last executing test programs: 4.564677795s ago: executing program 1 (id=968): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000200)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xa000000a}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) finit_module(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) tkill(0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) write$selinux_validatetrans(r8, 0x0, 0x62) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) socketpair(0x26, 0xa, 0x1, &(0x7f0000000380)) 4.170615349s ago: executing program 1 (id=971): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="005b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 3.975692915s ago: executing program 1 (id=974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 1) 3.67681256s ago: executing program 1 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000900)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.231049568s ago: executing program 1 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 2.414389527s ago: executing program 4 (id=1003): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 2.37302304s ago: executing program 4 (id=1006): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="fd", 0x1}], 0x1, &(0x7f0000000d00)=ANY=[], 0x218}, 0x0) close(r0) 2.348364512s ago: executing program 4 (id=1007): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80040) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x4, 0x27}, {0x3, 0x3}, 0x8, 0x2, 0x4}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, 0x0, 0x24040044) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) readlink(&(0x7f0000003000)='./file0/../file0\x00', &(0x7f0000003040)=""/95, 0x5f) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.281216118s ago: executing program 0 (id=1009): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x30, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r5, 0x101}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1820000000000000000000000200000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000001010101000000000000000002000000140019"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$kcm(0x29, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r10}) sendmmsg$inet(r11, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000021c0)='H', 0x1}], 0x1}}], 0x2, 0x0) 2.226429343s ago: executing program 0 (id=1011): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1ff, 0x4, 0x402}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8993, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=0x10, 0x0) r3 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0xffff, 0xfff1}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x84) 1.940975027s ago: executing program 0 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000200130000000100feffffff00040000", @ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000003000000050000000800"/28], 0x50) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) unshare(0x42000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x1}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 1.836352796s ago: executing program 3 (id=1015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYBLOB="0300000000000000240012800c0001"], 0x54}}, 0x0) 1.738514034s ago: executing program 3 (id=1017): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 1.42777515s ago: executing program 3 (id=1018): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000278acb7534ac4431800a58e99b550aa6eae931a2f5d88065f7cbf832e692206b4b61916804", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xc, 0x5, 0x10000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xffff64ca, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120379000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='f2fs_lookup_extent_tree_start\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40004, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) pipe2$9p(0x0, 0x84080) 1.30946773s ago: executing program 2 (id=1019): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) 1.282990372s ago: executing program 4 (id=1020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000000) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") setxattr$system_posix_acl(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r7, r7, 0x0, 0x80000000) getsockopt$inet_int(r3, 0x0, 0x18, 0x0, &(0x7f00000001c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 1.141235454s ago: executing program 2 (id=1021): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x30, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r5, 0x101}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1820000000000000000000000200000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000001010101000000000000000002000000140019"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$kcm(0x29, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r10}) sendmmsg$inet(r11, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000021c0)='H', 0x1}], 0x1}}], 0x2, 0x0) 745.421758ms ago: executing program 2 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x5a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 708.091921ms ago: executing program 0 (id=1023): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae9a69d8fb355ab1811c70660400000405000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) read$ptp(r0, &(0x7f0000000240)=""/10, 0xa) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000400200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, r6, 0x4, 0x4, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) close_range(r3, 0xffffffffffffffff, 0x0) 693.169402ms ago: executing program 2 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x13, 0x4}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$ipvs(0xffffffffffffffff, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r12}, 0x10) getuid() 626.439108ms ago: executing program 4 (id=1025): r0 = socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) (async) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) (async) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) (async) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) 482.576ms ago: executing program 2 (id=1026): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xefffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 481.08612ms ago: executing program 0 (id=1027): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (fail_nth: 1) 479.12111ms ago: executing program 3 (id=1028): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 478.31368ms ago: executing program 2 (id=1029): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) 448.814133ms ago: executing program 3 (id=1030): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) (fail_nth: 3) 324.702993ms ago: executing program 4 (id=1031): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) 29.007238ms ago: executing program 3 (id=1032): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x18, &(0x7f00000002c0), 0x1, 0x4be, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffa, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r5, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 593.62µs ago: executing program 1 (id=1033): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x30, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r5, 0x101}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1820000000000000000000000200000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000001010101000000000000000002000000140019"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$kcm(0x29, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r10}) sendmmsg$inet(r11, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000021c0)='H', 0x1}], 0x1}}], 0x2, 0x0) 0s ago: executing program 0 (id=1034): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x1, 0x274, &(0x7f0000000500)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) fallocate(r0, 0x0, 0x0, 0x2c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e800c00028005000100000000001400018008000100ac1414aa080002"], 0x90}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00d730e44a0001dbdf25810000000d009900ff7f00002d0000000001000014003300f400ff08021100000014003300a4000100c38b37a4a072ffffffffffff06006600080800000400670000000000000000618672ecb41914bf9be5174e9970d50cd3a961ebddc80df0d012880a652b925346901db122e6e305b9d8f385cd4c6f97e34974c062eb147446f9c3f505c482c74e310c061e9253301c2311ffe43dbb4cd654c849d9a0cbc8cc4143acfc5aa2aef49d280266c332600a17de0891c0b76a04cf8911538a372709ac4a2e301f61a27236a3a3743070b888e3f1ece0744954"], 0x60}, 0x1, 0x0, 0x0, 0x8002}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='xen_cpu_write_ldt_entry\x00', r3, 0x0, 0x57da}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x15, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000300)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x80047213, 0x0) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.1.331'. [ 61.756425][ T5243] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 61.796419][ T5252] FAULT_INJECTION: forcing a failure. [ 61.796419][ T5252] name failslab, interval 1, probability 0, space 0, times 0 [ 61.803019][ T5250] loop3: detected capacity change from 0 to 512 [ 61.809082][ T5252] CPU: 1 UID: 0 PID: 5252 Comm: syz.2.337 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 61.809115][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.836074][ T5252] Call Trace: [ 61.839379][ T5252] [ 61.842319][ T5252] dump_stack_lvl+0xf2/0x150 [ 61.846923][ T5252] dump_stack+0x15/0x20 [ 61.851085][ T5252] should_fail_ex+0x223/0x230 [ 61.855782][ T5252] ? alloc_mnt_ns+0x71/0x240 [ 61.860393][ T5252] should_failslab+0x8f/0xb0 [ 61.865007][ T5252] __kmalloc_cache_noprof+0x4b/0x2a0 [ 61.870328][ T5252] alloc_mnt_ns+0x71/0x240 [ 61.874782][ T5252] copy_mnt_ns+0xa5/0x5c0 [ 61.879134][ T5252] ? create_new_namespaces+0x3c/0x430 [ 61.884528][ T5252] ? kmem_cache_alloc_noprof+0x1a6/0x290 [ 61.890210][ T5252] create_new_namespaces+0x89/0x430 [ 61.895489][ T5252] ? security_capable+0x81/0x90 [ 61.900410][ T5252] unshare_nsproxy_namespaces+0xe6/0x120 [ 61.906072][ T5252] ksys_unshare+0x3c9/0x6e0 [ 61.910713][ T5252] __x64_sys_unshare+0x1f/0x30 [ 61.915495][ T5252] x64_sys_call+0x2c8d/0x2d60 [ 61.920186][ T5252] do_syscall_64+0xc9/0x1c0 [ 61.924878][ T5252] ? clear_bhb_loop+0x55/0xb0 [ 61.929598][ T5252] ? clear_bhb_loop+0x55/0xb0 [ 61.934295][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.940262][ T5252] RIP: 0033:0x7fc2fa28dff9 [ 61.944725][ T5252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.964398][ T5252] RSP: 002b:00007fc2f8f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 61.972936][ T5252] RAX: ffffffffffffffda RBX: 00007fc2fa445f80 RCX: 00007fc2fa28dff9 [ 61.980927][ T5252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000e020280 [ 61.988903][ T5252] RBP: 00007fc2f8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 61.996917][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.004890][ T5252] R13: 0000000000000000 R14: 00007fc2fa445f80 R15: 00007fffbcae9b08 [ 62.012949][ T5252] [ 62.033754][ T5250] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.051442][ T5261] loop2: detected capacity change from 0 to 512 [ 62.078274][ T5261] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.157697][ T5275] xt_CT: No such helper "pptp" [ 62.242866][ T5288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 62.331940][ T5300] process 'syz.2.346' launched './file0' with NULL argv: empty string added [ 62.347132][ T5300] sctp: [Deprecated]: syz.2.346 (pid 5300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.347132][ T5300] Use struct sctp_sack_info instead [ 62.389525][ T5304] ip6_vti0 speed is unknown, defaulting to 1000 [ 62.401221][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 62.444895][ T5308] loop2: detected capacity change from 0 to 512 [ 62.462848][ T5308] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.613553][ T5343] loop2: detected capacity change from 0 to 512 [ 62.654905][ T5348] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 62.655261][ T5345] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 62.669201][ T5345] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.676941][ T5345] vhci_hcd vhci_hcd.0: Device attached [ 62.684564][ T5343] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.730625][ T5345] loop1: detected capacity change from 0 to 2048 [ 62.768263][ T5347] vhci_hcd: connection closed [ 62.768486][ T4184] vhci_hcd: stop threads [ 62.777519][ T4184] vhci_hcd: release socket [ 62.781950][ T4184] vhci_hcd: disconnect device [ 62.941250][ T5363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 63.039508][ T5370] loop0: detected capacity change from 0 to 2048 [ 63.055209][ T5370] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.075427][ T5372] loop4: detected capacity change from 0 to 2048 [ 63.094897][ T5370] loop0: detected capacity change from 0 to 512 [ 63.107957][ T5372] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.133020][ T5370] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.218454][ T5370] syz.0.364 uses obsolete (PF_INET,SOCK_PACKET) [ 63.220240][ T5383] loop2: detected capacity change from 0 to 512 [ 63.237910][ T5384] xt_CT: No such helper "pptp" [ 63.265014][ T5383] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.302080][ T5391] FAULT_INJECTION: forcing a failure. [ 63.302080][ T5391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.315257][ T5391] CPU: 1 UID: 0 PID: 5391 Comm: syz.4.369 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 63.325894][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.336115][ T5391] Call Trace: [ 63.339409][ T5391] [ 63.342349][ T5391] dump_stack_lvl+0xf2/0x150 [ 63.347025][ T5391] dump_stack+0x15/0x20 [ 63.351194][ T5391] should_fail_ex+0x223/0x230 [ 63.355992][ T5391] should_fail+0xb/0x10 [ 63.360202][ T5391] should_fail_usercopy+0x1a/0x20 [ 63.365305][ T5391] _copy_from_iter+0xd3/0xd20 [ 63.370017][ T5391] ? kmalloc_reserve+0x16e/0x190 [ 63.375002][ T5391] ? __build_skb_around+0x196/0x1f0 [ 63.380265][ T5391] ? __alloc_skb+0x21f/0x310 [ 63.384870][ T5391] ? __virt_addr_valid+0x1ed/0x250 [ 63.390066][ T5391] ? __check_object_size+0x364/0x520 [ 63.395443][ T5391] netlink_sendmsg+0x460/0x6e0 [ 63.400244][ T5391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.405554][ T5391] __sock_sendmsg+0x140/0x180 [ 63.410258][ T5391] ____sys_sendmsg+0x312/0x410 [ 63.415078][ T5391] __sys_sendmsg+0x1d9/0x270 [ 63.419737][ T5391] __x64_sys_sendmsg+0x46/0x50 [ 63.424518][ T5391] x64_sys_call+0x2689/0x2d60 [ 63.429240][ T5391] do_syscall_64+0xc9/0x1c0 [ 63.433822][ T5391] ? clear_bhb_loop+0x55/0xb0 [ 63.438517][ T5391] ? clear_bhb_loop+0x55/0xb0 [ 63.443242][ T5391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.449190][ T5391] RIP: 0033:0x7f57ab51dff9 [ 63.453688][ T5391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.473319][ T5391] RSP: 002b:00007f57aa197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.481741][ T5391] RAX: ffffffffffffffda RBX: 00007f57ab6d5f80 RCX: 00007f57ab51dff9 [ 63.489716][ T5391] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 63.497811][ T5391] RBP: 00007f57aa197090 R08: 0000000000000000 R09: 0000000000000000 [ 63.505787][ T5391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.513858][ T5391] R13: 0000000000000000 R14: 00007f57ab6d5f80 R15: 00007fff128e53e8 [ 63.521848][ T5391] [ 63.734579][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 63.760071][ T5408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 63.813329][ T5397] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.131749][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 64.212709][ T5435] loop3: detected capacity change from 0 to 256 [ 64.237574][ T5438] macvlan2: entered promiscuous mode [ 64.243453][ T5438] macvlan2: entered allmulticast mode [ 64.424302][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.431499][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.438922][ T5452] bridge0: entered allmulticast mode [ 64.466893][ T5452] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.662843][ T5463] program syz.4.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.672771][ T5463] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 64.754510][ T5467] loop4: detected capacity change from 0 to 1024 [ 64.761330][ T5467] EXT4-fs: dax option not supported [ 64.932296][ T5474] loop4: detected capacity change from 0 to 512 [ 64.950477][ T5474] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.033322][ T5482] __nla_validate_parse: 2 callbacks suppressed [ 65.033335][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 65.081445][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 65.081462][ T29] audit: type=1326 audit(1729236220.417:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.111212][ T29] audit: type=1326 audit(1729236220.417:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.134641][ T29] audit: type=1326 audit(1729236220.417:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.158319][ T29] audit: type=1326 audit(1729236220.417:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.181519][ T29] audit: type=1326 audit(1729236220.417:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.188437][ T5491] ip6_vti0 speed is unknown, defaulting to 1000 [ 65.205102][ T29] audit: type=1326 audit(1729236220.417:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.227206][ T5492] loop1: detected capacity change from 0 to 512 [ 65.234507][ T29] audit: type=1326 audit(1729236220.417:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5483 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2fa28dff9 code=0x7ffc0000 [ 65.286371][ T5486] loop6: detected capacity change from 0 to 7 [ 65.292765][ T5486] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.303923][ T5486] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.311820][ T5486] loop6: unable to read partition table [ 65.321653][ T5492] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.332168][ T5486] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 65.332168][ T5486] ) failed (rc=-5) [ 65.473332][ T5507] ip6_vti0 speed is unknown, defaulting to 1000 [ 65.522619][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 65.532994][ T5514] loop0: detected capacity change from 0 to 512 [ 65.601843][ T5514] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.633445][ T5523] netlink: 'syz.2.413': attribute type 4 has an invalid length. [ 65.700576][ T29] audit: type=1326 audit(1729236221.064:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2fa28dff9 code=0x0 [ 65.788367][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'. [ 65.967521][ T5540] loop0: detected capacity change from 0 to 512 [ 65.987172][ T5541] loop1: detected capacity change from 0 to 512 [ 66.002801][ T5540] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.042572][ T5541] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.254620][ T29] audit: type=1400 audit(1729236221.639:1645): avc: denied { read } for pid=5550 comm="syz.3.421" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.289687][ T5553] loop0: detected capacity change from 0 to 512 [ 66.318126][ T5553] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.342259][ T5551] batadv0: entered promiscuous mode [ 66.386031][ T5559] loop1: detected capacity change from 0 to 764 [ 66.449912][ T5561] loop3: detected capacity change from 0 to 2048 [ 66.466973][ T5561] EXT4-fs: Ignoring removed orlov option [ 66.510503][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(237717327205529) <= P.seqno(237717327205528) <= S.SWH(237717327205603)) and (P.ackno exists or LAWL(102799261542787) <= P.ackno(102799261542787) <= S.AWH(102799261542787), sending SYNC... [ 66.538394][ T5561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.556208][ T5561] EXT4-fs (loop3): Remounting filesystem read-only [ 66.576403][ T5561] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 66.585234][ T5561] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 66.594220][ T29] audit: type=1400 audit(1729236221.988:1646): avc: denied { rename } for pid=5560 comm="syz.3.423" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.649642][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 66.689018][ T5561] syzkaller1: entered promiscuous mode [ 66.694600][ T5561] syzkaller1: entered allmulticast mode [ 66.769856][ T5574] loop2: detected capacity change from 0 to 512 [ 66.790372][ T5561] syz.3.423 (5561) used greatest stack depth: 10488 bytes left [ 66.806286][ T5579] loop4: detected capacity change from 0 to 512 [ 66.821156][ T5574] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 66.834872][ T5581] loop0: detected capacity change from 0 to 512 [ 66.899808][ T5579] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.927165][ T5581] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.053205][ T5594] 9pnet_fd: Insufficient options for proto=fd [ 67.059848][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.427'. [ 67.069615][ T5594] 9pnet_fd: Insufficient options for proto=fd [ 67.088627][ T5590] xt_CT: No such helper "pptp" [ 67.184537][ T5599] dccp_close: ABORT with 5028 bytes unread [ 67.263273][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 67.381196][ T5618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.405879][ T5618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.424166][ T5618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.445128][ T5618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.463235][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.476167][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.706877][ T5626] macvlan2: entered promiscuous mode [ 67.712327][ T5626] macvlan2: entered allmulticast mode [ 68.040114][ T5644] loop0: detected capacity change from 0 to 512 [ 68.055513][ T5647] loop1: detected capacity change from 0 to 512 [ 68.072963][ T5644] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 68.099744][ T5647] EXT4-fs mount: 37 callbacks suppressed [ 68.099762][ T5647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.118737][ T5647] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.214369][ T5662] ip6_vti0 speed is unknown, defaulting to 1000 [ 68.267566][ T5665] loop2: detected capacity change from 0 to 512 [ 68.271247][ T5655] xt_CT: No such helper "pptp" [ 68.294054][ T5665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.330243][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.334536][ T5665] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.366924][ T5666] loop0: detected capacity change from 0 to 128 [ 68.432057][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.458'. [ 68.432114][ T5679] netlink: 256 bytes leftover after parsing attributes in process `syz.3.461'. [ 68.496686][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.539709][ T5685] loop2: detected capacity change from 0 to 1024 [ 68.546461][ T5685] EXT4-fs: test_dummy_encryption option not supported [ 68.592656][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 69.064016][ T5692] loop0: detected capacity change from 0 to 1024 [ 69.202998][ T5702] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 69.229937][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 69.240187][ T5706] 0ªX¹¦À: renamed from caif0 [ 69.247744][ T5706] 0ªX¹¦À: entered allmulticast mode [ 69.253212][ T5706] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 69.259128][ T5708] loop0: detected capacity change from 0 to 512 [ 69.295398][ T5708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.310069][ T5708] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.372274][ T5716] netlink: 'syz.3.473': attribute type 4 has an invalid length. [ 69.414175][ T5720] loop3: detected capacity change from 0 to 512 [ 69.423250][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.460344][ T5720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.488645][ T5728] macvlan2: entered promiscuous mode [ 69.494151][ T5728] macvlan2: entered allmulticast mode [ 69.501674][ T5720] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.521038][ T5730] loop2: detected capacity change from 0 to 256 [ 69.529433][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.614589][ T5738] loop3: detected capacity change from 0 to 764 [ 69.677138][ T5742] loop2: detected capacity change from 0 to 2048 [ 69.683592][ T5744] loop3: detected capacity change from 0 to 512 [ 69.693215][ T5744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.706006][ T5744] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.734917][ T5742] loop2: p3 < > p4 < > [ 69.739155][ T5742] loop2: partition table partially beyond EOD, truncated [ 69.746392][ T5742] loop2: p3 start 4284289 is beyond EOD, truncated [ 69.783445][ T5752] loop1: detected capacity change from 0 to 512 [ 69.818251][ T5752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.830992][ T5752] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.832425][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.940327][ T5762] FAULT_INJECTION: forcing a failure. [ 69.940327][ T5762] name failslab, interval 1, probability 0, space 0, times 0 [ 69.953083][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.3.488 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 69.963807][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.973880][ T5762] Call Trace: [ 69.977157][ T5762] [ 69.980211][ T5762] dump_stack_lvl+0xf2/0x150 [ 69.984835][ T5762] dump_stack+0x15/0x20 [ 69.989086][ T5762] should_fail_ex+0x223/0x230 [ 69.993881][ T5762] ? security_inode_alloc+0x37/0x100 [ 69.999297][ T5762] should_failslab+0x8f/0xb0 [ 70.003958][ T5762] kmem_cache_alloc_noprof+0x4c/0x290 [ 70.009466][ T5762] security_inode_alloc+0x37/0x100 [ 70.014621][ T5762] inode_init_always_gfp+0x444/0x490 [ 70.020161][ T5762] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 70.025672][ T5762] alloc_inode+0x82/0x160 [ 70.030030][ T5762] new_inode+0x1e/0x100 [ 70.034232][ T5762] shmem_get_inode+0x24e/0x710 [ 70.039073][ T5762] __shmem_file_setup+0x127/0x1f0 [ 70.044178][ T5762] shmem_file_setup+0x3b/0x50 [ 70.048888][ T5762] __se_sys_memfd_create+0x31d/0x5c0 [ 70.054267][ T5762] __x64_sys_memfd_create+0x31/0x40 [ 70.059575][ T5762] x64_sys_call+0x2891/0x2d60 [ 70.064294][ T5762] do_syscall_64+0xc9/0x1c0 [ 70.068846][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 70.073578][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 70.078332][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.084349][ T5762] RIP: 0033:0x7f9721d3dff9 [ 70.088767][ T5762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.108420][ T5762] RSP: 002b:00007f97209b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 70.116843][ T5762] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007f9721d3dff9 [ 70.124825][ T5762] RDX: 00007f97209b6ef0 RSI: 0000000000000000 RDI: 00007f9721db0b02 [ 70.132809][ T5762] RBP: 0000000020000200 R08: 00007f97209b6bb7 R09: 00007f97209b6e40 [ 70.140904][ T5762] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 70.148882][ T5762] R13: 00007f97209b6ef0 R14: 00007f97209b6eb0 R15: 0000000020000080 [ 70.156870][ T5762] [ 70.167274][ T5762] infiniband syz0: set active [ 70.203093][ T5762] loop3: detected capacity change from 0 to 512 [ 70.209978][ T3325] ip6_vti0 speed is unknown, defaulting to 1000 [ 70.216786][ T5764] netlink: 'syz.4.489': attribute type 29 has an invalid length. [ 70.232279][ T5764] netlink: 'syz.4.489': attribute type 29 has an invalid length. [ 