968] ? __rcu_read_lock+0x36/0x50 [ 54.270068][ T4968] ? ext4_map_query_blocks+0x10e/0x180 [ 54.275525][ T4968] ext4_map_blocks+0x5aa/0xd20 [ 54.280360][ T4968] ext4_iomap_begin+0x4a9/0x5d0 [ 54.285209][ T4968] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 54.290612][ T4968] iomap_iter+0x3f1/0x830 [ 54.294933][ T4968] __iomap_dio_rw+0x6e9/0x1110 [ 54.299720][ T4968] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 54.305839][ T4968] iomap_dio_rw+0x40/0x90 [ 54.310244][ T4968] ext4_file_write_iter+0xb71/0xf20 [ 54.315558][ T4968] do_iter_readv_writev+0x394/0x450 [ 54.320755][ T4968] vfs_writev+0x2d4/0x880 [ 54.325108][ T4968] ? proc_fail_nth_write+0x12a/0x150 [ 54.330398][ T4968] __se_sys_pwritev2+0x100/0x1c0 [ 54.335344][ T4968] __x64_sys_pwritev2+0x78/0x90 [ 54.340227][ T4968] x64_sys_call+0x2afe/0x2dc0 [ 54.344974][ T4968] do_syscall_64+0xc9/0x1c0 [ 54.349508][ T4968] ? clear_bhb_loop+0x55/0xb0 [ 54.354193][ T4968] ? clear_bhb_loop+0x55/0xb0 [ 54.358866][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.364885][ T4968] RIP: 0033:0x7fd0b722fed9 [ 54.369293][ T4968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.388972][ T4968] RSP: 002b:00007fd0b58a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 54.397451][ T4968] RAX: ffffffffffffffda RBX: 00007fd0b73f5fa0 RCX: 00007fd0b722fed9 [ 54.405583][ T4968] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000008 [ 54.413611][ T4968] RBP: 00007fd0b58a70a0 R08: 0000000000041001 R09: 0000000000000003 [ 54.421572][ T4968] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 54.429532][ T4968] R13: 0000000000000000 R14: 00007fd0b73f5fa0 R15: 00007ffdc53d0038 [ 54.437572][ T4968] [ 54.508677][ T4995] loop6: detected capacity change from 0 to 512 [ 54.530452][ T4995] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.551883][ T4997] loop1: detected capacity change from 0 to 512 [ 54.571839][ T3593] ================================================================== [ 54.579925][ T3593] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 54.588247][ T3593] [ 54.590553][ T3593] write to 0xffffea0004b669d8 of 8 bytes by task 4997 on cpu 0: [ 54.598174][ T3593] delete_from_page_cache_batch+0x308/0x700 [ 54.604054][ T3593] truncate_inode_pages_range+0x1c5/0x6b0 [ 54.609757][ T3593] truncate_inode_pages+0x24/0x30 [ 54.614763][ T3593] set_blocksize+0x258/0x270 [ 54.619328][ T3593] sb_set_blocksize+0x2c/0xb0 [ 54.623982][ T3593] ext4_fill_super+0xdca/0x3a10 [ 54.628815][ T3593] get_tree_bdev_flags+0x29f/0x310 [ 54.633905][ T3593] get_tree_bdev+0x1f/0x30 [ 54.638298][ T3593] ext4_get_tree+0x1c/0x30 [ 54.642694][ T3593] vfs_get_tree+0x56/0x1e0 [ 54.647099][ T3593] do_new_mount+0x227/0x690 [ 54.651593][ T3593] path_mount+0x49b/0xb30 [ 54.655938][ T3593] __se_sys_mount+0x27c/0x2d0 [ 54.660610][ T3593] __x64_sys_mount+0x67/0x80 [ 54.665193][ T3593] x64_sys_call+0x2c84/0x2dc0 [ 54.669848][ T3593] do_syscall_64+0xc9/0x1c0 [ 54.674338][ T3593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.680222][ T3593] [ 54.682527][ T3593] read to 0xffffea0004b669d8 of 8 bytes by task 3593 on cpu 1: [ 54.690058][ T3593] folio_mapping+0xa0/0x120 [ 54.694571][ T3593] lru_add+0x89/0x440 [ 54.698530][ T3593] folio_batch_move_lru+0x15f/0x230 [ 54.703719][ T3593] lru_add_drain_cpu+0x7c/0x260 [ 54.708554][ T3593] __folio_batch_release+0x51/0xc0 [ 54.713656][ T3593] shmem_undo_range+0x35b/0xa70 [ 54.718488][ T3593] shmem_evict_inode+0x14d/0x530 [ 54.723410][ T3593] evict+0x2f0/0x570 [ 54.727319][ T3593] iput+0x42a/0x5b0 [ 54.731147][ T3593] dentry_unlink_inode+0x24f/0x260 [ 54.736255][ T3593] __dentry_kill+0x18b/0x4c0 [ 54.740832][ T3593] dput+0x5c/0xd0 [ 54.744464][ T3593] do_renameat2+0x748/0xa70 [ 54.748970][ T3593] __x64_sys_rename+0x58/0x70 [ 54.753648][ T3593] x64_sys_call+0x2b1c/0x2dc0 [ 54.758308][ T3593] do_syscall_64+0xc9/0x1c0 [ 54.762808][ T3593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.768687][ T3593] [ 54.770990][ T3593] value changed: 0xffff8881004c1198 -> 0x0000000000000000 [ 54.778072][ T3593] [ 54.780372][ T3593] Reported by Kernel Concurrency Sanitizer on: [ 54.786515][ T3593] CPU: 1 UID: 0 PID: 3593 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 54.796738][ T3593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.806800][ T3593] ================================================================== [ 54.861823][ T4997] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)