last executing test programs: 4.141532231s ago: executing program 2 (id=1582): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x0) 4.122705713s ago: executing program 2 (id=1583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [0x0, 0xd802], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 3.02260556s ago: executing program 2 (id=1591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x4) 2.744586762s ago: executing program 2 (id=1599): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001f0001000000000000000000000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000c001500"], 0x4c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r11 = gettid() arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) kcmp$KCMP_EPOLL_TFD(r0, r11, 0x7, 0xffffffffffffffff, 0x0) 2.384132524s ago: executing program 0 (id=1610): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020282500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r5, &(0x7f00000001c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000", @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008ec9d9675159620c0d4cb288dc58b19548da153ba01bb3de05f0fd010eea652894f09c78ef2365", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r7, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaa2aaaaa81000000000d13af83f15adb35ef57b519f9c9a5a3a1c53ac8dcaa4559c53a9351ab07d33c58b844f306dd61e53cf4a3f358968cc44f455ec4b9d42e4900000000ba67d61b8c7167b978fdde608c"], 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) write$tun(r5, &(0x7f0000000580)={@val={0x0, 0xdada}, @val={0x2, 0x3, 0x0, 0x9, 0x5, 0x40}, @x25={0x2, 0x2, 0xf3, "74189124ae84b2633e2a4a71adb3930c49c0df8214bd7beca84b80b17015d5c85914a206718cfd01555734c3feac9a35f98c14dad370b9bc5535f8cf51edcdbfaf4de1899245c2461e5f111dcccbdd5e09a1bd976377d2f65d25c2cf243af542f7307e9b5fdea8e4332213d044df449a2517ea9c9ba8b38c5dee2fd94a21f4a353e367a4128fc6e1d4b840f1c423bf7967b13022392971eee7064040fe4b00cee88159b5c5f9082f7a1e37d166765baff68014c2a1d807fe45f235413745460e42"}}, 0xd2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x22) socket$nl_generic(0x10, 0x3, 0x10) 2.321547131s ago: executing program 1 (id=1613): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) r4 = socket(0x15, 0xa, 0x5) r5 = socket$packet(0x11, 0x0, 0x300) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x14113e, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000001c0)={0x101, 0xfffffffffffffff6, 0x9}) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x810, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r4, @ANYRESHEX, @ANYBLOB=',check=strict,nojoliet,block=0x0000000000000c00,map=off,check=relaxed,dmode=0x00000000000000ff,\x00'], 0x1, 0x222, &(0x7f0000000300)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x810, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r4, @ANYRESHEX, @ANYBLOB=',check=strict,nojoliet,block=0x0000000000000c00,map=off,check=relaxed,dmode=0x00000000000000ff,\x00'], 0x1, 0x222, &(0x7f0000000300)="$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") open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) (async) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) sendfile(r7, r7, 0x0, 0x8000000a) (async) sendfile(r7, r7, 0x0, 0x8000000a) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000680), 0x0) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feefffff"], 0xc8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0xd8}}, 0x0) r10 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x400, 0x10100, 0x0, 0x134}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) r15 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r15, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x31, &(0x7f0000000740)=ANY=[@ANYRESDEC=r10, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRESOCT=r10, @ANYRES8=r9], 0x0) (async) syz_emit_ethernet(0x31, &(0x7f0000000740)=ANY=[@ANYRESDEC=r10, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRESOCT=r10, @ANYRES8=r9], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) recvmmsg(r15, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) 1.600815605s ago: executing program 2 (id=1617): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") creat(&(0x7f0000000280)='./bus\x00', 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x410000, 0x0) mmap(&(0x7f000050c000/0x4000)=nil, 0x4000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x49222000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x3}, 0x0, 0x100000000000005, 0x1, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8000800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r7, @ANYBLOB="37834857e4e62f1285bf9be7730834b7af403e380d457b6131f74f0850dfb9ecac44f411af52db3ab1262d39cda337ae78cf5d5e6d4fbb", @ANYRES64=r6, @ANYBLOB="a8e69cb42463d8d1190aae059380efb39c4378d0e49c086ea6cc2ecb5b7fb79566b73657695a9febf54247831ecf1da4f105119ee99987131600c85ea04a557f16936663e2d1b304cb72bbb8d0d936abd52a8701e831e2c4e2291117ac7fcc62c1fa2649c2e2aab70143ec396b4f28f66234b1a87f51a7c02fa4de7726d902675eb79ce457525aa8dba60a662fa94656491e9da75824c4529f"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) r8 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 1.516894444s ago: executing program 3 (id=1621): unshare(0x68040200) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x1404, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8890}, 0x4000044) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r0}}, './file2/file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xd0}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.507611985s ago: executing program 0 (id=1622): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000107000000000000760ab045b5d1115f01db20521ad40a81c324268a6fd4a0731df9cf808a834995c8af36af007dbc111c3759d3cde445b638666d2142ae6c465b4af79b3315674c8dac00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20048014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff020000000000000000eaff0000000132"], 0x0) 1.480042888s ago: executing program 1 (id=1623): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x200000) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x64, 0x1, 0x2, 0xa, 0x7, 0xcd}, &(0x7f0000000080)=0x20) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getparam(r3, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f00000003c0)=""/243, 0x4b, 0xf3, 0x0, 0x3, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x557}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f00000002c0)='GPL\x00', 0x7fffffff, 0x1b, &(0x7f0000000300)=""/27, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xb, 0x5, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000008c0)=[{0x3, 0x4, 0xb, 0x3}, {0x5, 0x2, 0x9, 0xa}], 0x10, 0xfffffff2, @void, @value}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000009c0)={@private=0xa010100, @private=0xa010101, r6}, 0xc) fdatasync(r0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) connect$pppoe(r9, &(0x7f0000000a40)={0x18, 0x0, {0x2, @multicast, 'pim6reg1\x00'}}, 0x1e) sendmsg$nl_route_sched(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@deltclass={0x60, 0x29, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0x10, 0xfff2}, {0x1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xfa}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @tclass_kind_options=@c_netem={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000001) r10 = syz_open_procfs$namespace(r3, &(0x7f0000000bc0)='ns/net\x00') ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000c00)={r1}) recvfrom$inet_nvme(r11, &(0x7f0000000c40)=""/114, 0x72, 0x0, &(0x7f0000000cc0)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'veth0_vlan\x00'}}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d80)=@generic={&(0x7f0000000d40)='./file0\x00', r8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000000dc0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "db09f4c6eadb4e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000001dc0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001fc0)={r12, r13, "bbe323265aa22700e4a93053aa7d1e676a79a6e3bca68c6565aec01cba840439c18278e9affd81856048744ffd388cd934a704e700e622bc654f0cc4a7b8d2dc9ea30a620fbd77c573305c0f81fd81e43dfca1941ee8195d6311e8a92f548712becddfadb7114bcaa70b28e3949d20806ed0cb4793f1013302ce26347cebcec8645a1a9859dd4a855c6a4ab2ca865f594dc43bf2d18bc0632dac3628750b66767d7b65f3bc1afc0d0e16c13aac101cecda5e7a3f53c9014b6d1cba0b8747e6a134fffb08dc336adeadb6ef6b222ae66a4fa010e13e220c234b3ac84ae02e97b0eb81d523825327d9cee612f9bf29e1b6b5d1d0b65bf18b94b84979239392c07e", "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"}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000002fc0)=0x4, 0x4) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003040)=@o_path={&(0x7f0000003000)='./file0\x00', 0x0, 0x10, r10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000003080)={r2, r14}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000030c0)={0x2, 'veth1_to_batadv\x00', {0xfff}}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000003140)={0x0, 0x0}, &(0x7f0000003180)=0xc) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000003100)=@md0, r15, &(0x7f00000031c0)='./file0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000003200)) 1.426861455s ago: executing program 0 (id=1624): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000efffffff0000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) 1.390591059s ago: executing program 0 (id=1625): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) ftruncate(r0, 0x653f) (async) ftruncate(r0, 0x653f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) r3 = socket(0x1, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x27, &(0x7f0000000000), 0x20000000) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x27, &(0x7f0000000000), 0x20000000) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000000)) sendfile(r5, r6, 0x0, 0xe065) (async) sendfile(r5, r6, 0x0, 0xe065) 1.362323882s ago: executing program 1 (id=1626): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x70bd2c, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffeff}, {}, {0x80}, {}, {0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {0xfffffff4}, {}, {}, {}, {}, {0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 1.041773439s ago: executing program 3 (id=1628): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/14], 0x48) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000700000001000100090000c8eadbf236bbb363f9522fa36704fc77229e58a74bb7b580d723dcbb78c97521a0c2b6e0f3b60338850eaa88ec6a33b57175b904e7d686698f55ee4bfa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xacd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xdc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000dae100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001"], 0x34}}, 0x0) r11 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) r12 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x22, &(0x7f0000000140), 0x4) mount_setattr(r5, &(0x7f00000003c0)='./file0\x00', 0x8800, &(0x7f0000000580)={0x40, 0x100004, 0x20000, {r11}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) 629.497677ms ago: executing program 4 (id=1630): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000000000000b000000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x88a6}, 0x0) 628.096877ms ago: executing program 3 (id=1631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x4) 616.153518ms ago: executing program 0 (id=1632): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffe88) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x7fff, 0x4) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 32) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0xffffffffffffc000) 601.87792ms ago: executing program 4 (id=1633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {0x0, 0xc001}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) 503.096921ms ago: executing program 3 (id=1634): openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x4, 0x2c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x10, 0x7, 0xe80, 0x8}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x1}, @xdp={0x2c, 0x5, r1, 0x3}, @hci={0x1f, 0x0, 0x2}, 0xa, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='ip6erspan0\x00', 0xea, 0x7, 0xfffe}) r2 = socket$tipc(0x1e, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x4abd, 0x5e70, 0x9, &(0x7f00000001c0)={[0x5]}, 0x8) r3 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'netdevsim0\x00', 0x100}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000340)={&(0x7f00000002c0)="ed68db5df30a9eac85c1d00b5fa15ff05b610b3ab62b2f873ffeeb466b202957a5459226e87bc568ae4a0686d96def9d0fb927692aca513a2076fd755eaba91b03744da352538a11d26c7b5febc5db08349ea030d76f4208c3b3e7381db9304a", 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x40044) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x5}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000580)={r7, 0x8}, 0x8) shutdown(r2, 0x1) r8 = signalfd(r6, &(0x7f00000005c0)={[0xb3]}, 0x8) write$cgroup_subtree(r8, &(0x7f0000000600)={[{0x2b, 'io'}, {0x2d, 'net_prio'}, {0x2d, 'io'}, {0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2b, 'pids'}, {0x2d, 'pids'}, {0x2b, 'perf_event'}, {0x2b, 'perf_event'}, {0x2d, 'devices'}]}, 0x4e) sendmsg$NFT_BATCH(r8, &(0x7f0000007100)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000070c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x2344, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2328, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "bf8917af4fe196d02fac97f669b20c30c97ab6fc638d0493e9c0840571661a4039b2ec010ed429c945"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x21e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "d8d8a3591709c1a09ef1de213209f7581a53d249fe4dac156e9aff507c2ca290d2bee0449b72280570405ed9af8962bb77269152c4368c281293f8a8481814c08bacbe35b75594e024bb0004afd207e93099d45b1c3cb3eb0dd2b3be0de0df7a72bdeefbfb5e7527b664de17bcc780eae1921a6d843c1485b3e9f6e82801dc4d9f3a09148f219ff0671bb072ee7ed36707e0b04878056272ff5606c2984694e74147fc7d6300d6adc1ad48ff82fb4982aae5f80653887500a1c32c6c714b33038eed068b344dd1e9f314eae6304e9c5d4e61ae373f034cf53378c7ea9418d5c44bf99189c482ea6a134623ccc2b2e9149c89e9ac9fee5a1d9acffce7fa1ef195750e198e3e5264abb86bd799689eeb27113daff48ee4afe34e396fd5d4e722b442496d2b0c10d024ef872e035d9d89c321c28376b3d00ce11cbb6b6af556380b7e729d49bc6c48bd605b0eb2137039b7d45f3d5617b0d34659099172a1d1f4c857cf8c44a962ed02f4d84380aa949910dc44a968aec622d301ef6825f788f8911e7b8acdd10eba80ea0b981015c8829cad7eebdf256f90bd09ec40384cb1f8cd65fa4974d454209512f46b6081ad0dc961bc3b5fd23f85e29336c7cb1938de6b7bffe3d47d2e85e6c0e07402e0488362d7ce5cd57fd7e683a44c12fba9276dd61cd8785e86209a1c24df10be544725068dc6af8eec52867d54d3cb293e28cd2a4e4f76eabb73172462840845d0351086df004f0b11ba1e4bd9de0beb96b3768e9226a90c1e2fa0f215b6fa56f751ee7591a375fce37aca6fa03ded6559be48f6b71e2ea8f8e6e1aeced1a6c74e813ff079f5544d1fdf44a6a8e5f59a627eb8129077b95560d9507238372bc47b99290e1c29188b9256775c9df429c0ad4c246ccebc8945dbd6cb92145fc818af5a4470b7b0ce4f035d36cd13e3b3e1282a890d496cb3a234b950b5780af1f00a549b28673a5565b0883f2d68c6b37941602880874fb737bd47673c46714d84939a22c0fd956c681091b438d0b7c99d03bc96229ce0e3ecf71fc84d9f55bf00797d8f74b6cc21f064e9939a732aa2a805e82f664e8a44138ec200482a9dd24d2587aa770f4655ca723173b9e88ff17a9104399f73e68b8459e3a3125fc4c43c393210c5ef405ee8106a24d46bdda08f6ecd153a6e232c397ecde4deb5c40aaf1843d2e580a0cbcd9653047b7ecab8a1e53f16b5fe928493a0848afc11807e5e384da6ca4f3f6b47390fbd9faba70dffac9d4e6b578955249b637a66e3cbf7865e360f452e52323c15e7b7e74e80cabd6ee766c3e255fa8abb4c1a97282295c65262e15e6c86c2cb5208ffa9be0a7c92c1fe1cf3f7f47fffc79d8a3406ab475d0ddb7004c431b766fddf1b682baf97450d8b2b413c88633d76cb129e4468c7de66865944a087bf085b87dcd23ae08d0cb2714bf46e0040f544847ea58edf8b235612b290238ae9165314a4937ef168eb8604f22676f21ad2f8f81734995c91d1c31566106ecfbb0b5c3f67485f71bf6e63a6082d9e679fe509ab8749b47b9bf5d794d3a3001eb2188b054b39b181ed48d8e56d2034f68b8740ae7867ff871088d7f6c5f6b54e9e964dbed063db1c6b1412afdb38f1f94c8a77d901d255a6fd05519b13df0fcc85399e66d21aa4d0315044a72dc6635cfa2b22f79686b8f547183eaed8dfb937a21a69fff3c37c1ebcf7450a7571d626db22a5a37a37e1eacef82ceb0c391c108011553ff927292f6cf4a931473fc04d76923cc97230c8f4c7469f52fbe3f10ad7679aad982581f749f009ef94a2b1542af4c2ac3c54dd2bd098604d9ab32fc466f17d84b2e66b4258cd847f9239e0dac1a75eba50eb04cb76fc86a9c5efbbe35b2b64ac31e8ec62f9958e593703f151bbb22a258d069d1f7239ebf21abffabf5703ce9c45fa745624a0de07fb222d453140db8b4d75d684ce13cf825d7d6789c1feb8b46760f6f101a28c109639dc41d3f77af1d12f28a059a5472275cb794fe25cf59cad6daff6356cd266d581033b060406834488dfae804994178cad672f29917f2772155171962d585563d7713dca439ef3fc0444fb7df445ebd4c5b1426d1431624225dfefe97b957a5664c272351c75d0a6ddf320b6cb2ab8777691f3898b7af4b1c0b092b1362e0515de38eb9492b4b544c14817be9b53eb4e012873207cfcc256fb5e59be91967d4092a7afc32e8e08b9b892b29f66a9f583576a9740bf877a237c9a9c108387b1ea01771f20d1f6764b7550b341601ce79ed88bb15a173a06f8c7e72b2b25aa37e789c03bb59c874d42d4da00797bb390981eac175b8555801fcb673f705417c2a8d370825cb9f6d0e900bd87c3c4b7f3210409984d2f36e13930a1e70fbc4c504f13321834eb087ce661e94beb0d00a609d69fb654920a51bcf609ccf6582f0138c0a4f2b66a3ff78e729c61f96e231d4b19250fd318016e57d721b00f8fa32123c5befdcce5ee333497cbdcf43a16a95a663148abd48347eb4bad2571fb72587fdad38c1fac82117b6ab6f8abf0e406e4ce15db05fd92a779c0df040e03a6c85d24270496c52077f938e52d51ea7ca3b65da228c1196d8830e2e7ffa74898f13444a4e02a7d88f9aaeb7062e3b0d58394dc0c4f86bb7e8f9ccd6d9aa44b50b0894f2cb6a61cc4765bd5f2b7c38b7245ea174d262c32213934ae1632cefefa46ca78f96ebeba40a56b2397dd3bf6fddcb164b6cbadc06627b8d563b71d511eeff71356c54a7755c4e8d74f1420faaf670f49d28a1b03884d775bb80eecc914fbc8371bd1f7301e57c7927bd7dfc6da8c7f9f4965f06f1fa65784639e04867fb957285bf9074d09d39e7f787a5557b118ec9c14a05ac1819ca1e48d0149c6a1eb2a5da2374db257c8cfcaf92d6e0512fe06e60afd1e9ed4f526ccdb4d25034548de560be01ea4f18facbdbb5cf854ee7a8d0e669519c827629cd927cfa8e764d30879d0d74436e9146523039ecad2000f67c6372e6ca5723aba5b7e219811b5eb61ccc8a0e13a71c350e4e42b36f7369eb1b2c34c32a3de1a72ba2fb0495a09b3d792c61154bb3bdaf2c661b59977f47e9d340f3a2d4634632106c0a860c2a8e8de2983d79ca437b19d0989a5173938bdc783c5b0dd847e4e8bcf027a39cb3296f0cf848727a351ca22515b32899f5aac1a754f77564cb03d232ed1eb2cf7888360ef21a61fe73f09a7150c2662bb7aa1be60c0a8283e2e430340678737a1a7012c1eb4498b623e68fe8a2f790e496cabc1ca14f6ca570414bed997f0869e074bbfaad8c0685e956267c32ed5bb492191610366def920134966ce6dcbeb9c75123f4b0c337a07fc5cfa68b61b0abf90be3a39c27babc77dd45f134974993c2a80ea3a5357dbefb7eda4705329127c189ab977a8ce9e74e1ea832fe9f32edcbf93c3d8b65912531ad85357e8819bc6febf117aba872ac2446bbddac508fe316829c242153ab8b63fdf4f9168a35836453cc4ea7809921b34d47f0aa42df067e9c10cf4396bcca1fbda237e87c506ac111cae3ef6b1ba48dd857938842a3084e5242413e30e3196f11b61bb0b0de12ad33ae816bacf67860ff8de0bcc2a7881ab71b414250a207e02171a52548882e708b74bfea9d04d14b0b6c3b6981b42234535e3dd9c0b26e9afcba739b176b7612a86ea0910c9308705ede7cb61325b3a0378b9bcfc6d2b02f3b2c8df49c3239db561af54eb67f4fca49d408769ffe2ababbb1bdc710f2e038f4d9f5941b77aab3a3066f43771f5afe4deb97fbd792d57c4f6f1c557c67390038ea83f8ce1471d574ca22a6ecf2139b5b7b17a279169ff990639e151ffbd14d7aa8fc07890dbff40d0effa7182df2af0fa3acdb300b40e21a7098d8a5a4404de84b96335da2527059b74cf416c0fabbc6d95532fd0200f5fe8ae744f4a6cf523cf4bdaee1da224028259344d115466fa132121646ccf8a12b2646bee57749f37ac0268b0e363b03e72f57ac4028f9ecc8de71ccd8e54b47ef986cf86d0739edfd2071ee822bb9ccf60aa3254f257d726d3fa7925dd6e40e48a760caf30b06f90ac02f4f2c4eed6dbc1d8796525ac5a46f6f230668065ca9ee180649e77ca3364a227700078494f576d852fd33b6732174e27364ac75681f7f9db3fb59fcf8a124ca1e85479c24ee926fa58a450e686d96a5c160b787ebc2f9698ae5de8d71d95af1f67953150f9bdd33ffb5dfdc63be936bdd83411cc057f2b0b42514c719618946b8df7c57dcda9db1eb15b29cf25ee62b4a25663b7e4bac9742a2953bf2a830fc57dd4ca961ecf716269fb7a0db061e0a911e3ec4f0a4dc4c56f6e06c7944549a48ac4bda315c6d79cdd758173a873b6b6a696a14a4d724b662ee691a38b79f00c6ee2d33a65d02c377c8140185023580b8c4919a6a0c1f4738e40858948f3888e05860707427acca131dc16b6bf686fb8ce1e6a45994890d6fd8485a4ae72604847b8e8676e81e9e02934eb8c7ae92759c08c439b8e843a4a213bfa2416febf88d8ad01288008e103ec08e527d478f917031ab0b4c6c6a2e3f7c6d053da39a249a5d92e15341edeeb841652e57cbad637896777ddfcb5d9b0b10a8b0156898890ff90afbd0736e51f43b346fc5574d2142906241d41c49ba17678cfb9d2b397a240849e800e315cf3e2fa4b8d75e13589ec0f3ec930250853b468b88ee45af1a021a1beeb90db3dbe36f14e30b78e7f17578a79cbc4bcd0642737b985522c2d1aeb81bbc850e8e71aa89af53d5ff90e443c3e02e39a4e7fa087c7ed363b1f6f33faaaeb3ea8231a29c19f94eb845b15a9f37255911af4df38908850b5ee6c6ad869b2821b830c3d0b9bff1424713c597d16d50c9de56708b966f9a8896b4df14642e247e06bef2f6c9e1492d14beaf838adb61b410d0b7feeb21cb955b8817aed0ac7098790889e1c481d722b99d02cd2b0263ef9b4169e4289fbe085491ee2473801b0c634693b0983ed71be19a5b0bedac6e631b4011124d4e283d10ea216ba69a3c9720668bff346c65e56933d10adadb9035bb0a5c90b50cbd2682325019d1f1e5f3787046503b0b22ff4771b18cad4326ec46abbe680108362e5484cfa0d0e1d084775a0db82c05106df74b5e0d0714f389f83195d1144fb5a20c16fbf8c1906d521b30bb0e89b01d59e981bc98016e6f9f68c6de98997c7662830cd009f6eb0156b58f190bcad11fcf829a522106e0afdd08ece736bf12ca3a09d6149c75fe90f726e119f853ba712f8acc3597d8f5b89e8a15f62bdad249edbc4d378febeb5bd5dbcdaadb0cac9d379bd2839490c740ca3cf215e9ca1cec2209dfa19738b998eac7a9ef6c77774875b6e7178a2d37c9c3f4b6fb35c447e1288bdd82d896bdbef673a9604fe2dba0a584908b919d51a578f39a94bb6b9161a388f3587b586dccf37798e904d22a2b04e23f95c8a0497fb5bed60b4160e3cb3867d00ab175b84ef75fa50da2934567fb85a1b612413323a4a0b104251fa8f0ad9930b57215510d047d1e00c3f0c8f88cf01f6f8ab9b57d00546bb5e6550548fbaf889bbea22d5d289d1c92c1f7ae6f81eb7b0e5582ae77bda282856b8f367964e2557bf0e9229d34db975e91b06e76a0399aca6850662cda9c0edb2264d28dd4d181bf653277a9a320cbb89245d41102237d97d6c701446d7529b123d391b7ec1e52700a2fb8f9090af0c2cf99cb5f2335df6772f499836741483585dc11ffef3a95fb7ba851a5c072e7bdb5271d64f5d72b510db3f861dfc73b984b61b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "b45e30c5286938037ffbcc2b2ebe85de41b5a4770c74af0cb7278e5b70d5cbc7dda440b2ca04881859e59e16a3b805db586b81ec9beb5d0adff8abf4039318cafb8f5709abbf0f17804807d51154901d90993d45b7493ca2ddcb416bb2bdf375322ef17b03aa1609fa470b040627315ecac9576716872e1760072b725838bf8cdb8480b571d54d2822c775"}]}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "089304d318aab602dd47160e03fd679039887710b11431ebb3cf90fce4dad620694f80ee60cceb130d0338ed82710876746761964ddfaf222f93d06a72502245df488fd15e966ae6a8141127f3aa9f7985aeb61508b8a458b72961cda9ef3a7b0aa169160f71971489aae51e6ddee9fd81be9f339175d39e593ee1aa90e50f7de90dffba2d1ca5508d98afc5577cb8bec2cd4ccb06c6078128af140d06938d1fe17d922296255ccdd6d125b07c3a02bd54a4a614"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6, 0x1, "9042"}]}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x34b0, 0xe, 0xa, 0xc22b71b96bd3df87, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3494, 0x3, 0x0, 0x1, [{0x3490, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe5, 0x1, "bee665a7b6f7311c20bed98fa6d07f12a64d19812bf5eee26443fc213db2b5e0b7b9bb86014a7e2ff3754804324d42ac0c8f8b41a7de852cdbfc4cfa91bbb42bda176a2f41fdbb5ed0766e87a9735170f09582b00d632ceb4d72634b910bdb458bd3be70e31f23a074d2e1332425b1472774ba0f8d9f26cd2b7cf86615783849a9e645287a4987d9d67044f4851fcb520d8727c681c0b6b3cc26ec304c3068cac342b71e02c96287dbb753d0f4a48e8bd71ad8f15861f3ac5497625927aabc930f8b3e4af814367bc98a5972bdcf86389a9e4d09cc6edff5c863940abcafd564a0"}]}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x1170, 