70.242824][ T5764] __nla_validate_parse: 4 callbacks suppressed [ 70.242905][ T5764] netlink: 500 bytes leftover after parsing attributes in process `syz.4.489'. [ 70.246118][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.249177][ T5764] unsupported nla_type 40 [ 70.273584][ T5762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.308215][ T5762] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.328754][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 70.328794][ T29] audit: type=1326 audit(1729236225.800:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.0.492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8c25dff9 code=0x0 [ 70.341436][ T5772] loop4: detected capacity change from 0 to 256 [ 70.389508][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.394119][ T29] audit: type=1400 audit(1729236225.871:1939): avc: denied { validate_trans } for pid=5778 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.453935][ T5780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 70.521945][ T29] audit: type=1400 audit(1729236225.994:1940): avc: denied { setopt } for pid=5793 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.541436][ T29] audit: type=1400 audit(1729236225.994:1941): avc: denied { bind } for pid=5793 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.721411][ T29] audit: type=1326 audit(1729236226.198:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.3.505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9721d3dff9 code=0x0 [ 70.756642][ T5813] batadv0: entered promiscuous mode [ 70.796259][ T5814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 70.840212][ T5818] loop4: detected capacity change from 0 to 256 [ 70.872778][ T5821] netlink: 256 bytes leftover after parsing attributes in process `syz.4.509'. [ 70.909029][ T29] audit: type=1326 audit(1729236226.391:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 70.932803][ T29] audit: type=1326 audit(1729236226.391:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 70.956180][ T29] audit: type=1326 audit(1729236226.391:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 70.979544][ T29] audit: type=1326 audit(1729236226.391:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 71.002919][ T29] audit: type=1326 audit(1729236226.391:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5820 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 71.058217][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.067557][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.495086][ T5856] loop2: detected capacity change from 0 to 512 [ 71.508465][ T5856] EXT4-fs (loop2): failed to initialize system zone (-117) [ 71.516154][ T5856] EXT4-fs (loop2): mount failed [ 71.591787][ T5852] ip6_vti0 speed is unknown, defaulting to 1000 [ 71.714438][ T5852] syz.1.519[5852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.714517][ T5852] syz.1.519[5852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.726018][ T5852] syz.1.519[5852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.746166][ T5881] loop2: detected capacity change from 0 to 128 [ 71.764197][ T5881] ext4: Unknown parameter 'euid' [ 71.835167][ T5881] loop2: detected capacity change from 0 to 512 [ 71.850896][ T5858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 71.866350][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.887858][ T5888] dummy0: entered promiscuous mode [ 71.917034][ T5881] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.108039][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.279366][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 72.518199][ T5922] netlink: 256 bytes leftover after parsing attributes in process `syz.4.539'. [ 72.550281][ T5927] netlink: 'syz.1.540': attribute type 4 has an invalid length. [ 72.693792][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.543'. [ 72.707724][ T5939] syz.0.545[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.707799][ T5939] syz.0.545[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.719251][ T5939] syz.0.545[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.003866][ T5985] macvlan2: entered promiscuous mode [ 73.020514][ T5985] macvlan2: entered allmulticast mode [ 73.039100][ T5989] netlink: 256 bytes leftover after parsing attributes in process `syz.2.552'. [ 73.086170][ T5999] loop0: detected capacity change from 0 to 512 [ 73.112586][ T5999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.139129][ T5999] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.295923][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.456576][ T6055] loop0: detected capacity change from 0 to 512 [ 73.486698][ T6061] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 73.486698][ T6055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.517065][ T6055] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.540051][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.619642][ T6074] sg_write: process 277 (syz.4.570) changed security contexts after opening file descriptor, this is not allowed. [ 73.762233][ T6090] loop0: detected capacity change from 0 to 512 [ 73.932231][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.948115][ T6106] 9pnet_fd: Insufficient options for proto=fd [ 73.956655][ T6090] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.081172][ T6122] syz.2.579[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.081316][ T6122] syz.2.579[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.092845][ T6122] syz.2.579[6122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.120176][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.190629][ T6133] loop0: detected capacity change from 0 to 512 [ 74.219492][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.254400][ T6145] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 74.256386][ T6133] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.290455][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.420776][ T6157] syzkaller0: entered promiscuous mode [ 74.426714][ T6157] syzkaller0: entered allmulticast mode [ 74.567855][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.586'. [ 74.681721][ T6202] FAULT_INJECTION: forcing a failure. [ 74.681721][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 74.694485][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.3.595 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 74.705091][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.715177][ T6202] Call Trace: [ 74.718490][ T6202] [ 74.721436][ T6202] dump_stack_lvl+0xf2/0x150 [ 74.726082][ T6202] dump_stack+0x15/0x20 [ 74.730265][ T6202] should_fail_ex+0x223/0x230 [ 74.734994][ T6202] ? sidtab_sid2str_get+0xb8/0x140 [ 74.740151][ T6202] should_failslab+0x8f/0xb0 [ 74.744777][ T6202] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 74.751153][ T6202] ? vsnprintf+0xdd8/0xe30 [ 74.755608][ T6202] kmemdup_noprof+0x2a/0x60 [ 74.760163][ T6202] sidtab_sid2str_get+0xb8/0x140 [ 74.765158][ T6202] security_sid_to_context_core+0x1eb/0x2f0 [ 74.771217][ T6202] security_sid_to_context+0x27/0x30 [ 74.776582][ T6202] selinux_secid_to_secctx+0x22/0x30 [ 74.781976][ T6202] security_secid_to_secctx+0x48/0x90 [ 74.787399][ T6202] audit_log_task_context+0x8c/0x1b0 [ 74.792723][ T6202] audit_log_task+0xfb/0x180 [ 74.797380][ T6202] audit_seccomp+0x68/0x130 [ 74.801918][ T6202] __seccomp_filter+0x6fa/0x1180 [ 74.806961][ T6202] ? proc_fail_nth_write+0x12a/0x150 [ 74.812286][ T6202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.817926][ T6202] ? vfs_write+0x580/0x910 [ 74.822554][ T6202] ? __fget_files+0x1d4/0x210 [ 74.827323][ T6202] __secure_computing+0x9f/0x1c0 [ 74.832341][ T6202] syscall_trace_enter+0xd1/0x1f0 [ 74.837466][ T6202] ? fpregs_assert_state_consistent+0x83/0xa0 [ 74.843655][ T6202] do_syscall_64+0xaa/0x1c0 [ 74.848236][ T6202] ? clear_bhb_loop+0x55/0xb0 [ 74.852959][ T6202] ? clear_bhb_loop+0x55/0xb0 [ 74.858088][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.864016][ T6202] RIP: 0033:0x7f9721d3dff9 [ 74.868512][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.888389][ T6202] RSP: 002b:00007f97209b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000006d [ 74.896810][ T6202] RAX: ffffffffffffffda RBX: 00007f9721ef5f80 RCX: 00007f9721d3dff9 [ 74.904948][ T6202] RDX: 0000000000000000 RSI: 0000000000000165 RDI: 0000000000000000 [ 74.912944][ T6202] RBP: 00007f97209b7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.920923][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.928897][ T6202] R13: 0000000000000000 R14: 00007f9721ef5f80 R15: 00007ffd84c3fd18 [ 74.936909][ T6202] [ 75.320927][ T6228] __nla_validate_parse: 7 callbacks suppressed [ 75.320949][ T6228] netlink: 256 bytes leftover after parsing attributes in process `syz.4.601'. [ 75.344522][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 75.344538][ T29] audit: type=1326 audit(1729236230.893:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.375803][ T29] audit: type=1326 audit(1729236230.893:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.399267][ T29] audit: type=1326 audit(1729236230.893:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.422879][ T29] audit: type=1326 audit(1729236230.893:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.446329][ T29] audit: type=1326 audit(1729236230.893:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.469849][ T29] audit: type=1326 audit(1729236230.893:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.478700][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 75.493250][ T29] audit: type=1326 audit(1729236230.893:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.525384][ T29] audit: type=1326 audit(1729236230.893:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.548807][ T29] audit: type=1326 audit(1729236230.893:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.572229][ T29] audit: type=1326 audit(1729236230.893:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ab51dff9 code=0x7ffc0000 [ 75.642808][ T6241] loop4: detected capacity change from 0 to 128 [ 75.742576][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 75.813052][ T6263] FAULT_INJECTION: forcing a failure. [ 75.813052][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 75.825958][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.4.615 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 75.836587][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.846745][ T6263] Call Trace: [ 75.850028][ T6263] [ 75.852972][ T6263] dump_stack_lvl+0xf2/0x150 [ 75.857604][ T6263] dump_stack+0x15/0x20 [ 75.861781][ T6263] should_fail_ex+0x223/0x230 [ 75.866480][ T6263] ? getname_flags+0x81/0x3b0 [ 75.871167][ T6263] should_failslab+0x8f/0xb0 [ 75.875821][ T6263] kmem_cache_alloc_noprof+0x4c/0x290 [ 75.881393][ T6263] getname_flags+0x81/0x3b0 [ 75.885996][ T6263] getname+0x17/0x20 [ 75.889900][ T6263] do_sys_openat2+0x67/0x120 [ 75.894534][ T6263] __x64_sys_openat+0xf3/0x120 [ 75.899389][ T6263] x64_sys_call+0x1025/0x2d60 [ 75.904084][ T6263] do_syscall_64+0xc9/0x1c0 [ 75.908636][ T6263] ? clear_bhb_loop+0x55/0xb0 [ 75.913335][ T6263] ? clear_bhb_loop+0x55/0xb0 [ 75.918050][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.923993][ T6263] RIP: 0033:0x7f57ab51c990 [ 75.928415][ T6263] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 75.948052][ T6263] RSP: 002b:00007f57aa196b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 75.956541][ T6263] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f57ab51c990 [ 75.964517][ T6263] RDX: 0000000000000002 RSI: 00007f57aa196c10 RDI: 00000000ffffff9c [ 75.972546][ T6263] RBP: 00007f57aa196c10 R08: 0000000000000000 R09: 00007f57aa196987 [ 75.980550][ T6263] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 75.988528][ T6263] R13: 0000000000000000 R14: 00007f57ab6d5f80 R15: 00007fff128e53e8 [ 75.996514][ T6263] [ 76.009297][ T6263] loop4: detected capacity change from 0 to 1024 [ 76.016964][ T6263] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.031086][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 76.031523][ T6263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.078068][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.115131][ T6273] loop4: detected capacity change from 0 to 1024 [ 76.127400][ T6273] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.150126][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.186621][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.473597][ T6326] netlink: 'syz.1.624': attribute type 4 has an invalid length. [ 76.762552][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 76.793324][ T6378] FAULT_INJECTION: forcing a failure. [ 76.793324][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.806679][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.0.629 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 76.817307][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.827389][ T6378] Call Trace: [ 76.830682][ T6378] [ 76.833630][ T6378] dump_stack_lvl+0xf2/0x150 [ 76.838272][ T6378] dump_stack+0x15/0x20 [ 76.842470][ T6378] should_fail_ex+0x223/0x230 [ 76.847198][ T6378] should_fail+0xb/0x10 [ 76.851393][ T6378] should_fail_usercopy+0x1a/0x20 [ 76.856458][ T6378] _copy_from_iter+0xd3/0xd20 [ 76.861368][ T6378] ? kmalloc_reserve+0x16e/0x190 [ 76.866377][ T6378] ? __build_skb_around+0x196/0x1f0 [ 76.871728][ T6378] ? __alloc_skb+0x21f/0x310 [ 76.876482][ T6378] ? __virt_addr_valid+0x1ed/0x250 [ 76.881678][ T6378] ? __check_object_size+0x364/0x520 [ 76.887074][ T6378] netlink_sendmsg+0x460/0x6e0 [ 76.891933][ T6378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.897264][ T6378] __sock_sendmsg+0x140/0x180 [ 76.902018][ T6378] ____sys_sendmsg+0x312/0x410 [ 76.906839][ T6378] __sys_sendmsg+0x1d9/0x270 [ 76.911486][ T6378] __x64_sys_sendmsg+0x46/0x50 [ 76.916296][ T6378] x64_sys_call+0x2689/0x2d60 [ 76.921014][ T6378] do_syscall_64+0xc9/0x1c0 [ 76.925551][ T6378] ? clear_bhb_loop+0x55/0xb0 [ 76.930295][ T6378] ? clear_bhb_loop+0x55/0xb0 [ 76.935078][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.941036][ T6378] RIP: 0033:0x7f4a8c25dff9 [ 76.945490][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.965123][ T6378] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.973569][ T6378] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 76.981623][ T6378] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 76.989686][ T6378] RBP: 00007f4a8aed7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.997681][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.005683][ T6378] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 77.013763][ T6378] [ 77.811751][ T6458] netlink: 'syz.4.635': attribute type 4 has an invalid length. [ 77.813717][ T6456] netlink: 256 bytes leftover after parsing attributes in process `syz.3.634'. [ 77.938200][ T6468] loop0: detected capacity change from 0 to 512 [ 77.956712][ T6468] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 77.999328][ T6472] loop3: detected capacity change from 0 to 512 [ 78.014969][ T6474] macvlan2: entered promiscuous mode [ 78.020333][ T6474] macvlan2: entered allmulticast mode [ 78.044700][ T6472] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.640: bg 0: block 35: padding at end of block bitmap is not set [ 78.068453][ T6472] EXT4-fs (loop3): Remounting filesystem read-only [ 78.082274][ T6472] EXT4-fs (loop3): 1 truncate cleaned up [ 78.088492][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.100876][ T6472] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 78.108095][ T6472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.137431][ T6472] xt_hashlimit: max too large, truncated to 1048576 [ 78.146009][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.640'. [ 78.230717][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.643'. [ 78.547718][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.647'. [ 79.141211][ T6573] loop4: detected capacity change from 0 to 512 [ 79.174798][ T6573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.196467][ T6573] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.363065][ T6597] netlink: 4372 bytes leftover after parsing attributes in process `syz.2.653'. [ 79.392676][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.410484][ T6606] FAULT_INJECTION: forcing a failure. [ 79.410484][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.423726][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.3.657 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 79.433422][ T6597] loop2: detected capacity change from 0 to 1024 [ 79.434317][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.434335][ T6606] Call Trace: [ 79.434342][ T6606] [ 79.434358][ T6606] dump_stack_lvl+0xf2/0x150 [ 79.441777][ T6597] EXT4-fs: Ignoring removed nobh option [ 79.450733][ T6606] dump_stack+0x15/0x20 [ 79.450766][ T6606] should_fail_ex+0x223/0x230 [ 79.450876][ T6606] should_fail+0xb/0x10 [ 79.480337][ T6606] should_fail_usercopy+0x1a/0x20 [ 79.485420][ T6606] _copy_to_user+0x1e/0xa0 [ 79.489912][ T6606] simple_read_from_buffer+0xa0/0x110 [ 79.495367][ T6606] proc_fail_nth_read+0xf9/0x140 [ 79.500468][ T6606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.506042][ T6606] vfs_read+0x195/0x720 [ 79.510306][ T6606] ? __rcu_read_unlock+0x4e/0x70 [ 79.515289][ T6606] ? __fget_files+0x1d4/0x210 [ 79.520049][ T6606] ksys_read+0xeb/0x1b0 [ 79.524326][ T6606] __x64_sys_read+0x42/0x50 [ 79.528938][ T6606] x64_sys_call+0x27d3/0x2d60 [ 79.533718][ T6606] do_syscall_64+0xc9/0x1c0 [ 79.538304][ T6606] ? clear_bhb_loop+0x55/0xb0 [ 79.543027][ T6606] ? clear_bhb_loop+0x55/0xb0 [ 79.547862][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.553805][ T6606] RIP: 0033:0x7f9721d3ca3c [ 79.556651][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.558225][ T6606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 79.558251][ T6606] RSP: 002b:00007f97209b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.558276][ T6606] RAX: ffffffffffffffda RBX: 00007f9721ef5f80 RCX: 00007f9721d3ca3c [ 79.606332][ T6606] RDX: 000000000000000f RSI: 00007f97209b70a0 RDI: 0000000000000006 [ 79.614321][ T6606] RBP: 00007f97209b7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.622297][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.630273][ T6606] R13: 0000000000000000 R14: 00007f9721ef5f80 R15: 00007ffd84c3fd18 [ 79.638268][ T6606] [ 79.674787][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.762759][ T6636] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 79.786416][ T6633] loop0: detected capacity change from 0 to 512 [ 79.802454][ T6633] EXT4-fs: Ignoring removed orlov option [ 79.821604][ T6633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.878189][ T6633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.894363][ T6633] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.915614][ T6633] FAULT_INJECTION: forcing a failure. [ 79.915614][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 79.928344][ T6633] CPU: 0 UID: 0 PID: 6633 Comm: syz.0.661 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 79.939059][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.949145][ T6633] Call Trace: [ 79.952440][ T6633] [ 79.955468][ T6633] dump_stack_lvl+0xf2/0x150 [ 79.960115][ T6633] dump_stack+0x15/0x20 [ 79.964306][ T6633] should_fail_ex+0x223/0x230 [ 79.969045][ T6633] ? getname_flags+0x81/0x3b0 [ 79.973811][ T6633] should_failslab+0x8f/0xb0 [ 79.978442][ T6633] kmem_cache_alloc_noprof+0x4c/0x290 [ 79.983896][ T6633] getname_flags+0x81/0x3b0 [ 79.988443][ T6633] getname+0x17/0x20 [ 79.992387][ T6633] do_sys_openat2+0x67/0x120 [ 79.997095][ T6633] __x64_sys_openat+0xf3/0x120 [ 80.001992][ T6633] x64_sys_call+0x1025/0x2d60 [ 80.006714][ T6633] do_syscall_64+0xc9/0x1c0 [ 80.011270][ T6633] ? clear_bhb_loop+0x55/0xb0 [ 80.016012][ T6633] ? clear_bhb_loop+0x55/0xb0 [ 80.020741][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.026744][ T6633] RIP: 0033:0x7f4a8c25dff9 [ 80.031183][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.051003][ T6633] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.059501][ T6633] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 80.067562][ T6633] RDX: 00000000000026e1 RSI: 0000000020000580 RDI: ffffffffffffff9c [ 80.075558][ T6633] RBP: 00007f4a8aed7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.083635][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.091710][ T6633] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 80.099720][ T6633] [ 80.124524][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.235676][ T6682] loop3: detected capacity change from 0 to 256 [ 80.238797][ T6685] loop0: detected capacity change from 0 to 512 [ 80.264545][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.289989][ T6685] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.320365][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 80.320383][ T29] audit: type=1400 audit(1729236235.923:2605): avc: denied { open } for pid=6684 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.345814][ T29] audit: type=1400 audit(1729236235.923:2606): avc: denied { kernel } for pid=6684 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.365171][ T29] audit: type=1400 audit(1729236235.923:2607): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.419448][ T6697] loop3: detected capacity change from 0 to 512 [ 80.426971][ T29] audit: type=1400 audit(1729236236.004:2608): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.449096][ T29] audit: type=1400 audit(1729236236.004:2609): avc: denied { search } for pid=2950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.470257][ T6697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.470821][ T29] audit: type=1400 audit(1729236236.004:2610): avc: denied { append } for pid=2950 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.483810][ T6697] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.518205][ T29] audit: type=1400 audit(1729236236.004:2611): avc: denied { open } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.542274][ T29] audit: type=1400 audit(1729236236.004:2612): avc: denied { getattr } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.565105][ T29] audit: type=1326 audit(1729236236.014:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9721d3dff9 code=0x7ffc0000 [ 80.588472][ T29] audit: type=1326 audit(1729236236.014:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9721d3dff9 code=0x7ffc0000 [ 80.613328][ T6697] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 80.671798][ T6697] EXT4-fs (loop3): 1 truncate cleaned up [ 80.680671][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.718438][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.757718][ T6697] random: crng reseeded on system resumption [ 80.772364][ T6712] FAULT_INJECTION: forcing a failure. [ 80.772364][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.785515][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: +}[@ Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 80.795730][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.806005][ T6712] Call Trace: [ 80.809305][ T6712] [ 80.812258][ T6712] dump_stack_lvl+0xf2/0x150 [ 80.816960][ T6712] dump_stack+0x15/0x20 [ 80.821126][ T6712] should_fail_ex+0x223/0x230 [ 80.825945][ T6712] should_fail+0xb/0x10 [ 80.830138][ T6712] should_fail_usercopy+0x1a/0x20 [ 80.835381][ T6712] _copy_from_user+0x1e/0xd0 [ 80.839984][ T6712] copy_msghdr_from_user+0x54/0x2a0 [ 80.845284][ T6712] __sys_sendmsg+0x171/0x270 [ 80.849931][ T6712] __x64_sys_sendmsg+0x46/0x50 [ 80.854803][ T6712] x64_sys_call+0x2689/0x2d60 [ 80.859509][ T6712] do_syscall_64+0xc9/0x1c0 [ 80.864090][ T6712] ? clear_bhb_loop+0x55/0xb0 [ 80.868895][ T6712] ? clear_bhb_loop+0x55/0xb0 [ 80.873716][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.879652][ T6712] RIP: 0033:0x7f4a8c25dff9 [ 80.884124][ T6712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.884144][ T6712] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.912321][ T6712] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 80.920330][ T6712] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 80.928320][ T6712] RBP: 00007f4a8aed7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.936373][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.944423][ T6712] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 80.952430][ T6712] [ 80.958478][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.051174][ T6724] __nla_validate_parse: 3 callbacks suppressed [ 81.051188][ T6724] netlink: 256 bytes leftover after parsing attributes in process `syz.3.676'. [ 81.058072][ T6722] macvlan3: entered promiscuous mode [ 81.071825][ T6722] macvlan3: entered allmulticast mode [ 81.168379][ T6740] netlink: 14 bytes leftover after parsing attributes in process `syz.0.680'. [ 81.176935][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 81.245979][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 81.279718][ T6748] syz.0.683[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.279790][ T6748] syz.0.683[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.298448][ T6748] syz.0.683[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.339279][ T6752] FAULT_INJECTION: forcing a failure. [ 81.339279][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.363781][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.0.685 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 81.374410][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.384492][ T6752] Call Trace: [ 81.387805][ T6752] [ 81.390759][ T6752] dump_stack_lvl+0xf2/0x150 [ 81.395498][ T6752] dump_stack+0x15/0x20 [ 81.399678][ T6752] should_fail_ex+0x223/0x230 [ 81.404379][ T6752] should_fail+0xb/0x10 [ 81.408598][ T6752] should_fail_usercopy+0x1a/0x20 [ 81.413687][ T6752] _copy_from_user+0x1e/0xd0 [ 81.418279][ T6752] perf_copy_attr+0x146/0x5b0 [ 81.422964][ T6752] ? 0xffffffff81000000 [ 81.427142][ T6752] ? __rcu_read_unlock+0x4e/0x70 [ 81.432144][ T6752] __se_sys_perf_event_open+0x6d/0x21f0 [ 81.437819][ T6752] ? proc_fail_nth_write+0x12a/0x150 [ 81.443202][ T6752] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.448903][ T6752] ? vfs_write+0x580/0x910 [ 81.453375][ T6752] ? __fget_files+0x1d4/0x210 [ 81.458180][ T6752] __x64_sys_perf_event_open+0x67/0x80 [ 81.463753][ T6752] x64_sys_call+0x18d7/0x2d60 [ 81.468478][ T6752] do_syscall_64+0xc9/0x1c0 [ 81.473166][ T6752] ? clear_bhb_loop+0x55/0xb0 [ 81.477950][ T6752] ? clear_bhb_loop+0x55/0xb0 [ 81.482729][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.488681][ T6752] RIP: 0033:0x7f4a8c25dff9 [ 81.493122][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.512770][ T6752] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 81.521208][ T6752] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 81.529260][ T6752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 81.537343][ T6752] RBP: 00007f4a8aed7090 R08: 0000000000000003 R09: 0000000000000000 [ 81.545346][ T6752] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 81.553395][ T6752] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 81.561404][ T6752] [ 81.583458][ T6757] syz.4.686[6757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.583617][ T6757] syz.4.686[6757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.612567][ T6757] syz.4.686[6757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.625982][ T6757] netlink: 220 bytes leftover after parsing attributes in process `syz.4.686'. [ 81.695469][ T6765] FAULT_INJECTION: forcing a failure. [ 81.695469][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.708649][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.0.689 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 81.719310][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.729509][ T6765] Call Trace: [ 81.732814][ T6765] [ 81.735776][ T6765] dump_stack_lvl+0xf2/0x150 [ 81.740574][ T6765] dump_stack+0x15/0x20 [ 81.745119][ T6765] should_fail_ex+0x223/0x230 [ 81.750790][ T6765] should_fail+0xb/0x10 [ 81.755261][ T6765] should_fail_usercopy+0x1a/0x20 [ 81.760475][ T6765] _copy_from_user+0x1e/0xd0 [ 81.765323][ T6765] __sys_bpf+0x14e/0x7a0 [ 81.769606][ T6765] __x64_sys_bpf+0x43/0x50 [ 81.774053][ T6765] x64_sys_call+0x2625/0x2d60 [ 81.778952][ T6765] do_syscall_64+0xc9/0x1c0 [ 81.783586][ T6765] ? clear_bhb_loop+0x55/0xb0 [ 81.788377][ T6765] ? clear_bhb_loop+0x55/0xb0 [ 81.793087][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.799297][ T6765] RIP: 0033:0x7f4a8c25dff9 [ 81.804123][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.824989][ T6765] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.833492][ T6765] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 81.841518][ T6765] RDX: 0000000000000040 RSI: 0000000020000280 RDI: 000000000000000a [ 81.849567][ T6765] RBP: 00007f4a8aed7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.857623][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.865677][ T6765] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 81.873788][ T6765] [ 81.891091][ T6767] syz.4.690[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.891259][ T6767] syz.4.690[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.903844][ T6767] syz.4.690[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.018202][ T6771] syz.1.691[6771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.083468][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 82.110137][ T6785] loop0: detected capacity change from 0 to 512 [ 82.132534][ T6785] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 82.251622][ T6793] FAULT_INJECTION: forcing a failure. [ 82.251622][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.264765][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.2.700 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 82.275435][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.285562][ T6793] Call Trace: [ 82.288850][ T6793] [ 82.291968][ T6793] dump_stack_lvl+0xf2/0x150 [ 82.296634][ T6793] dump_stack+0x15/0x20 [ 82.300797][ T6793] should_fail_ex+0x223/0x230 [ 82.305570][ T6793] should_fail+0xb/0x10 [ 82.309829][ T6793] should_fail_usercopy+0x1a/0x20 [ 82.314916][ T6793] _copy_from_user+0x1e/0xd0 [ 82.319592][ T6793] copy_msghdr_from_user+0x54/0x2a0 [ 82.324811][ T6793] __sys_sendmsg+0x171/0x270 [ 82.329495][ T6793] __x64_sys_sendmsg+0x46/0x50 [ 82.334330][ T6793] x64_sys_call+0x2689/0x2d60 [ 82.339040][ T6793] do_syscall_64+0xc9/0x1c0 [ 82.343567][ T6793] ? clear_bhb_loop+0x55/0xb0 [ 82.348309][ T6793] ? clear_bhb_loop+0x55/0xb0 [ 82.353049][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.358973][ T6793] RIP: 0033:0x7fc2fa28dff9 [ 82.363405][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.383051][ T6793] RSP: 002b:00007fc2f8f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.391505][ T6793] RAX: ffffffffffffffda RBX: 00007fc2fa445f80 RCX: 00007fc2fa28dff9 [ 82.399496][ T6793] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 000000000000000b [ 82.407555][ T6793] RBP: 00007fc2f8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 82.415537][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.423710][ T6793] R13: 0000000000000000 R14: 00007fc2fa445f80 R15: 00007fffbcae9b08 [ 82.431733][ T6793] [ 82.644151][ T6818] FAULT_INJECTION: forcing a failure. [ 82.644151][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.657313][ T6818] CPU: 1 UID: 0 PID: 6818 Comm: syz.3.711 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 82.668043][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.678200][ T6818] Call Trace: [ 82.681485][ T6818] [ 82.684472][ T6818] dump_stack_lvl+0xf2/0x150 [ 82.689094][ T6818] dump_stack+0x15/0x20 [ 82.693258][ T6818] should_fail_ex+0x223/0x230 [ 82.697964][ T6818] should_fail+0xb/0x10 [ 82.702201][ T6818] should_fail_usercopy+0x1a/0x20 [ 82.707259][ T6818] _copy_from_user+0x1e/0xd0 [ 82.711947][ T6818] copy_msghdr_from_user+0x54/0x2a0 [ 82.717166][ T6818] __sys_sendmmsg+0x21a/0x500 [ 82.721897][ T6818] __x64_sys_sendmmsg+0x57/0x70 [ 82.726834][ T6818] x64_sys_call+0xa49/0x2d60 [ 82.731577][ T6818] do_syscall_64+0xc9/0x1c0 [ 82.736084][ T6818] ? clear_bhb_loop+0x55/0xb0 [ 82.741002][ T6818] ? clear_bhb_loop+0x55/0xb0 [ 82.745799][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.751820][ T6818] RIP: 0033:0x7f9721d3dff9 [ 82.756250][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.775988][ T6818] RSP: 002b:00007f97209b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.784532][ T6818] RAX: ffffffffffffffda RBX: 00007f9721ef5f80 RCX: 00007f9721d3dff9 [ 82.792528][ T6818] RDX: 0000000000000002 RSI: 0000000020006cc0 RDI: 0000000000000003 [ 82.800517][ T6818] RBP: 00007f97209b7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.808502][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.816511][ T6818] R13: 0000000000000000 R14: 00007f9721ef5f80 R15: 00007ffd84c3fd18 [ 82.824504][ T6818] [ 82.927587][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.942674][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 82.951624][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 82.973666][ T6827] lo speed is unknown, defaulting to 1000 [ 82.987719][ T6827] lo speed is unknown, defaulting to 1000 [ 83.003755][ T6827] lo speed is unknown, defaulting to 1000 [ 83.054078][ T6827] infiniband syz1: set active [ 83.058874][ T6827] infiniband syz1: added lo [ 83.066008][ T3344] lo speed is unknown, defaulting to 1000 [ 83.085187][ T6827] RDS/IB: syz1: added [ 83.099378][ T6841] loop1: detected capacity change from 0 to 512 [ 83.103125][ T6827] smc: adding ib device syz1 with port count 1 [ 83.115465][ T6827] smc: ib device syz1 port 1 has pnetid [ 83.121926][ T6827] lo speed is unknown, defaulting to 1000 [ 83.127919][ T3344] lo speed is unknown, defaulting to 1000 [ 83.165686][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.179022][ T6841] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.196528][ T6841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.206498][ T6827] lo speed is unknown, defaulting to 1000 [ 83.334832][ T6827] lo speed is unknown, defaulting to 1000 [ 83.343042][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 83.363770][ T6851] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.409403][ T6827] lo speed is unknown, defaulting to 1000 [ 83.595003][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.605629][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.615567][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.626039][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.635912][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.647588][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.657597][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.668098][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.700226][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.708153][ T6867] batadv_slave_0: entered promiscuous mode [ 83.732167][ T6827] lo speed is unknown, defaulting to 1000 [ 83.789102][ T6874] loop1: detected capacity change from 0 to 256 [ 83.880380][ T6880] loop4: detected capacity change from 0 to 2048 [ 83.881969][ T6882] loop2: detected capacity change from 0 to 256 [ 83.945665][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.957632][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.988639][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.010967][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.145016][ T6879] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.328447][ T6911] loop3: detected capacity change from 0 to 2048 [ 84.335376][ T6911] EXT4-fs: Ignoring removed orlov option [ 84.368306][ T6911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.640320][ T6930] SELinux: Context system_u: is not valid (left unmapped). [ 84.652150][ T6930] loop0: detected capacity change from 0 to 128 [ 84.664396][ T57] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.679440][ T57] EXT4-fs (loop3): Remounting filesystem read-only [ 84.681226][ T6930] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.696143][ T985] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.699049][ T6930] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.705566][ T985] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.744788][ T985] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.752395][ T985] rtc_cmos 00:00: Alarms can be up to one day in the future [ 84.759733][ T985] rtc rtc0: __rtc_set_alarm: err=-22 [ 84.782346][ T6930] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.808467][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.895756][ T6943] loop1: detected capacity change from 0 to 512 [ 84.912175][ T6943] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.759: iget: bogus i_mode (0) [ 84.926748][ T6948] loop0: detected capacity change from 0 to 512 [ 84.945332][ T6943] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.759: couldn't read orphan inode 17 (err -117) [ 84.946902][ T6948] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.957951][ T6943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.969924][ T6948] EXT4-fs (loop0): 1 truncate cleaned up [ 84.985389][ T6948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.010416][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.049803][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.086923][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 85.097262][ T6959] loop1: detected capacity change from 0 to 512 [ 85.111168][ T6959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.130325][ T6959] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.765: bg 0: block 248: padding at end of block bitmap is not set [ 85.145007][ T6959] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.765: Failed to acquire dquot type 1 [ 85.156930][ T6959] EXT4-fs (loop1): 1 truncate cleaned up [ 85.165985][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.179091][ T6959] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.262420][ T6974] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.765: Abort forced by user [ 85.272874][ T6974] EXT4-fs (loop1): Remounting filesystem read-only [ 85.279774][ T6974] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 85.292394][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 85.292409][ T29] audit: type=1326 audit(1729236240.946:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.322102][ T29] audit: type=1326 audit(1729236240.946:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.345445][ T29] audit: type=1326 audit(1729236240.946:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.368928][ T29] audit: type=1326 audit(1729236240.946:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.392389][ T29] audit: type=1326 audit(1729236240.946:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.415869][ T29] audit: type=1326 audit(1729236240.946:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.440087][ T29] audit: type=1326 audit(1729236240.946:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.463557][ T29] audit: type=1326 audit(1729236240.946:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.487095][ T29] audit: type=1326 audit(1729236240.946:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.510459][ T29] audit: type=1326 audit(1729236240.946:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.1.