0xb, 0x0, 0x1, [{0x10bc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10ac, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x3e, 0x3, "900059ab48a62c81c7267d98a7007b8d486305d1487446f070de3fe18ca51aa08fa78f05b210e311a0c6421be9446408551506724d0083d2a90a"}, @NFTA_TARGET_NAME={0xc, 0x1, 'SECMARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x21, 0x3, "105f4eb2ea6f56c9c854565b9ab02a1261e2c199a98a19de5bb0363751"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}]}}}, {0x5c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x77}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xc5}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x30000000}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x100}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_DATA={0x11b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "2c486d206171ec91ad69ee607886dc209024ff00b28239e1526daf34534731f7dd5aa89b1df2a1479c59245286dda897750734f7ff32c65bcedca747ea144f80e52000e04626"}, @NFTA_DATA_VALUE={0x5f, 0x1, "c157ae39252df8265c6704158a1e742037f1344564fd00145ff42b2bb4b029344a6ce227ce977cd7a2cec7f2622aafe3c7552217b0556033ff8efbe37b7a34ba2fbf9a2a0d79999a51a51e8a969a150de6457e047379d02701773e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x68, 0x1, "9956f0bf98cf80181d1025efb79cfbea32157b0696932739db7480c2d49254f36a1056c723ae3fe4c9567a66022d4b7e7b127cac42b8325f297b0676e7f8e6108d82397f6d71b0c2b52a8b9652687f793c322d58118027dfad1b4ea8d76b1793767bc258"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5844}, 0x1, 0x0, 0x0, 0x24040000}, 0x80) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000007140)=0x8, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007180)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000007280)=0xe8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000072c0)='io') sendmsg$can_bcm(r8, &(0x7f0000007400)={&(0x7f0000007300)={0x1d, r9}, 0x10, &(0x7f00000073c0)={&(0x7f0000007340)={0x0, 0x840, 0x78a0, {0x77359400}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1}, 0x1e, 0x3, 0x0, 0x0, "662131bbeca48c5def73647ce1bb80a6e69244667aa7e3624891ab690cb2910deaf1a8eca51e9a1c27e77a07de0bd071c4b4ac1f3a2395d209b44f48d754c92c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8081}, 0x4805) r10 = add_key$keyring(&(0x7f0000007500), &(0x7f0000007540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000007440)='logon\x00', &(0x7f0000007480)={'syz', 0x0}, &(0x7f00000074c0)='notrack\x00', r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000075c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000007680)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007640)={&(0x7f0000007600)={0x24, r12, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) io_pgetevents(0x0, 0x4, 0x1, &(0x7f0000007700)=[{}], &(0x7f0000007740)={0x0, 0x989680}, &(0x7f00000077c0)={&(0x7f0000007780)={[0xfffffffffffffffa]}, 0x8}) 502.733461ms ago: executing program 0 (id=1635): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) 451.726507ms ago: executing program 4 (id=1636): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x40000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 419.793901ms ago: executing program 1 (id=1637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000001600000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) 293.791476ms ago: executing program 2 (id=1638): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4000000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 293.268296ms ago: executing program 4 (id=1639): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x0) 293.032595ms ago: executing program 1 (id=1640): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000ffe0000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001"], 0x64}}, 0x0) 292.528196ms ago: executing program 3 (id=1641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850008000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r6}, 0x69) 291.203376ms ago: executing program 4 (id=1642): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") (async) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x400000, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) (async, rerun: 32) fallocate(r0, 0x0, 0x0, 0x1000f4) (rerun: 32) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r7, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)="96", 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0}]) 212.910715ms ago: executing program 4 (id=1643): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 21.313947ms ago: executing program 1 (id=1644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001b0000c10000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0x10}, {0xb, 0x4}, {0x0, 0xffff}}, [""]}, 0x24}}, 0x840) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', r4, 0x0, 0x10, 0x8, 0x3, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x54, 0x50, 0x1, 0xc, [{@local, 0x7}, {@private=0xa010101, 0x9}, {@loopback, 0x12c}, {@remote, 0x9}, {@broadcast, 0x2}, {@remote, 0x9}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0x5}, {@remote, 0x30f6}, {@private=0xa010101, 0x1000}]}, @end, @end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000640)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, 0x0, 0x9, 0x3, 0x500, 0x4, 0x2000000, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008041) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) time(0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) connect$l2tp(r10, &(0x7f0000000700)={0x2, 0x0, @remote, 0x1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r7}, 0x38) 0s ago: executing program 3 (id=1645): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="14000000100001000000ffffffef00000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000009"], 0x108}}, 0x0) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb56edff9 code=0x7ffc0000 [ 102.448174][ T29] audit: type=1326 audit(1729758085.353:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb56edff9 code=0x7ffc0000 [ 102.471735][ T29] audit: type=1326 audit(1729758085.353:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f1cb56edff9 code=0x7ffc0000 [ 102.520699][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.536812][ T6906] loop1: detected capacity change from 0 to 1024 [ 102.545704][ T6906] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.549707][ T5839] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:47: Failed to release dquot type 1 [ 102.557075][ T6906] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 102.575927][ T6906] EXT4-fs (loop1): too many log groups per flexible block group [ 102.583615][ T6906] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 102.592372][ T6906] EXT4-fs (loop1): mount failed [ 102.656857][ T6922] loop1: detected capacity change from 0 to 512 [ 102.667229][ T6922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.672877][ T6926] x_tables: unsorted underflow at hook 2 [ 102.682949][ T6922] EXT4-fs (loop1): 1 truncate cleaned up [ 102.689283][ T6922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.758755][ T6922] lo speed is unknown, defaulting to 1000 [ 102.830259][ T6922] netlink: 'syz.1.1161': attribute type 4 has an invalid length. [ 102.839154][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 102.855539][ T6730] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.890095][ T6950] FAULT_INJECTION: forcing a failure. [ 102.890095][ T6950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.903339][ T6950] CPU: 1 UID: 0 PID: 6950 Comm: syz.2.1175 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 102.914021][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.924072][ T6950] Call Trace: [ 102.927405][ T6950] [ 102.930482][ T6950] dump_stack_lvl+0xf2/0x150 [ 102.935104][ T6950] dump_stack+0x15/0x20 [ 102.939340][ T6950] should_fail_ex+0x223/0x230 [ 102.944045][ T6950] should_fail+0xb/0x10 [ 102.948279][ T6950] should_fail_usercopy+0x1a/0x20 [ 102.953356][ T6950] copy_page_from_iter_atomic+0x22e/0xfa0 [ 102.959100][ T6950] ? shmem_write_begin+0xa2/0x180 [ 102.964207][ T6950] ? shmem_write_begin+0xda/0x180 [ 102.969277][ T6950] generic_perform_write+0x2f1/0x4a0 [ 102.974630][ T6950] shmem_file_write_iter+0xc2/0xe0 [ 102.979791][ T6950] vfs_write+0x76a/0x910 [ 102.984037][ T6950] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.989925][ T6950] ksys_write+0xeb/0x1b0 [ 102.994258][ T6950] __x64_sys_write+0x42/0x50 [ 102.998910][ T6950] x64_sys_call+0x27dd/0x2d60 [ 103.003594][ T6950] do_syscall_64+0xc9/0x1c0 [ 103.008195][ T6950] ? clear_bhb_loop+0x55/0xb0 [ 103.012905][ T6950] ? clear_bhb_loop+0x55/0xb0 [ 103.017604][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.023547][ T6950] RIP: 0033:0x7f1cb56ecadf [ 103.028032][ T6950] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 103.047638][ T6950] RSP: 002b:00007f1cb4366df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.056066][ T6950] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f1cb56ecadf [ 103.064030][ T6950] RDX: 0000000000040000 RSI: 00007f1cabf47000 RDI: 0000000000000008 [ 103.072051][ T6950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000455 [ 103.080053][ T6950] R10: 00000000200010c2 R11: 0000000000000293 R12: 0000000000000008 [ 103.088021][ T6950] R13: 00007f1cb4366ef0 R14: 00007f1cb4366eb0 R15: 00007f1cabf47000 [ 103.096000][ T6950] [ 103.104597][ T6950] loop2: detected capacity change from 0 to 512 [ 103.202534][ T6972] x_tables: duplicate underflow at hook 3 [ 103.215819][ T6970] wireguard0: entered promiscuous mode [ 103.221427][ T6970] wireguard0: entered allmulticast mode [ 103.231603][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'. [ 103.240756][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 103.290370][ T6987] bridge_slave_0: entered promiscuous mode [ 103.296244][ T6987] bridge_slave_0: entered allmulticast mode [ 103.307178][ T6987] loop2: detected capacity change from 0 to 512 [ 103.324448][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 103.326582][ T6992] loop1: detected capacity change from 0 to 512 [ 103.333505][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 103.347587][ T6987] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 103.356898][ T6987] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 103.365919][ T6987] EXT4-fs (loop2): 1 truncate cleaned up [ 103.369848][ T6992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.372188][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.387721][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 103.400206][ T6992] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.416016][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 103.420044][ T6992] netlink: 'syz.1.1191': attribute type 4 has an invalid length. [ 103.428031][ T6987] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 103.457347][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.459001][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 103.475493][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 103.516131][ T7002] loop3: detected capacity change from 0 to 256 [ 103.523779][ T7002] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.538646][ T7002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1193'. [ 103.549031][ T7001] loop2: detected capacity change from 0 to 8192 [ 103.621687][ T7008] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 