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed64edff9 code=0x7ffc0000 [ 85.585069][ T6959] syz.1.765 (6959) used greatest stack depth: 9360 bytes left [ 85.594888][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.095218][ T7030] __nla_validate_parse: 2 callbacks suppressed [ 86.095287][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 86.178962][ T7043] netlink: 328 bytes leftover after parsing attributes in process `syz.2.794'. [ 86.224153][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 86.367931][ T7057] loop2: detected capacity change from 0 to 512 [ 86.381240][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.393871][ T7057] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.508475][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.596294][ T7091] loop2: detected capacity change from 0 to 512 [ 86.604064][ T7085] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 86.619934][ T7091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.646119][ T7091] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.681709][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.709383][ T7108] loop2: detected capacity change from 0 to 512 [ 86.731767][ T7109] netlink: 100 bytes leftover after parsing attributes in process `syz.0.812'. [ 86.743248][ T7108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.759555][ T7108] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.817773][ T7122] bpf_get_probe_write_proto: 14 callbacks suppressed [ 86.817792][ T7122] syz.1.820[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.828616][ T7122] syz.1.820[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.840386][ T7122] syz.1.820[7122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.852959][ T7122] FAULT_INJECTION: forcing a failure. [ 86.852959][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 86.876914][ T7122] CPU: 0 UID: 0 PID: 7122 Comm: syz.1.820 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 86.887546][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.898032][ T7122] Call Trace: [ 86.898617][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.818'. [ 86.901316][ T7122] [ 86.901328][ T7122] dump_stack_lvl+0xf2/0x150 [ 86.917716][ T7122] dump_stack+0x15/0x20 [ 86.921934][ T7122] should_fail_ex+0x223/0x230 [ 86.926703][ T7122] ? __se_sys_mount+0xf7/0x2d0 [ 86.931504][ T7122] should_failslab+0x8f/0xb0 [ 86.936107][ T7122] __kmalloc_cache_noprof+0x4b/0x2a0 [ 86.941541][ T7122] __se_sys_mount+0xf7/0x2d0 [ 86.946151][ T7122] ? fput+0x14e/0x190 [ 86.950150][ T7122] ? ksys_write+0x17a/0x1b0 [ 86.954682][ T7122] __x64_sys_mount+0x67/0x80 [ 86.959296][ T7122] x64_sys_call+0x203e/0x2d60 [ 86.964048][ T7122] do_syscall_64+0xc9/0x1c0 [ 86.968559][ T7122] ? clear_bhb_loop+0x55/0xb0 [ 86.973313][ T7122] ? clear_bhb_loop+0x55/0xb0 [ 86.978084][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.983998][ T7122] RIP: 0033:0x7f0ed64edff9 [ 86.988426][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.008046][ T7122] RSP: 002b:00007f0ed5161038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.016606][ T7122] RAX: ffffffffffffffda RBX: 00007f0ed66a5f80 RCX: 00007f0ed64edff9 [ 87.024583][ T7122] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 87.032563][ T7122] RBP: 00007f0ed5161090 R08: 0000000020000b40 R09: 0000000000000000 [ 87.040541][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.048534][ T7122] R13: 0000000000000000 R14: 00007f0ed66a5f80 R15: 00007fff78f25428 [ 87.056721][ T7122] [ 87.108031][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.126534][ T7130] loop1: detected capacity change from 0 to 512 [ 87.141348][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.821'. [ 87.150744][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 87.167388][ T7130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.188905][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'. [ 87.200381][ T7130] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.231881][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.380140][ T7151] netlink: 100 bytes leftover after parsing attributes in process `syz.1.828'. [ 87.458549][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 87.604448][ T7187] loop3: detected capacity change from 0 to 256 [ 88.406320][ T7321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.472351][ T7321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.582164][ T7321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.625388][ T7321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.711078][ T7321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.738885][ T7321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.780253][ T7321] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.804081][ T7321] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.584501][ T7421] loop2: detected capacity change from 0 to 256 [ 89.902321][ T7435] loop4: detected capacity change from 0 to 2048 [ 89.923884][ T7435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.944164][ T7435] syzkaller1: entered promiscuous mode [ 89.949731][ T7435] syzkaller1: entered allmulticast mode [ 90.006777][ T7435] loop4: detected capacity change from 2048 to 0 [ 90.017363][ T7435] syz.4.882: attempt to access beyond end of device [ 90.017363][ T7435] loop4: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 90.030768][ T7435] syz.4.882: attempt to access beyond end of device [ 90.030768][ T7435] loop4: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 90.044139][ T7435] syz.4.882: attempt to access beyond end of device [ 90.044139][ T7435] loop4: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 90.057625][ T7435] syz.4.882: attempt to access beyond end of device [ 90.057625][ T7435] loop4: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 90.071039][ T7435] syz.4.882: attempt to access beyond end of device [ 90.071039][ T7435] loop4: rw=12288, sector=20, nr_sectors = 4 limit=0 [ 90.084634][ T7435] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #13: block 5: comm syz.4.882: unable to read itable block [ 90.098122][ T7435] syz.4.882: attempt to access beyond end of device [ 90.098122][ T7435] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 90.111357][ T7435] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.133314][ T7435] EXT4-fs (loop4): I/O error while writing superblock [ 90.140591][ T7435] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 90.150084][ T7435] syz.4.882: attempt to access beyond end of device [ 90.150084][ T7435] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 90.163326][ T7435] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.172082][ T7435] EXT4-fs (loop4): I/O error while writing superblock [ 90.178907][ T7435] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #13: comm syz.4.882: mark_inode_dirty error [ 90.190404][ T7435] syz.4.882: attempt to access beyond end of device [ 90.190404][ T7435] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 90.203571][ T7435] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.212143][ T7435] EXT4-fs (loop4): I/O error while writing superblock [ 90.221467][ T7434] syz.4.882: attempt to access beyond end of device [ 90.221467][ T7434] loop4: rw=524288, sector=320, nr_sectors = 4 limit=0 [ 90.235036][ T7434] syz.4.882: attempt to access beyond end of device [ 90.235036][ T7434] loop4: rw=0, sector=320, nr_sectors = 4 limit=0 [ 90.296413][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 90.296430][ T29] audit: type=1400 audit(1729236245.988:3293): avc: denied { connect } for pid=7440 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.333016][ T29] audit: type=1400 audit(1729236246.018:3294): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.333238][ T3270] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #2: block 4: comm syz-executor: unable to read itable block [ 90.367986][ T3270] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.376642][ T3270] EXT4-fs (loop4): I/O error while writing superblock [ 90.383456][ T3270] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 90.395939][ T3270] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.424228][ T3270] EXT4-fs (loop4): I/O error while writing superblock [ 90.431153][ T3270] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 90.431238][ T3270] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.431254][ T3270] EXT4-fs (loop4): I/O error while writing superblock [ 90.451829][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #13: block 5: comm kworker/u8:0: unable to read itable block [ 90.451876][ T11] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.451903][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 90.451940][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #2: block 4: comm kworker/u8:0: unable to read itable block [ 90.451968][ T11] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.451996][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 90.453301][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.456433][ T3270] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 90.458299][ T7436] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 90.554717][ T29] audit: type=1400 audit(1729236246.249:3295): avc: denied { bind } for pid=7454 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 90.602624][ T29] audit: type=1400 audit(1729236246.249:3296): avc: denied { name_bind } for pid=7454 comm="syz.2.888" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 90.623637][ T29] audit: type=1400 audit(1729236246.249:3297): avc: denied { node_bind } for pid=7454 comm="syz.2.888" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 90.644933][ T29] audit: type=1400 audit(1729236246.319:3298): avc: denied { listen } for pid=7454 comm="syz.2.888" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 90.731813][ T4184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.761549][ T29] audit: type=1400 audit(1729236246.450:3299): avc: denied { execmem } for pid=7471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.785916][ T7473] loop2: detected capacity change from 0 to 256 [ 90.794506][ T29] audit: type=1400 audit(1729236246.480:3300): avc: denied { mounton } for pid=7474 comm="syz.3.898" path="/212/file0" dev="tmpfs" ino=1146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.817215][ T29] audit: type=1400 audit(1729236246.480:3301): avc: denied { mount } for pid=7474 comm="syz.3.898" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.851955][ T4184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.858383][ T29] audit: type=1400 audit(1729236246.510:3302): avc: denied { mounton } for pid=7477 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.906678][ T4184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.929383][ T7480] syz.3.899[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.929501][ T7480] syz.3.899[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.950926][ T7480] syz.3.899[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.976861][ T4184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.006630][ T7492] netlink: 'syz.3.903': attribute type 5 has an invalid length. [ 91.016744][ T7496] 9pnet_fd: Insufficient options for proto=fd [ 91.017849][ T7492] 9pnet_fd: Insufficient options for proto=fd [ 91.035102][ T7477] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.100459][ T4184] bridge_slave_1: left allmulticast mode [ 91.106223][ T4184] bridge_slave_1: left promiscuous mode [ 91.112012][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.127529][ T4184] bridge_slave_0: left allmulticast mode [ 91.133329][ T4184] bridge_slave_0: left promiscuous mode [ 91.139021][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.342577][ T4184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.357332][ T4184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.368462][ T4184] bond0 (unregistering): Released all slaves [ 91.377763][ T7477] lo speed is unknown, defaulting to 1000 [ 91.517280][ T4184] hsr_slave_0: left promiscuous mode [ 91.527922][ T4184] hsr_slave_1: left promiscuous mode [ 91.538270][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.545840][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.553599][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.561077][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.570724][ T4184] dummy0: left promiscuous mode [ 91.575640][ T4184] veth1_macvtap: left promiscuous mode [ 91.581167][ T4184] veth0_macvtap: left promiscuous mode [ 91.586480][ T7526] loop3: detected capacity change from 0 to 256 [ 91.586735][ T4184] veth1_vlan: left promiscuous mode [ 91.598319][ T4184] veth0_vlan: left promiscuous mode [ 91.698736][ T4184] infiniband syz1: set down [ 91.737950][ T4184] team0 (unregistering): Port device team_slave_1 removed [ 91.749960][ T4184] team0 (unregistering): Port device team_slave_0 removed [ 91.771892][ T7541] __nla_validate_parse: 6 callbacks suppressed [ 91.771971][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 91.798894][ T57] smc: removing ib device syz1 [ 91.807224][ T35] lo speed is unknown, defaulting to 1000 [ 91.945074][ T7477] chnl_net:caif_netlink_parms(): no params data found [ 91.997813][ C1] sd 0:0:1:0: [sda] tag#6400 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 92.008246][ C1] sd 0:0:1:0: [sda] tag#6400 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 92.045640][ T7573] loop0: detected capacity change from 0 to 512 [ 92.059746][ T7571] loop1: detected capacity change from 0 to 256 [ 92.152096][ T7573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.167061][ T7573] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.246436][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.253575][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.260992][ T7477] bridge_slave_0: entered allmulticast mode [ 92.268282][ T7477] bridge_slave_0: entered promiscuous mode [ 92.280864][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.288264][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.295647][ T7477] bridge_slave_1: entered allmulticast mode [ 92.302918][ T7477] bridge_slave_1: entered promiscuous mode [ 92.338393][ T7477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.367950][ T7613] FAULT_INJECTION: forcing a failure. [ 92.367950][ T7613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.368106][ T7477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.381137][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.1.930 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 92.400724][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.410864][ T7613] Call Trace: [ 92.414155][ T7613] [ 92.417167][ T7613] dump_stack_lvl+0xf2/0x150 [ 92.421851][ T7613] dump_stack+0x15/0x20 [ 92.426020][ T7613] should_fail_ex+0x223/0x230 [ 92.430778][ T7613] should_fail+0xb/0x10 [ 92.435051][ T7613] should_fail_usercopy+0x1a/0x20 [ 92.440189][ T7613] _copy_from_user+0x1e/0xd0 [ 92.444823][ T7613] vmemdup_user+0x12e/0x1b0 [ 92.449361][ T7613] path_setxattr+0x134/0x360 [ 92.454026][ T7613] ? get_pid_task+0x8e/0xc0 [ 92.458640][ T7613] __x64_sys_lsetxattr+0x6a/0x80 [ 92.463617][ T7613] x64_sys_call+0x2931/0x2d60 [ 92.468361][ T7613] do_syscall_64+0xc9/0x1c0 [ 92.472914][ T7613] ? clear_bhb_loop+0x55/0xb0 [ 92.477630][ T7613] ? clear_bhb_loop+0x55/0xb0 [ 92.482378][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.488333][ T7613] RIP: 0033:0x7f0ed64edff9 [ 92.492941][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.512610][ T7613] RSP: 002b:00007f0ed5161038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 92.521065][ T7613] RAX: ffffffffffffffda RBX: 00007f0ed66a5f80 RCX: 00007f0ed64edff9 [ 92.529057][ T7613] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000080 [ 92.537044][ T7613] RBP: 00007f0ed5161090 R08: 0000000000000000 R09: 0000000000000000 [ 92.545090][ T7613] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 92.553136][ T7613] R13: 0000000000000000 R14: 00007f0ed66a5f80 R15: 00007fff78f25428 [ 92.561194][ T7613] [ 92.573555][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.624990][ T7477] team0: Port device team_slave_0 added [ 92.631988][ T7477] team0: Port device team_slave_1 added [ 92.650156][ T7620] loop3: detected capacity change from 0 to 256 [ 92.696176][ T7477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.703191][ T7477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.729260][ T7477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.760035][ T7477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.767112][ T7477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.793163][ T7477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.150110][ T7477] hsr_slave_0: entered promiscuous mode [ 93.184942][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 93.195941][ T7477] hsr_slave_1: entered promiscuous mode [ 93.206894][ T7477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.222004][ T7664] FAULT_INJECTION: forcing a failure. [ 93.222004][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.235250][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.3.942 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 93.245879][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.255969][ T7664] Call Trace: [ 93.259266][ T7664] [ 93.262218][ T7664] dump_stack_lvl+0xf2/0x150 [ 93.266901][ T7664] dump_stack+0x15/0x20 [ 93.271080][ T7664] should_fail_ex+0x223/0x230 [ 93.275815][ T7664] should_fail+0xb/0x10 [ 93.280084][ T7664] should_fail_usercopy+0x1a/0x20 [ 93.285157][ T7664] _copy_from_user+0x1e/0xd0 [ 93.289828][ T7664] kstrtouint_from_user+0x76/0xe0 [ 93.294943][ T7664] ? 0xffffffff81000000 [ 93.299130][ T7664] proc_fail_nth_write+0x4f/0x150 [ 93.304250][ T7664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.309966][ T7664] vfs_write+0x26c/0x910 [ 93.314260][ T7664] ? __fget_files+0x1d4/0x210 [ 93.319091][ T7664] ksys_write+0xeb/0x1b0 [ 93.323388][ T7664] __x64_sys_write+0x42/0x50 [ 93.328033][ T7664] x64_sys_call+0x27dd/0x2d60 [ 93.332803][ T7664] do_syscall_64+0xc9/0x1c0 [ 93.337339][ T7664] ? clear_bhb_loop+0x55/0xb0 [ 93.342066][ T7664] ? clear_bhb_loop+0x55/0xb0 [ 93.346860][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.352801][ T7664] RIP: 0033:0x7f9721d3cadf [ 93.357243][ T7664] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 93.377005][ T7664] RSP: 002b:00007f9720975030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 93.385444][ T7664] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9721d3cadf [ 93.393444][ T7664] RDX: 0000000000000001 RSI: 00007f97209750a0 RDI: 0000000000000006 [ 93.401538][ T7664] RBP: 00007f9720975090 R08: 0000000000000000 R09: 0000000000000000 [ 93.409621][ T7664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 93.417687][ T7664] R13: 0000000000000000 R14: 00007f9721ef6130 R15: 00007ffd84c3fd18 [ 93.425736][ T7664] [ 93.472670][ T7477] Cannot create hsr debugfs directory [ 93.502449][ T7653] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.846167][ T7477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.855049][ T7477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.864165][ T7477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.873591][ T7477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.985685][ T7477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.019102][ T7477] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.033844][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 94.117050][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.124194][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.150048][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.157270][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.247561][ T7731] macvlan3: entered promiscuous mode [ 94.252919][ T7731] macvlan3: entered allmulticast mode [ 94.262488][ T7477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.426871][ T7477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.525164][ T7771] loop0: detected capacity change from 0 to 1024 [ 94.539463][ T7770] loop3: detected capacity change from 0 to 256 [ 94.587615][ T7771] EXT4-fs: Ignoring removed oldalloc option [ 94.624540][ T7771] FAULT_INJECTION: forcing a failure. [ 94.624540][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 94.637251][ T7771] CPU: 0 UID: 0 PID: 7771 Comm: syz.0.967 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 94.647948][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.658047][ T7771] Call Trace: [ 94.661349][ T7771] [ 94.664337][ T7771] dump_stack_lvl+0xf2/0x150 [ 94.668952][ T7771] dump_stack+0x15/0x20 [ 94.673131][ T7771] should_fail_ex+0x223/0x230 [ 94.677947][ T7771] ? copy_splice_read+0xc7/0x5d0 [ 94.682975][ T7771] should_failslab+0x8f/0xb0 [ 94.687618][ T7771] __kmalloc_noprof+0xa5/0x370 [ 94.692434][ T7771] copy_splice_read+0xc7/0x5d0 [ 94.697218][ T7771] ? alloc_pipe_info+0x1cb/0x360 [ 94.702164][ T7771] ? __kmalloc_noprof+0x203/0x370 [ 94.707272][ T7771] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 94.713136][ T7771] splice_direct_to_actor+0x28b/0x670 [ 94.718588][ T7771] ? __pfx_direct_splice_actor+0x10/0x10 [ 94.724239][ T7771] do_splice_direct+0xd7/0x150 [ 94.729017][ T7771] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 94.735012][ T7771] do_sendfile+0x39b/0x970 [ 94.739518][ T7771] __x64_sys_sendfile64+0x110/0x150 [ 94.744841][ T7771] x64_sys_call+0xed5/0x2d60 [ 94.749445][ T7771] do_syscall_64+0xc9/0x1c0 [ 94.753954][ T7771] ? clear_bhb_loop+0x55/0xb0 [ 94.758653][ T7771] ? clear_bhb_loop+0x55/0xb0 [ 94.763385][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.769310][ T7771] RIP: 0033:0x7f4a8c25dff9 [ 94.773799][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.793429][ T7771] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 94.801912][ T7771] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 94.809894][ T7771] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 94.817872][ T7771] RBP: 00007f4a8aed7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.825864][ T7771] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 94.833919][ T7771] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 94.841905][ T7771] [ 94.874987][ T7477] veth0_vlan: entered promiscuous mode [ 94.887310][ T7477] veth1_vlan: entered promiscuous mode [ 94.906562][ T7477] veth0_macvtap: entered promiscuous mode [ 94.915578][ T7477] veth1_macvtap: entered promiscuous mode [ 94.960776][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.971535][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.981474][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.991996][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.001877][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.012338][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.035407][ T7477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.050483][ T7818] macvlan2: entered promiscuous mode [ 95.055874][ T7818] macvlan2: entered allmulticast mode [ 95.070118][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.080631][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.090538][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.101166][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.111047][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.121516][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.131491][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.142029][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.167922][ T7477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.177376][ T7477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.186172][ T7477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.194905][ T7477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.203662][ T7477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.219574][ T7822] netlink: 'syz.0.970': attribute type 4 has an invalid length. [ 95.233550][ T7827] FAULT_INJECTION: forcing a failure. [ 95.233550][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.246671][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.1.974 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 95.257275][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.267346][ T7827] Call Trace: [ 95.270631][ T7827] [ 95.273705][ T7827] dump_stack_lvl+0xf2/0x150 [ 95.278324][ T7827] dump_stack+0x15/0x20 [ 95.282556][ T7827] should_fail_ex+0x223/0x230 [ 95.287340][ T7827] should_fail+0xb/0x10 [ 95.291511][ T7827] should_fail_usercopy+0x1a/0x20 [ 95.296632][ T7827] _copy_from_user+0x1e/0xd0 [ 95.301236][ T7827] __sys_bpf+0x14e/0x7a0 [ 95.305608][ T7827] __x64_sys_bpf+0x43/0x50 [ 95.310153][ T7827] x64_sys_call+0x2625/0x2d60 [ 95.314849][ T7827] do_syscall_64+0xc9/0x1c0 [ 95.319421][ T7827] ? clear_bhb_loop+0x55/0xb0 [ 95.324161][ T7827] ? clear_bhb_loop+0x55/0xb0 [ 95.328862][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.334819][ T7827] RIP: 0033:0x7f0ed64edff9 [ 95.339246][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.358932][ T7827] RSP: 002b:00007f0ed5161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.367354][ T7827] RAX: ffffffffffffffda RBX: 00007f0ed66a5f80 RCX: 00007f0ed64edff9 [ 95.375331][ T7827] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 0000000000000000 [ 95.383391][ T7827] RBP: 00007f0ed5161090 R08: 0000000000000000 R09: 0000000000000000 [ 95.391457][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.399473][ T7827] R13: 0000000000000000 R14: 00007f0ed66a5f80 R15: 00007fff78f25428 [ 95.407635][ T7827] [ 95.459759][ T7839] FAULT_INJECTION: forcing a failure. [ 95.459759][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 95.472452][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.2.980 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 95.483078][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.493156][ T7839] Call Trace: [ 95.496438][ T7839] [ 95.499418][ T7839] dump_stack_lvl+0xf2/0x150 [ 95.504058][ T7839] dump_stack+0x15/0x20 [ 95.508278][ T7839] should_fail_ex+0x223/0x230 [ 95.512988][ T7839] ? getname_flags+0x81/0x3b0 [ 95.517690][ T7839] should_failslab+0x8f/0xb0 [ 95.522295][ T7839] kmem_cache_alloc_noprof+0x4c/0x290 [ 95.527753][ T7839] getname_flags+0x81/0x3b0 [ 95.532270][ T7839] user_path_at+0x26/0x110 [ 95.536723][ T7839] __se_sys_quotactl+0xb2/0x660 [ 95.541585][ T7839] ? fput+0x14e/0x190 [ 95.545638][ T7839] __x64_sys_quotactl+0x55/0x70 [ 95.550501][ T7839] x64_sys_call+0x2b7f/0x2d60 [ 95.555281][ T7839] do_syscall_64+0xc9/0x1c0 [ 95.559795][ T7839] ? clear_bhb_loop+0x55/0xb0 [ 95.564518][ T7839] ? clear_bhb_loop+0x55/0xb0 [ 95.569219][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.575144][ T7839] RIP: 0033:0x7fc2fa28dff9 [ 95.579563][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.599182][ T7839] RSP: 002b:00007fc2f8f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 95.607759][ T7839] RAX: ffffffffffffffda RBX: 00007fc2fa445f80 RCX: 00007fc2fa28dff9 [ 95.615739][ T7839] RDX: 0000000000000000 RSI: 0000000020000900 RDI: ffffffff80000202 [ 95.623769][ T7839] RBP: 00007fc2f8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 95.631769][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.639750][ T7839] R13: 0000000000000000 R14: 00007fc2fa445f80 R15: 00007fffbcae9b08 [ 95.647763][ T7839] [ 95.673852][ T7834] loop3: detected capacity change from 0 to 256 [ 95.692956][ T7846] loop0: detected capacity change from 0 to 128 [ 95.704465][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 95.704515][ T29] audit: type=1400 audit(1729236251.412:3435): avc: denied { mounton } for pid=7477 comm="syz-executor" path="/root/syzkaller.ZEhBj0/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 95.735114][ T29] audit: type=1400 audit(1729236251.412:3436): avc: denied { mount } for pid=7477 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.794523][ T29] audit: type=1400 audit(1729236251.412:3437): avc: denied { mounton } for pid=7477 comm="syz-executor" path="/root/syzkaller.ZEhBj0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.821335][ T29] audit: type=1400 audit(1729236251.412:3438): avc: denied { mounton } for pid=7477 comm="syz-executor" path="/root/syzkaller.ZEhBj0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 95.848963][ T29] audit: type=1400 audit(1729236251.462:3439): avc: denied { mounton } for pid=7477 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 95.960303][ T29] audit: type=1400 audit(1729236251.663:3440): avc: denied { create } for pid=7866 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.980440][ T7867] FAULT_INJECTION: forcing a failure. [ 95.980440][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 95.993095][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.2.986 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 96.003866][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.014091][ T7867] Call Trace: [ 96.017476][ T7867] [ 96.020488][ T7867] dump_stack_lvl+0xf2/0x150 [ 96.020516][ T7867] dump_stack+0x15/0x20 [ 96.025158][ T29] audit: type=1326 audit(1729236251.713:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9721d3dff9 code=0x7fc00000 [ 96.029252][ T7867] should_fail_ex+0x223/0x230 [ 96.052549][ T29] audit: type=1326 audit(1729236251.713:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9721d3dff9 code=0x7fc00000 [ 96.057209][ T7867] ? __alloc_skb+0x10b/0x310 [ 96.080447][ T29] audit: type=1326 audit(1729236251.713:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9721d3dff9 code=0x7fc00000 [ 96.084977][ T7867] should_failslab+0x8f/0xb0 [ 96.085008][ T7867] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 96.108509][ T29] audit: type=1326 audit(1729236251.713:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7863 comm="syz.3.