103.630239][ T7008] FAT-fs (loop2): Filesystem has been set read-only [ 103.705430][ T7023] FAULT_INJECTION: forcing a failure. [ 103.705430][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 103.718233][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: +}[@ Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 103.728437][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.738593][ T7023] Call Trace: [ 103.741969][ T7023] [ 103.744952][ T7023] dump_stack_lvl+0xf2/0x150 [ 103.746564][ T7027] lo speed is unknown, defaulting to 1000 [ 103.749546][ T7023] dump_stack+0x15/0x20 [ 103.749572][ T7023] should_fail_ex+0x223/0x230 [ 103.764117][ T7023] ? __alloc_skb+0x10b/0x310 [ 103.768734][ T7023] should_failslab+0x8f/0xb0 [ 103.773385][ T7023] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 103.779227][ T7023] __alloc_skb+0x10b/0x310 [ 103.783682][ T7023] tipc_msg_build+0xc6/0x820 [ 103.788340][ T7023] ? bpf_get_current_ancestor_cgroup_id+0xce/0xe0 [ 103.794789][ T7023] ? __rcu_read_unlock+0x4e/0x70 [ 103.799840][ T7023] tipc_send_group_bcast+0x5b9/0x6c0 [ 103.805168][ T7023] ? __pfx_woken_wake_function+0x10/0x10 [ 103.810814][ T7023] __tipc_sendmsg+0x1a9/0x1c40 [ 103.815635][ T7023] ? _raw_spin_unlock_bh+0x36/0x40 [ 103.820761][ T7023] ? lock_sock_nested+0x10f/0x140 [ 103.825870][ T7023] ? __pfx_tipc_sendmsg+0x10/0x10 [ 103.830907][ T7023] tipc_sendmsg+0x3e/0x60 [ 103.835264][ T7023] __sock_sendmsg+0x140/0x180 [ 103.839981][ T7023] ____sys_sendmsg+0x312/0x410 [ 103.844778][ T7023] __sys_sendmsg+0x1d9/0x270 [ 103.849576][ T7023] __x64_sys_sendmsg+0x46/0x50 [ 103.854432][ T7023] x64_sys_call+0x2689/0x2d60 [ 103.859123][ T7023] do_syscall_64+0xc9/0x1c0 [ 103.863632][ T7023] ? clear_bhb_loop+0x55/0xb0 [ 103.868405][ T7023] ? clear_bhb_loop+0x55/0xb0 [ 103.873112][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.875494][ T7030] loop3: detected capacity change from 0 to 512 [ 103.879099][ T7023] RIP: 0033:0x7f85c3bcdff9 [ 103.879118][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.909450][ T7023] RSP: 002b:00007f85c2841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.917878][ T7023] RAX: ffffffffffffffda RBX: 00007f85c3d85f80 RCX: 00007f85c3bcdff9 [ 103.925852][ T7023] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 103.933912][ T7023] RBP: 00007f85c2841090 R08: 0000000000000000 R09: 0000000000000000 [ 103.941901][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.949873][ T7023] R13: 0000000000000000 R14: 00007f85c3d85f80 R15: 00007fff0ebff588 [ 103.957906][ T7023] [ 104.007280][ T7030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1202: bg 0: block 248: padding at end of block bitmap is not set [ 104.027808][ T7030] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1202: Failed to acquire dquot type 1 [ 104.055072][ T7030] EXT4-fs (loop3): 1 truncate cleaned up [ 104.061288][ T7030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.074214][ T7030] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.166211][ T7049] loop4: detected capacity change from 0 to 512 [ 104.200251][ T7036] lo speed is unknown, defaulting to 1000 [ 104.264791][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 104.325418][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.332560][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.339809][ T7036] bridge_slave_0: entered allmulticast mode [ 104.346241][ T7036] bridge_slave_0: entered promiscuous mode [ 104.353389][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.360536][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.367781][ T7036] bridge_slave_1: entered allmulticast mode [ 104.374358][ T7036] bridge_slave_1: entered promiscuous mode [ 104.404056][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.415242][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.424692][ T7057] pim6reg1: entered promiscuous mode [ 104.430117][ T7057] pim6reg1: entered allmulticast mode [ 104.460946][ T7036] team0: Port device team_slave_0 added [ 104.468165][ T7036] team0: Port device team_slave_1 added [ 104.486985][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'. [ 104.513024][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.520028][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.545969][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.557973][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.565085][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.591258][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.673636][ T7036] hsr_slave_0: entered promiscuous mode [ 104.678096][ T7075] loop4: detected capacity change from 0 to 512 [ 104.680380][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.695194][ T7075] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.697365][ T7036] hsr_slave_1: entered promiscuous mode [ 104.704768][ T5839] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:47: Failed to release dquot type 1 [ 104.721811][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.729760][ T7036] Cannot create hsr debugfs directory [ 104.746144][ T7075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.777240][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.819928][ T7089] devpts: called with bogus options [ 104.825468][ T9] IPVS: starting estimator thread 0... [ 104.827405][ T7088] devpts: called with bogus options [ 104.846995][ T7097] sch_tbf: burst 0 is lower than device lo mtu (1075109906) ! [ 104.890475][ T7103] loop2: detected capacity change from 0 to 1024 [ 104.898030][ T7103] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.908563][ T7103] JBD2: no valid journal superblock found [ 104.914326][ T7103] EXT4-fs (loop2): Could not load journal inode [ 104.920621][ T7095] IPVS: using max 2256 ests per chain, 112800 per kthread [ 104.931511][ T7036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.945420][ T7109] 9pnet_fd: Insufficient options for proto=fd [ 104.954063][ T7111] loop2: detected capacity change from 0 to 1024 [ 104.960988][ T7111] EXT4-fs: dax option not supported [ 104.981153][ T7036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.021618][ T7036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.076410][ T7036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.097160][ T7128] 0ªX¹¦D: renamed from gretap0 [ 105.106734][ T7128] 0ªX¹¦D: entered allmulticast mode [ 105.113430][ T7128] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 105.154623][ T7036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.176157][ T7036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.177297][ T7137] atomic_op ffff88810b365928 conn xmit_atomic 0000000000000000 [ 105.201508][ T7036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.232311][ T7142] loop2: detected capacity change from 0 to 1024 [ 105.241636][ T7036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.251647][ T7142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.268387][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.275539][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.282867][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.289915][ T7036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.300232][ T3757] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.308327][ T3757] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.360070][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.372546][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.382561][ T3765] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.389712][ T3765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.403246][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.410356][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.437359][ T7152] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.495944][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.576562][ T7036] veth0_vlan: entered promiscuous mode [ 105.587089][ T7036] veth1_vlan: entered promiscuous mode [ 105.606029][ T7036] veth0_macvtap: entered promiscuous mode [ 105.607314][ T7180] loop3: detected capacity change from 0 to 512 [ 105.615812][ T7036] veth1_macvtap: entered promiscuous mode [ 105.630174][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.640682][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.650701][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.650970][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.661142][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.661156][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.677027][ T7180] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.683611][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.683624][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.683641][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.683653][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.683667][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.683694][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.683707][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.683755][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.683847][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.683858][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.703568][ T7180] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1251: corrupted inode contents [ 105.704562][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.715163][ T7180] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.1251: mark_inode_dirty error [ 105.724852][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.737798][ T7180] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1251: corrupted inode contents [ 105.745260][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.756352][ T7180] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1251: mark_inode_dirty error [ 105.765398][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.765416][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.905215][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.913148][ T7180] @ÿ: renamed from vlan0 (while UP) [ 105.927804][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.938368][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.948375][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.958818][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.968744][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.979352][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.989256][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.999804][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.009682][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.020196][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.030353][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.040904][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.050785][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.061247][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.071165][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.081637][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.091471][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.101939][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.111747][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.122196][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.134439][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.142999][ T4311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.143679][ T7036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.160707][ T7036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.169497][ T7036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.178264][ T7036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.189648][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.206989][ T7194] loop4: detected capacity change from 0 to 512 [ 106.215992][ T7194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1258: bg 0: block 5: invalid block bitmap [ 106.225459][ T7197] loop2: detected capacity change from 0 to 1024 [ 106.231465][ T7194] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 106.236890][ T7197] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 106.253366][ T7197] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 106.263682][ T7197] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.268169][ T7194] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1258: invalid indirect mapped block 3 (level 2) [ 106.283514][ T7197] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.291779][ T7199] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 106.296419][ T7197] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.309746][ T7197] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1257: bad orphan inode 15 [ 106.317957][ T7194] EXT4-fs (loop4): 1 orphan inode deleted [ 106.321372][ T7197] EXT4-fs (loop2): Remounting filesystem read-only [ 106.325493][ T7194] EXT4-fs (loop4): 1 truncate cleaned up [ 106.332122][ T7197] ext4_test_bit(bit=14, block=1) = 0 [ 106.343809][ T7197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.343993][ T7202] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 106.356413][ T7197] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 106.367486][ T7194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.376205][ T7197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.434433][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.502431][ T7215] lo speed is unknown, defaulting to 1000 [ 106.577943][ T7222] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.603838][ T7231] loop4: detected capacity change from 0 to 512 [ 106.605598][ T7218] loop3: detected capacity change from 0 to 512 [ 106.622723][ T7218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.640222][ T7218] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.652408][ T7238] can0: slcan on ttyS3. [ 106.661722][ T7237] loop2: detected capacity change from 0 to 512 [ 106.673557][ T7237] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 106.679359][ T7231] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1261: bg 0: block 248: padding at end of block bitmap is not set [ 106.688943][ T7237] EXT4-fs (loop2): Remounting filesystem read-only [ 106.708620][ T7231] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1261: Failed to acquire dquot type 1 [ 106.711980][ T7237] EXT4-fs (loop2): 1 truncate cleaned up [ 106.726496][ T7237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.730458][ T7231] EXT4-fs (loop4): 1 truncate cleaned up [ 106.739404][ T7237] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 106.745505][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.757653][ T7237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.766452][ T7231] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.331168][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.353704][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.362816][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 107.362832][ T29] audit: type=1400 audit(1729758346.383:4234): avc: denied { create } for pid=7250 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.388767][ T3757] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 107.397957][ T3757] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:11: Failed to release dquot type 1 [ 107.409751][ T7221] can0 (unregistered): slcan off ttyS3. [ 107.441092][ T29] audit: type=1400 audit(1729758346.463:4235): avc: denied { mount } for pid=7250 comm="syz.3.1274" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 107.533923][ T29] audit: type=1326 audit(1729758346.553:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c3bcdff9 code=0x7ffc0000 [ 107.562980][ T29] audit: type=1326 audit(1729758346.553:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c3bcdff9 code=0x7ffc0000 [ 107.586562][ T29] audit: type=1326 audit(1729758346.553:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f85c3bcdff9 code=0x7ffc0000 [ 107.586593][ T29] audit: type=1326 audit(1729758346.553:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.4.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c3bcdff9 code=0x7ffc0000 [ 107.587369][ T29] audit: type=1400 audit(1729758346.593:4240): avc: denied { write } for pid=7268 comm="syz.0.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.587395][ T29] audit: type=1400 audit(1729758346.603:4241): avc: denied { mount } for pid=7268 comm="syz.0.1282" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 107.611005][ T29] audit: type=1400 audit(1729758346.613:4242): avc: denied { connect } for pid=7273 comm="syz.4.1283" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.648742][ T7274] netlink: 'syz.4.1283': attribute type 6 has an invalid length. [ 107.729958][ T7280] Cannot find set identified by id 0 to match [ 107.737392][ T7281] Cannot find set identified by id 0 to match [ 107.759595][ T7283] loop4: detected capacity change from 0 to 512 [ 107.810828][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.861443][ T7289] lo speed is unknown, defaulting to 1000 [ 107.928026][ T7309] loop4: detected capacity change from 0 to 1024 [ 108.070330][ T7341] 9pnet_fd: Insufficient options for proto=fd [ 108.098432][ T7345] lo speed is unknown, defaulting to 1000 [ 108.213157][ T7366] loop3: detected capacity change from 0 to 512 [ 108.230890][ T7366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.244970][ T7366] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.259563][ T7366] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 108.276568][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.327213][ T7372] pim6reg1: entered promiscuous mode [ 108.334652][ T7372] pim6reg1: entered allmulticast mode [ 108.494697][ T7398] bridge0: port 3(vlan0) entered blocking state [ 108.501035][ T7398] bridge0: port 3(vlan0) entered disabled state [ 108.507649][ T7398] vlan0: entered allmulticast mode [ 108.513975][ T7398] vlan0: left allmulticast mode [ 108.552559][ T7406] loop3: detected capacity change from 0 to 1024 [ 108.559261][ T7406] EXT4-fs: Ignoring removed orlov option [ 108.571168][ T7406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.594669][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.601982][ T7413] FAULT_INJECTION: forcing a failure. [ 108.601982][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 108.616263][ T7413] CPU: 0 UID: 0 PID: 7413 Comm: syz.4.1339 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 108.627140][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.637234][ T7413] Call Trace: [ 108.640508][ T7413] [ 108.643492][ T7413] dump_stack_lvl+0xf2/0x150 [ 108.648087][ T7413] dump_stack+0x15/0x20 [ 108.652243][ T7413] should_fail_ex+0x223/0x230 [ 108.656943][ T7413] ? vm_area_alloc+0xac/0x130 [ 108.661672][ T7413] should_failslab+0x8f/0xb0 [ 108.666323][ T7413] kmem_cache_alloc_noprof+0x4c/0x290 [ 108.671701][ T7413] vm_area_alloc+0xac/0x130 [ 108.676216][ T7413] mmap_region+0x8ba/0x1710 [ 108.680814][ T7413] do_mmap+0x718/0xb60 [ 108.684890][ T7413] vm_mmap_pgoff+0x133/0x290 [ 108.689497][ T7413] ksys_mmap_pgoff+0xd0/0x330 [ 108.694206][ T7413] ? fpregs_assert_state_consistent+0x83/0xa0 [ 108.700355][ T7413] x64_sys_call+0x1884/0x2d60 [ 108.705059][ T7413] do_syscall_64+0xc9/0x1c0 [ 108.709627][ T7413] ? clear_bhb_loop+0x55/0xb0 [ 108.714349][ T7413] ? clear_bhb_loop+0x55/0xb0 [ 108.719037][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.725066][ T7413] RIP: 0033:0x7f85c3bce033 [ 108.729525][ T7413] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 108.749127][ T7413] RSP: 002b:00007f85c2840e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 108.757642][ T7413] RAX: ffffffffffffffda RBX: 0000000000000462 RCX: 00007f85c3bce033 [ 108.765738][ T7413] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 108.773745][ T7413] RBP: 00000000200004c2 R08: 00000000ffffffff R09: 0000000000000000 [ 108.781710][ T7413] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 108.789678][ T7413] R13: 00007f85c2840ef0 R14: 00007f85c2840eb0 R15: 0000000020000000 [ 108.797650][ T7413] [ 108.821297][ T7417] loop4: detected capacity change from 0 to 512 [ 108.824696][ T7415] loop3: detected capacity change from 0 to 2048 [ 108.834517][ T7415] EXT4-fs: Ignoring removed oldalloc option [ 108.840957][ T7415] EXT4-fs: Mount option(s) incompatible with ext3 [ 108.841944][ T7417] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1340: Failed to acquire dquot type 1 [ 108.859811][ T7417] EXT4-fs (loop4): 1 truncate cleaned up [ 108.864711][ T7415] loop3: detected capacity change from 0 to 128 [ 108.866240][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.874691][ T7415] vfat: Unknown parameter 'ext3' [ 108.884333][ T7417] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.904649][ T7417] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1340: Failed to acquire dquot type 1 [ 108.930125][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.947602][ T7427] FAULT_INJECTION: forcing a failure. [ 108.947602][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 108.960255][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.3.1344 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 108.970961][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.981019][ T7427] Call Trace: [ 108.984348][ T7427] [ 108.987278][ T7427] dump_stack_lvl+0xf2/0x150 [ 108.991939][ T7427] dump_stack+0x15/0x20 [ 108.996144][ T7427] should_fail_ex+0x223/0x230 [ 109.000847][ T7427] ? skb_clone+0x154/0x1f0 [ 109.005315][ T7427] should_failslab+0x8f/0xb0 [ 109.009969][ T7427] kmem_cache_alloc_noprof+0x4c/0x290 [ 109.015366][ T7427] skb_clone+0x154/0x1f0 [ 109.019640][ T7427] __netlink_deliver_tap+0x2bd/0x4c0 [ 109.025019][ T7427] netlink_unicast+0x64a/0x670 [ 109.029935][ T7427] netlink_sendmsg+0x5cc/0x6e0 [ 109.034878][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.040297][ T7427] __sock_sendmsg+0x140/0x180 [ 109.044993][ T7427] ____sys_sendmsg+0x312/0x410 [ 109.049792][ T7427] __sys_sendmsg+0x1d9/0x270 [ 109.054520][ T7427] __x64_sys_sendmsg+0x46/0x50 [ 109.059326][ T7427] x64_sys_call+0x2689/0x2d60 [ 109.064006][ T7427] do_syscall_64+0xc9/0x1c0 [ 109.068517][ T7427] ? clear_bhb_loop+0x55/0xb0 [ 109.073214][ T7427] ? clear_bhb_loop+0x55/0xb0 [ 109.077913][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.083823][ T7427] RIP: 0033:0x7fd0be3cdff9 [ 109.088280][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.107916][ T7427] RSP: 002b:00007fd0bd041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.116333][ T7427] RAX: ffffffffffffffda RBX: 00007fd0be585f80 RCX: 00007fd0be3cdff9 [ 109.124300][ T7427] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 109.132308][ T7427] RBP: 00007fd0bd041090 R08: 0000000000000000 R09: 0000000000000000 [ 109.140361][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.148329][ T7427] R13: 0000000000000000 R14: 00007fd0be585f80 R15: 00007ffcec2313f8 [ 109.156304][ T7427] [ 109.159773][ T7427] __nla_validate_parse: 6 callbacks suppressed [ 109.159788][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1344'. [ 109.190835][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 