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9721d3dff9 code=0x7fc00000 [ 96.112941][ T7867] __alloc_skb+0x10b/0x310 [ 96.146616][ T7867] netlink_alloc_large_skb+0xad/0xe0 [ 96.152018][ T7867] netlink_sendmsg+0x3b4/0x6e0 [ 96.156834][ T7867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.162184][ T7867] __sock_sendmsg+0x140/0x180 [ 96.166981][ T7867] ____sys_sendmsg+0x312/0x410 [ 96.171781][ T7867] __sys_sendmsg+0x1d9/0x270 [ 96.176448][ T7867] __x64_sys_sendmsg+0x46/0x50 [ 96.181249][ T7867] x64_sys_call+0x2689/0x2d60 [ 96.186032][ T7867] do_syscall_64+0xc9/0x1c0 [ 96.190618][ T7867] ? clear_bhb_loop+0x55/0xb0 [ 96.195351][ T7867] ? clear_bhb_loop+0x55/0xb0 [ 96.200078][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.206021][ T7867] RIP: 0033:0x7fc2fa28dff9 [ 96.210464][ T7867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.230100][ T7867] RSP: 002b:00007fc2f8f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.238554][ T7867] RAX: ffffffffffffffda RBX: 00007fc2fa445f80 RCX: 00007fc2fa28dff9 [ 96.246683][ T7867] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 96.254695][ T7867] RBP: 00007fc2f8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 96.262695][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.270782][ T7867] R13: 0000000000000000 R14: 00007fc2fa445f80 R15: 00007fffbcae9b08 [ 96.279004][ T7867] [ 96.295578][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 96.390383][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'. [ 96.482259][ T7930] FAULT_INJECTION: forcing a failure. [ 96.482259][ T7930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.495848][ T7930] CPU: 0 UID: 0 PID: 7930 Comm: syz.4.997 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 96.506532][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.516604][ T7930] Call Trace: [ 96.519891][ T7930] [ 96.522850][ T7930] dump_stack_lvl+0xf2/0x150 [ 96.527472][ T7930] dump_stack+0x15/0x20 [ 96.531762][ T7930] should_fail_ex+0x223/0x230 [ 96.536463][ T7930] should_fail+0xb/0x10 [ 96.540637][ T7930] should_fail_usercopy+0x1a/0x20 [ 96.545767][ T7930] _copy_to_user+0x1e/0xa0 [ 96.550195][ T7930] simple_read_from_buffer+0xa0/0x110 [ 96.555700][ T7930] proc_fail_nth_read+0xf9/0x140 [ 96.560786][ T7930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.566344][ T7930] vfs_read+0x195/0x720 [ 96.570569][ T7930] ? __rcu_read_unlock+0x4e/0x70 [ 96.575526][ T7930] ? __fget_files+0x1d4/0x210 [ 96.580232][ T7930] ksys_read+0xeb/0x1b0 [ 96.584411][ T7930] __x64_sys_read+0x42/0x50 [ 96.589004][ T7930] x64_sys_call+0x27d3/0x2d60 [ 96.593696][ T7930] do_syscall_64+0xc9/0x1c0 [ 96.598277][ T7930] ? clear_bhb_loop+0x55/0xb0 [ 96.602977][ T7930] ? clear_bhb_loop+0x55/0xb0 [ 96.607734][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.613648][ T7930] RIP: 0033:0x7fc419b3ca3c [ 96.618135][ T7930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 96.637803][ T7930] RSP: 002b:00007fc418790030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.646319][ T7930] RAX: ffffffffffffffda RBX: 00007fc419cf6058 RCX: 00007fc419b3ca3c [ 96.654298][ T7930] RDX: 000000000000000f RSI: 00007fc4187900a0 RDI: 0000000000000007 [ 96.663234][ T7930] RBP: 00007fc418790090 R08: 0000000000000000 R09: 0000000000000000 [ 96.671235][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.679224][ T7930] R13: 0000000000000000 R14: 00007fc419cf6058 R15: 00007fff5adfe698 [ 96.687282][ T7930] [ 96.756472][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 96.864992][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'. [ 96.890683][ T7952] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.935415][ T7947] syz.4.1007[7947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.935490][ T7947] syz.4.1007[7947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.949314][ T7954] FAULT_INJECTION: forcing a failure. [ 96.949314][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.951387][ T7956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=7956 comm=syz.0.1011 [ 96.960740][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.2.1010 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 96.974727][ T7947] syz.4.1007[7947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.986159][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.018299][ T7954] Call Trace: [ 97.021583][ T7954] [ 97.024539][ T7954] dump_stack_lvl+0xf2/0x150 [ 97.029215][ T7954] dump_stack+0x15/0x20 [ 97.033408][ T7954] should_fail_ex+0x223/0x230 [ 97.038105][ T7954] should_fail+0xb/0x10 [ 97.042323][ T7954] should_fail_usercopy+0x1a/0x20 [ 97.047414][ T7954] _copy_from_user+0x1e/0xd0 [ 97.052067][ T7954] copy_msghdr_from_user+0x54/0x2a0 [ 97.057284][ T7954] __sys_sendmsg+0x171/0x270 [ 97.061967][ T7954] __x64_sys_sendmsg+0x46/0x50 [ 97.066794][ T7954] x64_sys_call+0x2689/0x2d60 [ 97.071485][ T7954] do_syscall_64+0xc9/0x1c0 [ 97.076053][ T7954] ? clear_bhb_loop+0x55/0xb0 [ 97.080803][ T7954] ? clear_bhb_loop+0x55/0xb0 [ 97.085581][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.091616][ T7954] RIP: 0033:0x7fc2fa28dff9 [ 97.096042][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.115850][ T7954] RSP: 002b:00007fc2f8f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.124382][ T7954] RAX: ffffffffffffffda RBX: 00007fc2fa445f80 RCX: 00007fc2fa28dff9 [ 97.132373][ T7954] RDX: 0000000000000084 RSI: 0000000020000400 RDI: 0000000000000005 [ 97.140456][ T7954] RBP: 00007fc2f8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 97.148444][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.156479][ T7954] R13: 0000000000000000 R14: 00007fc2fa445f80 R15: 00007fffbcae9b08 [ 97.164467][ T7954] [ 97.344886][ T7969] syz.2.1016[7969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.345119][ T7969] syz.2.1016[7969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.360810][ T7967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1015'. [ 97.365845][ T7969] syz.2.1016[7969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.450319][ T7971] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.604041][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 97.882271][ T7976] syz.3.1018[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.885730][ T7976] syz.3.1018[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.959269][ T7981] loop4: detected capacity change from 0 to 1024 [ 98.002789][ T7976] syz.3.1018[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.027770][ T7981] EXT4-fs: Ignoring removed oldalloc option [ 98.134777][ T7981] EXT4-fs mount: 2 callbacks suppressed [ 98.134791][ T7981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.340545][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'. [ 98.485203][ T985] IPVS: starting estimator thread 0... [ 98.505131][ T7477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.534255][ T8001] loop4: detected capacity change from 0 to 512 [ 98.547700][ T8001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.550737][ T8003] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 98.571347][ T7999] IPVS: using max 1824 ests per chain, 91200 per kthread [ 98.595002][ T8001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.609305][ T8001] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.669348][ T8013] FAULT_INJECTION: forcing a failure. [ 98.669348][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.682575][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.0.1027 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 98.693123][ T8014] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.693251][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.709747][ T8013] Call Trace: [ 98.713081][ T8013] [ 98.716066][ T8013] dump_stack_lvl+0xf2/0x150 [ 98.720739][ T8013] dump_stack+0x15/0x20 [ 98.724977][ T8013] should_fail_ex+0x223/0x230 [ 98.729756][ T8013] should_fail+0xb/0x10 [ 98.733997][ T8013] should_fail_usercopy+0x1a/0x20 [ 98.739083][ T8013] _copy_from_user+0x1e/0xd0 [ 98.743767][ T8013] copy_msghdr_from_user+0x54/0x2a0 [ 98.749067][ T8013] __sys_sendmsg+0x171/0x270 [ 98.753732][ T8013] __x64_sys_sendmsg+0x46/0x50 [ 98.758554][ T8013] x64_sys_call+0x2689/0x2d60 [ 98.763258][ T8013] do_syscall_64+0xc9/0x1c0 [ 98.763972][ T8019] FAULT_INJECTION: forcing a failure. [ 98.763972][ T8019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.767777][ T8013] ? clear_bhb_loop+0x55/0xb0 [ 98.785532][ T8013] ? clear_bhb_loop+0x55/0xb0 [ 98.790241][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.796355][ T8013] RIP: 0033:0x7f4a8c25dff9 [ 98.800863][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.820489][ T8013] RSP: 002b:00007f4a8aed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.829073][ T8013] RAX: ffffffffffffffda RBX: 00007f4a8c415f80 RCX: 00007f4a8c25dff9 [ 98.837050][ T8013] RDX: 00000000000000ee RSI: 00000000200001c0 RDI: 0000000000000004 [ 98.845025][ T8013] RBP: 00007f4a8aed7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.853077][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.861052][ T8013] R13: 0000000000000000 R14: 00007f4a8c415f80 R15: 00007ffca556de68 [ 98.869035][ T8013] [ 98.872091][ T8019] CPU: 0 UID: 0 PID: 8019 Comm: syz.3.1030 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 98.882878][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.892955][ T8019] Call Trace: [ 98.896239][ T8019] [ 98.899261][ T8019] dump_stack_lvl+0xf2/0x150 [ 98.903879][ T8019] dump_stack+0x15/0x20 [ 98.908076][ T8019] should_fail_ex+0x223/0x230 [ 98.912820][ T8019] should_fail+0xb/0x10 [ 98.916992][ T8019] should_fail_usercopy+0x1a/0x20 [ 98.922072][ T8019] _copy_from_iter+0xd3/0xd20 [ 98.926815][ T8019] ? avc_has_perm+0xd4/0x160 [ 98.931580][ T8019] ping_v4_sendmsg+0x14d/0xc50 [ 98.936356][ T8019] ? __rcu_read_unlock+0x4e/0x70 [ 98.941396][ T8019] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 98.946770][ T8019] inet_sendmsg+0xc5/0xd0 [ 98.951130][ T8019] __sock_sendmsg+0x102/0x180 [ 98.955846][ T8019] ____sys_sendmsg+0x312/0x410 [ 98.960738][ T8019] __sys_sendmsg+0x1d9/0x270 [ 98.965469][ T8019] __x64_sys_sendmsg+0x46/0x50 [ 98.970321][ T8019] x64_sys_call+0x2689/0x2d60 [ 98.975026][ T8019] do_syscall_64+0xc9/0x1c0 [ 98.979564][ T8019] ? clear_bhb_loop+0x55/0xb0 [ 98.984263][ T8019] ? clear_bhb_loop+0x55/0xb0 [ 98.989000][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.994915][ T8019] RIP: 0033:0x7f9721d3dff9 [ 98.999336][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.019038][ T8019] RSP: 002b:00007f97209b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.027463][ T8019] RAX: ffffffffffffffda RBX: 00007f9721ef5f80 RCX: 00007f9721d3dff9 [ 99.035506][ T8019] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 99.043660][ T8019] RBP: 00007f97209b7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.051638][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.059623][ T8019] R13: 0000000000000000 R14: 00007f9721ef5f80 R15: 00007ffd84c3fd18 [ 99.067655][ T8019] [ 99.077462][ T7477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.113919][ T8023] loop3: detected capacity change from 0 to 512 [ 99.121528][ T8025] loop0: detected capacity change from 0 to 128 [ 99.137116][ T8026] ================================================================== [ 99.145240][ T8026] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 99.153583][ T8026] [ 99.155919][ T8026] write to 0xffffea000481c2d8 of 8 bytes by task 8025 on cpu 0: [ 99.163548][ T8026] delete_from_page_cache_batch+0x308/0x700 [ 99.169447][ T8026] truncate_inode_pages_range+0x1c5/0x6b0 [ 99.175181][ T8026] truncate_inode_pages+0x24/0x30 [ 99.180205][ T8026] set_blocksize+0x258/0x270 [ 99.184798][ T8026] sb_min_blocksize+0x63/0xe0 [ 99.189479][ T8026] fat_fill_super+0x33a/0x1bf0 [ 99.194251][ T8026] vfat_fill_super+0x24/0x30 [ 99.198856][ T8026] get_tree_bdev+0x256/0x2e0 [ 99.203455][ T8026] vfat_get_tree+0x1c/0x30 [ 99.207874][ T8026] vfs_get_tree+0x56/0x1e0 [ 99.212309][ T8026] do_new_mount+0x227/0x690 [ 99.216830][ T8026] path_mount+0x49b/0xb30 [ 99.221168][ T8026] __se_sys_mount+0x27c/0x2d0 [ 99.225853][ T8026] __x64_sys_mount+0x67/0x80 [ 99.230447][ T8026] x64_sys_call+0x203e/0x2d60 [ 99.235129][ T8026] do_syscall_64+0xc9/0x1c0 [ 99.239717][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.245626][ T8026] [ 99.247942][ T8026] read to 0xffffea000481c2d8 of 8 bytes by task 8026 on cpu 1: [ 99.255477][ T8026] folio_mapping+0xa0/0x120 [ 99.259981][ T8026] lru_add+0x89/0x440 [ 99.263967][ T8026] folio_batch_move_lru+0x15f/0x230 [ 99.269174][ T8026] folio_add_lru+0x145/0x1f0 [ 99.273773][ T8026] folio_add_lru_vma+0x48/0x60 [ 99.278552][ T8026] do_wp_page+0x17a5/0x2340 [ 99.283055][ T8026] handle_mm_fault+0xc47/0x2a80 [ 99.287908][ T8026] exc_page_fault+0x3b9/0x650 [ 99.292590][ T8026] asm_exc_page_fault+0x26/0x30 [ 99.297454][ T8026] [ 99.299776][ T8026] value changed: 0xffff8881004c0b58 -> 0x0000000000000000 [ 99.306875][ T8026] [ 99.309191][ T8026] Reported by Kernel Concurrency Sanitizer on: [ 99.315329][ T8026] CPU: 1 UID: 0 PID: 8026 Comm: syz.1.1033 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 99.326008][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.336063][ T8026] ================================================================== [ 99.358543][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 99.372211][ T8023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.390833][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 99.411048][ T8023] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.496598][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.