109.216446][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.216625][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.223997][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.224024][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.224044][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.224066][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.262030][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.269449][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.276961][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.284376][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.291827][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.299290][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.306701][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.314162][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.321604][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.328986][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.336376][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.343911][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.351331][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.358739][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.366174][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.373593][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.381051][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.388572][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.395937][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.403344][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.410774][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.418194][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.425575][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.432990][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.440465][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.447929][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.455307][ T990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.462846][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.463621][ T990] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.683140][ T7454] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 109.695069][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.704953][ T7454] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.717626][ T990] kernel read not supported for file /78/io (pid: 990 comm: kworker/1:2) [ 109.772641][ T7460] FAULT_INJECTION: forcing a failure. [ 109.772641][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 109.785409][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.0.1357 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 109.796135][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.806208][ T7460] Call Trace: [ 109.809521][ T7460] [ 109.812456][ T7460] dump_stack_lvl+0xf2/0x150 [ 109.817055][ T7460] dump_stack+0x15/0x20 [ 109.821246][ T7460] should_fail_ex+0x223/0x230 [ 109.826014][ T7460] ? __alloc_skb+0x10b/0x310 [ 109.830611][ T7460] should_failslab+0x8f/0xb0 [ 109.835202][ T7460] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 109.841033][ T7460] __alloc_skb+0x10b/0x310 [ 109.845462][ T7460] alloc_skb_with_frags+0x80/0x450 [ 109.850643][ T7460] ? __kfree_skb+0x102/0x150 [ 109.855248][ T7460] ? kmem_cache_free+0xdc/0x2d0 [ 109.860195][ T7460] sock_alloc_send_pskb+0x435/0x4f0 [ 109.865407][ T7460] queue_oob+0x78/0x320 [ 109.869652][ T7460] ? __rcu_read_unlock+0x4e/0x70 [ 109.874696][ T7460] unix_stream_sendmsg+0x7fe/0x880 [ 109.879861][ T7460] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 109.885506][ T7460] __sock_sendmsg+0x140/0x180 [ 109.890212][ T7460] ____sys_sendmsg+0x312/0x410 [ 109.895057][ T7460] __sys_sendmsg+0x1d9/0x270 [ 109.899751][ T7460] __x64_sys_sendmsg+0x46/0x50 [ 109.904612][ T7460] x64_sys_call+0x2689/0x2d60 [ 109.909365][ T7460] do_syscall_64+0xc9/0x1c0 [ 109.913929][ T7460] ? clear_bhb_loop+0x55/0xb0 [ 109.918667][ T7460] ? clear_bhb_loop+0x55/0xb0 [ 109.923375][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.929363][ T7460] RIP: 0033:0x7f17e4e3dff9 [ 109.933782][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.953472][ T7460] RSP: 002b:00007f17e3ab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.961965][ T7460] RAX: ffffffffffffffda RBX: 00007f17e4ff5f80 RCX: 00007f17e4e3dff9 [ 109.969936][ T7460] RDX: 0000000000000003 RSI: 0000000020000980 RDI: 0000000000000006 [ 109.977910][ T7460] RBP: 00007f17e3ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 109.985880][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.993936][ T7460] R13: 0000000000000000 R14: 00007f17e4ff5f80 R15: 00007fffa217c278 [ 110.002003][ T7460] [ 110.039153][ T7466] FAULT_INJECTION: forcing a failure. [ 110.039153][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.052357][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.4.1359 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 110.063130][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.073212][ T7466] Call Trace: [ 110.076612][ T7466] [ 110.079573][ T7466] dump_stack_lvl+0xf2/0x150 [ 110.084202][ T7466] dump_stack+0x15/0x20 [ 110.088380][ T7466] should_fail_ex+0x223/0x230 [ 110.093134][ T7466] should_fail+0xb/0x10 [ 110.097303][ T7466] should_fail_usercopy+0x1a/0x20 [ 110.102454][ T7466] copy_page_from_iter_atomic+0x22e/0xfa0 [ 110.108204][ T7466] ? shmem_write_begin+0xa2/0x180 [ 110.113328][ T7466] ? shmem_write_begin+0xda/0x180 [ 110.118373][ T7466] generic_perform_write+0x2f1/0x4a0 [ 110.123671][ T7466] shmem_file_write_iter+0xc2/0xe0 [ 110.128801][ T7466] vfs_write+0x76a/0x910 [ 110.133107][ T7466] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 110.138962][ T7466] ksys_write+0xeb/0x1b0 [ 110.143290][ T7466] __x64_sys_write+0x42/0x50 [ 110.147962][ T7466] x64_sys_call+0x27dd/0x2d60 [ 110.152684][ T7466] do_syscall_64+0xc9/0x1c0 [ 110.157186][ T7466] ? clear_bhb_loop+0x55/0xb0 [ 110.161886][ T7466] ? clear_bhb_loop+0x55/0xb0 [ 110.166591][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.172624][ T7466] RIP: 0033:0x7f85c3bccadf [ 110.177089][ T7466] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 110.196776][ T7466] RSP: 002b:00007f85c2840df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 110.205186][ T7466] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f85c3bccadf [ 110.213219][ T7466] RDX: 0000000000080000 RSI: 00007f85ba421000 RDI: 0000000000000004 [ 110.221195][ T7466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000639 [ 110.229173][ T7466] R10: 0000000020001282 R11: 0000000000000293 R12: 0000000000000004 [ 110.237145][ T7466] R13: 00007f85c2840ef0 R14: 00007f85c2840eb0 R15: 00007f85ba421000 [ 110.245144][ T7466] [ 110.251835][ T7466] loop4: detected capacity change from 0 to 1024 [ 110.267176][ T7466] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.282489][ T7466] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 110.290657][ T7466] EXT4-fs (loop4): too many log groups per flexible block group [ 110.298456][ T7466] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 110.305269][ T7466] EXT4-fs (loop4): mount failed [ 110.341903][ T7483] pim6reg1: entered promiscuous mode [ 110.347336][ T7483] pim6reg1: entered allmulticast mode [ 110.362951][ T7486] loop4: detected capacity change from 0 to 256 [ 110.523748][ T7503] loop3: detected capacity change from 0 to 512 [ 110.552679][ T7506] loop4: detected capacity change from 0 to 512 [ 110.559780][ T7506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.561192][ T7503] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1377: bg 0: block 248: padding at end of block bitmap is not set [ 110.581532][ T7506] EXT4-fs (loop4): 1 truncate cleaned up [ 110.586072][ T7503] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1377: Failed to acquire dquot type 1 [ 110.590185][ T7506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.603705][ T7503] EXT4-fs (loop3): 1 truncate cleaned up [ 110.619615][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.632265][ T7503] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.666887][ T7503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.191048][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.289493][ T7515] FAULT_INJECTION: forcing a failure. [ 111.289493][ T7515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.302672][ T7515] CPU: 1 UID: 0 PID: 7515 Comm: syz.4.1379 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 111.313444][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.323603][ T7515] Call Trace: [ 111.326915][ T7515] [ 111.329889][ T7515] dump_stack_lvl+0xf2/0x150 [ 111.334513][ T7515] dump_stack+0x15/0x20 [ 111.335896][ T7518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1381'. [ 111.338673][ T7515] should_fail_ex+0x223/0x230 [ 111.352379][ T7515] should_fail+0xb/0x10 [ 111.356647][ T7515] should_fail_usercopy+0x1a/0x20 [ 111.361766][ T7515] _copy_to_user+0x1e/0xa0 [ 111.366261][ T7515] simple_read_from_buffer+0xa0/0x110 [ 111.371680][ T7515] proc_fail_nth_read+0xf9/0x140 [ 111.376651][ T7515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.382208][ T7515] vfs_read+0x195/0x720 [ 111.386096][ T7521] loop3: detected capacity change from 0 to 512 [ 111.386392][ T7515] ? __rcu_read_unlock+0x4e/0x70 [ 111.393417][ T7521] EXT4-fs (loop3): blocks per group (4096) and clusters per group (2304) inconsistent [ 111.397545][ T7515] ? __fget_files+0x1d4/0x210 [ 111.411817][ T7515] ksys_read+0xeb/0x1b0 [ 111.415998][ T7515] __x64_sys_read+0x42/0x50 [ 111.420519][ T7515] x64_sys_call+0x27d3/0x2d60 [ 111.425288][ T7515] do_syscall_64+0xc9/0x1c0 [ 111.429810][ T7515] ? clear_bhb_loop+0x55/0xb0 [ 111.434515][ T7515] ? clear_bhb_loop+0x55/0xb0 [ 111.439210][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.445215][ T7515] RIP: 0033:0x7f85c3bcca3c [ 111.449631][ T7515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 111.469385][ T7515] RSP: 002b:00007f85c2841030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.477849][ T7515] RAX: ffffffffffffffda RBX: 00007f85c3d85f80 RCX: 00007f85c3bcca3c [ 111.485852][ T7515] RDX: 000000000000000f RSI: 00007f85c28410a0 RDI: 0000000000000005 [ 111.493886][ T7515] RBP: 00007f85c2841090 R08: 0000000000000000 R09: 0000000000000000 [ 111.501854][ T7515] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 111.509827][ T7515] R13: 0000000000000000 R14: 00007f85c3d85f80 R15: 00007fff0ebff588 [ 111.517850][ T7515] [ 111.549997][ T7525] pim6reg1: entered promiscuous mode [ 111.555579][ T7525] pim6reg1: entered allmulticast mode [ 111.593909][ T7531] FAULT_INJECTION: forcing a failure. [ 111.593909][ T7531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.607239][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.0.1387 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 111.618037][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.628115][ T7531] Call Trace: [ 111.631469][ T7531] [ 111.634412][ T7531] dump_stack_lvl+0xf2/0x150 [ 111.639003][ T7531] dump_stack+0x15/0x20 [ 111.643203][ T7531] should_fail_ex+0x223/0x230 [ 111.647959][ T7531] should_fail_alloc_page+0xfd/0x110 [ 111.653303][ T7531] __alloc_pages_noprof+0x109/0x340 [ 111.658565][ T7531] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 111.663965][ T7531] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 111.669401][ T7531] handle_mm_fault+0xdbe/0x2a80 [ 111.674253][ T7531] ? __rcu_read_lock+0x36/0x50 [ 111.679140][ T7531] __get_user_pages+0xf2c/0x2670 [ 111.684121][ T7531] __gup_longterm_locked+0x2c9/0x10b0 [ 111.689639][ T7531] ? mod_node_page_state+0x1c/0xd0 [ 111.694768][ T7531] gup_fast_fallback+0x157a/0x1fe0 [ 111.699938][ T7531] pin_user_pages_fast+0x5f/0x90 [ 111.704907][ T7531] io_pin_pages+0x7e/0x130 [ 111.709374][ T7531] __io_uaddr_map+0x81/0x160 [ 111.714012][ T7531] io_allocate_scq_urings+0x148/0x300 [ 111.719448][ T7531] io_uring_create+0x53f/0x940 [ 111.724331][ T7531] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 111.729790][ T7531] __x64_sys_io_uring_setup+0x31/0x40 [ 111.735248][ T7531] x64_sys_call+0x1f7e/0x2d60 [ 111.739927][ T7531] do_syscall_64+0xc9/0x1c0 [ 111.744425][ T7531] ? clear_bhb_loop+0x55/0xb0 [ 111.749117][ T7531] ? clear_bhb_loop+0x55/0xb0 [ 111.753883][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.759872][ T7531] RIP: 0033:0x7f17e4e3dff9 [ 111.764327][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.783930][ T7531] RSP: 002b:00007f17e3ab0fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 111.792340][ T7531] RAX: ffffffffffffffda RBX: 00007f17e4ff5f80 RCX: 00007f17e4e3dff9 [ 111.800318][ T7531] RDX: 00000000200004c0 RSI: 0000000020000400 RDI: 0000000000002c0c [ 111.808322][ T7531] RBP: 0000000020000400 R08: 0000000000000000 R09: 00000000200004c0 [ 111.816295][ T7531] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 111.824356][ T7531] R13: 0000000020000480 R14: 0000000000002c0c R15: 00000000200004c0 [ 111.832346][ T7531] [ 112.094845][ T7545] loop3: detected capacity change from 0 to 512 [ 112.109227][ T7545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.121840][ T7545] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.208747][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.279303][ T7556] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 112.438472][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 112.438487][ T29] audit: type=1326 audit(1729758351.463:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.464714][ T7562] pim6reg1: entered promiscuous mode [ 112.469594][ T29] audit: type=1326 audit(1729758351.493:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.472964][ T7562] pim6reg1: entered allmulticast mode [ 112.495762][ T29] audit: type=1326 audit(1729758351.493:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.524187][ T29] audit: type=1326 audit(1729758351.493:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.547131][ T29] audit: type=1326 audit(1729758351.493:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.570052][ T29] audit: type=1326 audit(1729758351.493:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.592982][ T29] audit: type=1326 audit(1729758351.493:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.615868][ T29] audit: type=1326 audit(1729758351.493:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.638700][ T29] audit: type=1326 audit(1729758351.493:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.661645][ T29] audit: type=1326 audit(1729758351.493:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0be3cdff9 code=0x7ffc0000 [ 112.754251][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 112.934069][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'. [ 112.943384][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'. [ 113.022027][ T7587] loop4: detected capacity change from 0 to 512 [ 113.256931][ T7589] loop3: detected capacity change from 0 to 1024 [ 113.303557][ T7595] FAULT_INJECTION: forcing a failure. [ 113.303557][ T7595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.316749][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.0.1410 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 113.327583][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.330608][ T7589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.337645][ T7595] Call Trace: [ 113.337655][ T7595] [ 113.337665][ T7595] dump_stack_lvl+0xf2/0x150 [ 113.337722][ T7595] dump_stack+0x15/0x20 [ 113.337744][ T7595] should_fail_ex+0x223/0x230 [ 113.369538][ T7595] should_fail+0xb/0x10 [ 113.373776][ T7595] should_fail_usercopy+0x1a/0x20 [ 113.378886][ T7595] _copy_from_iter+0xd3/0xd20 [ 113.383642][ T7595] ? kernel_fpu_begin_mask+0x19d/0x200 [ 113.389167][ T7595] ? kernel_fpu_end+0x5e/0x80 [ 113.393954][ T7595] ? blake2s_compress+0xab/0xd0 [ 113.398863][ T7595] ? blake2s_update+0x120/0x140 [ 113.403743][ T7595] write_pool_user+0x80/0x1e0 [ 113.408494][ T7595] ? import_ubuf+0xe9/0x120 [ 113.413018][ T7595] random_ioctl+0x2c6/0x3f0 [ 113.417556][ T7595] ? __pfx_random_ioctl+0x10/0x10 [ 113.422634][ T7595] __se_sys_ioctl+0xcd/0x140 [ 113.427335][ T7595] __x64_sys_ioctl+0x43/0x50 [ 113.432062][ T7595] x64_sys_call+0x15cc/0x2d60 [ 113.436773][ T7595] do_syscall_64+0xc9/0x1c0 [ 113.441394][ T7595] ? clear_bhb_loop+0x55/0xb0 [ 113.446167][ T7595] ? clear_bhb_loop+0x55/0xb0 [ 113.451012][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.456907][ T7595] RIP: 0033:0x7f17e4e3dff9 [ 113.461330][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.480987][ T7595] RSP: 002b:00007f17e3ab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.489593][ T7595] RAX: ffffffffffffffda RBX: 00007f17e4ff5f80 RCX: 00007f17e4e3dff9 [ 113.497573][ T7595] RDX: 0000000020000000 RSI: 0000000040085203 RDI: 0000000000000003 [ 113.505644][ T7595] RBP: 00007f17e3ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 113.513614][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.521681][ T7595] R13: 0000000000000000 R14: 00007f17e4ff5f80 R15: 00007fffa217c278 [ 113.529662][ T7595] [ 113.734854][ T7603] lo speed is unknown, defaulting to 1000 [ 113.820988][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 113.828547][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.840952][ T7634] loop4: detected capacity change from 0 to 128 [ 113.847660][ T7634] EXT4-fs: Ignoring removed nobh option [ 113.879210][ T7634] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.895995][ T7634] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.927818][ T5302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.938666][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.945949][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.955602][ T7603] bridge_slave_0: entered allmulticast mode [ 113.962273][ T7603] bridge_slave_0: entered promiscuous mode [ 113.971027][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.978246][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.985729][ T7603] bridge_slave_1: entered allmulticast mode [ 113.992664][ T7603] bridge_slave_1: entered promiscuous mode [ 114.008830][ T7645] lo speed is unknown, defaulting to 1000 [ 114.018678][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.045886][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.077397][ T7603] team0: Port device team_slave_0 added [ 114.086269][ T7603] team0: Port device team_slave_1 added [ 114.107768][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.114756][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.121227][ T7657] xt_CT: No such helper "netbios-ns" [ 114.140760][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.160811][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.167919][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.194011][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.213640][ T7659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.227136][ T7659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.241199][ T7659] bond0 (unregistering): Released all slaves [ 114.254364][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 114.263716][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.271372][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.289217][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.296717][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.351046][ T7671] tmpfs: Bad value for 'mpol' [ 114.422323][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 114.552835][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.600682][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.639312][ T7603] hsr_slave_0: entered promiscuous mode [ 114.645639][ T7603] hsr_slave_1: entered promiscuous mode [ 114.651814][ T7603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.659564][ T7603] Cannot create hsr debugfs directory [ 114.721583][ T7603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.771367][ T7603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.821963][ T7603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.871707][ T7603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.911358][ T7683] FAULT_INJECTION: forcing a failure. [ 114.911358][ T7683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.924838][ T7683] CPU: 1 UID: 0 PID: 7683 Comm: syz.4.1440 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 114.935556][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.945735][ T7683] Call Trace: [ 114.949021][ T7683] [ 114.952049][ T7683] dump_stack_lvl+0xf2/0x150 [ 114.956729][ T7683] dump_stack+0x15/0x20 [ 114.960903][ T7683] should_fail_ex+0x223/0x230 [ 114.965596][ T7683] should_fail_alloc_page+0xfd/0x110 [ 114.970964][ T7683] __alloc_pages_noprof+0x109/0x340 [ 114.976273][ T7683] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 114.981723][ T7683] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 114.987195][ T7683] handle_mm_fault+0xdbe/0x2a80 [ 114.992064][ T7683] ? __rcu_read_lock+0x36/0x50 [ 114.996923][ T7683] __get_user_pages+0xf2c/0x2670 [ 115.001954][ T7683] __gup_longterm_locked+0x2c9/0x10b0 [ 115.007408][ T7683] ? mod_node_page_state+0x1c/0xd0 [ 115.012551][ T7683] gup_fast_fallback+0x157a/0x1fe0 [ 115.017984][ T7683] pin_user_pages_fast+0x5f/0x90 [ 115.022979][ T7683] io_pin_pages+0x7e/0x130 [ 115.027439][ T7683] __io_uaddr_map+0x81/0x160 [ 115.032060][ T7683] io_allocate_scq_urings+0x148/0x300 [ 115.037457][ T7683] io_uring_create+0x53f/0x940 [ 115.042281][ T7683] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 115.047770][ T7683] __x64_sys_io_uring_setup+0x31/0x40 [ 115.053276][ T7683] x64_sys_call+0x1f7e/0x2d60 [ 115.057966][ T7683] do_syscall_64+0xc9/0x1c0 [ 115.062509][ T7683] ? clear_bhb_loop+0x55/0xb0 [ 115.067202][ T7683] ? clear_bhb_loop+0x55/0xb0 [ 115.071892][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.077807][ T7683] RIP: 0033:0x7f85c3bcdff9 [ 115.082272][ T7683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.101897][ T7683] RSP: 002b:00007f85c2840fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 115.110337][ T7683] RAX: ffffffffffffffda RBX: 00007f85c3d85f80 RCX: 00007f85c3bcdff9 [ 115.118464][ T7683] RDX: 00000000200004c0 RSI: 0000000020000400 RDI: 0000000000002c0c [ 115.126464][ T7683] RBP: 0000000020000400 R08: 0000000000000000 R09: 00000000200004c0 [ 115.134465][ T7683] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 115.142461][ T7683] R13: 0000000020000480 R14: 0000000000002c0c R15: 00000000200004c0 [ 115.150527][ T7683] [ 115.179301][ T7603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.196499][ T7603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.211984][ T7603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.221175][ T7693] loop4: detected capacity change from 0 to 512 [ 115.228932][ T7693] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.235556][ T7603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.275900][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'. [ 115.294276][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.307635][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.328774][ T7693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.341365][ T7695] loop3: detected capacity change from 0 to 512 [ 115.360532][ T3765] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.367642][ T3765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.376862][ T3765] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.384006][ T3765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.399024][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.411993][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.413440][ T7603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.435280][ T7695] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.508496][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.681488][ T7603] veth0_vlan: entered promiscuous mode [ 115.708536][ T7603] veth1_vlan: entered promiscuous mode [ 115.735431][ T7603] veth0_macvtap: entered promiscuous mode [ 115.763524][ T7603] veth1_macvtap: entered promiscuous mode [ 115.775098][ T7724] loop4: detected capacity change from 0 to 1024 [ 115.802474][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.813003][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.822918][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.833447][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.843320][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.853788][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.863751][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.874246][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.884112][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.894588][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.904594][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.915092][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.925041][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.935704][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.945557][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.956157][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.966024][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.976490][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.986343][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.996829][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.011377][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.011406][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.037064][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.047629][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.057515][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.068016][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.070999][ T7726] FAULT_INJECTION: forcing a failure. [ 116.070999][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 116.077959][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.090539][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.3.1452 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 116.100937][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.111548][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.111565][ T7726] Call Trace: [ 116.111572][ T7726] [ 116.121355][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.131469][ T7726] dump_stack_lvl+0xf2/0x150 [ 116.134761][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.137689][ T7726] dump_stack+0x15/0x20 [ 116.137713][ T7726] should_fail_ex+0x223/0x230 [ 116.148336][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.152692][ T7726] ? dup_fd+0x3a/0x6a0 [ 116.152729][ T7726] should_failslab+0x8f/0xb0 [ 116.152802][ T7726] kmem_cache_alloc_noprof+0x4c/0x290 [ 116.162582][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.166707][ T7726] dup_fd+0x3a/0x6a0 [ 116.171395][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.171410][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.171426][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.181820][ T7726] copy_files+0x98/0xe0 [ 116.185889][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.190460][ T7726] copy_process+0xcbf/0x1f90 [ 116.190499][ T7726] kernel_clone+0x167/0x5e0 [ 116.195880][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.205653][ T7726] ? vfs_write+0x580/0x910 [ 116.209606][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.219986][ T7726] __x64_sys_clone+0xe8/0x120 [ 116.229806][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.229830][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.240220][ T7726] x64_sys_call+0x2d23/0x2d60 [ 116.244371][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.254152][ T7726] do_syscall_64+0xc9/0x1c0 [ 116.254228][ T7726] ? clear_bhb_loop+0x55/0xb0 [ 116.254268][ T7726] ? clear_bhb_loop+0x55/0xb0 [ 116.254303][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.258911][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.263388][ T7726] RIP: 0033:0x7fd0be3cdff9 [ 116.277007][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.278371][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.278396][ T7726] RSP: 002b:00007fd0bd040fe8 EFLAGS: 00000246 [ 116.290310][ T7603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.292883][ T7726] ORIG_RAX: 0000000000000038 [ 116.292895][ T7726] RAX: ffffffffffffffda RBX: 00007fd0be585f80 RCX: 00007fd0be3cdff9 [ 116.292912][ T7726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.303419][ T7603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.313083][ T7726] RBP: 00007fd0bd041090 R08: 0000000000000000 R09: 0000000000000000 [ 116.317773][ T7603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.328140][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.332640][ T7603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.337303][ T7726] R13: 0000000000000000 R14: 00007fd0be585f80 R15: 00007ffcec2313f8 [ 116.411926][ T7729] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.416321][ T7726] [ 116.554025][ T7738] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 116.582893][ T7746] ip6t_rpfilter: unknown options [ 116.590461][ T7744] lo speed is unknown, defaulting to 1000 [ 116.627701][ T7749] loop4: detected capacity change from 0 to 512 [ 116.636379][ T7749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.651251][ T7751] lo speed is unknown, defaulting to 1000 [ 116.662609][ T7749] EXT4-fs (loop4): 1 truncate cleaned up [ 116.669008][ T7749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.676630][ T7752] sctp: [Deprecated]: syz.1.1459 (pid 7752) Use of int in maxseg socket option. [ 116.676630][ T7752] Use struct sctp_assoc_value instead [ 116.775445][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.858843][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 117.094426][ T7767] capability: warning: `syz.3.1465' uses 32-bit capabilities (legacy support in use) [ 117.457360][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 117.457378][ T29] audit: type=1400 audit(1729758356.473:4785): avc: denied { read } for pid=7770 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.631554][ T7761] 9pnet_fd: p9_fd_create_tcp (7761): problem connecting socket to 127.0.0.1 [ 117.674239][ T29] audit: type=1400 audit(1729758356.693:4786): avc: denied { read } for pid=7778 comm="syz.1.1470" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.712975][ T7787] lo speed is unknown, defaulting to 1000 [ 117.717430][ T29] audit: type=1400 audit(1729758356.693:4787): avc: denied { open } for pid=7778 comm="syz.1.1470" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.742719][ T29] audit: type=1400 audit(1729758356.723:4788): avc: denied { ioctl } for pid=7778 comm="syz.1.1470" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.782262][ T29] audit: type=1400 audit(1729758356.803:4789): avc: denied { create } for pid=7786 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.802839][ T29] audit: type=1400 audit(1729758356.833:4790): avc: denied { getopt } for pid=7786 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.822799][ T29] audit: type=1400 audit(1729758356.833:4791): avc: denied { create } for pid=7793 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.842416][ T29] audit: type=1400 audit(1729758356.833:4792): avc: denied { connect } for pid=7793 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.862232][ T29] audit: type=1400 audit(1729758356.833:4793): avc: denied { write } for pid=7793 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.889458][ T29] audit: type=1400 audit(1729758356.913:4794): avc: denied { create } for pid=7800 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.912472][ T7803] loop4: detected capacity change from 0 to 128 [ 117.922527][ T7803] EXT4-fs: Ignoring removed nobh option [ 117.930706][ T7803] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.943234][ T7803] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.966062][ T5302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.017827][ T7812] FAULT_INJECTION: forcing a failure. [ 118.017827][ T7812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.031160][ T7812] CPU: 1 UID: 0 PID: 7812 Comm: syz.1.1482 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 118.041947][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.052091][ T7812] Call Trace: [ 118.055445][ T7812] [ 118.058397][ T7812] dump_stack_lvl+0xf2/0x150 [ 118.063050][ T7812] dump_stack+0x15/0x20 [ 118.067217][ T7812] should_fail_ex+0x223/0x230 [ 118.071951][ T7812] should_fail_alloc_page+0xfd/0x110 [ 118.077261][ T7812] __alloc_pages_noprof+0x109/0x340 [ 118.082495][ T7812] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 118.087941][ T7812] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 118.093353][ T7812] handle_mm_fault+0xdbe/0x2a80 [ 118.098237][ T7812] exc_page_fault+0x3b9/0x650 [ 118.103020][ T7812] asm_exc_page_fault+0x26/0x30 [ 118.107912][ T7812] RIP: 0033:0x7f22dc0ef810 [ 118.112369][ T7812] Code: 80 00 00 31 ff c1 e6 06 e8 2d e8 13 00 8b 55 40 49 89 07 49 03 55 00 45 85 f6 74 1b 44 89 f3 31 c0 66 0f 1f 84 00 00 00 00 00 <89> 02 83 c0 01 48 83 c2 04 39 c3 75 f3 48 83 c4 28 44 89 e0 5b 5d [ 118.132084][ T7812] RSP: 002b:00007f22daea6fd0 EFLAGS: 00010206 [ 118.138225][ T7812] RAX: 0000000000002360 RBX: 0000000000002c0c RCX: 00007f22dc22e033 [ 118.146219][ T7812] RDX: 0000000020008fff RSI: 0000000000000000 RDI: 0000000000000000 [ 118.154445][ T7812] RBP: 0000000020000400 R08: 00000000ffffffff R09: 0000000010000000 [ 118.162450][ T7812] R10: 0000000000008001 R11: 0000000000000246 R12: ffffffffffffffff [ 118.170448][ T7812] R13: 0000000020000480 R14: 0000000000002c0c R15: 00000000200004c0 [ 118.178449][ T7812] [ 118.182053][ T7812] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 118.282967][ T3765] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.312322][ T7824] bond1: entered promiscuous mode [ 118.317418][ T7824] bond1: entered allmulticast mode [ 118.323283][ T7824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.345990][ T7824] bond1 (unregistering): Released all slaves [ 118.356792][ T3765] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.403744][ T7832] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1487'. [ 118.419043][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88810c933200: rx timeout, send abort [ 118.426275][ T7832] 9pnet_fd: Insufficient options for proto=fd [ 118.427427][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88810c933200: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 118.447812][ C1] ------------[ cut here ]------------ [ 118.453299][ C1] refcount_t: underflow; use-after-free. [ 118.459177][ C1] WARNING: CPU: 1 PID: 23 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 118.468432][ C1] Modules linked in: [ 118.472352][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 118.482977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.493075][ C1] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 118.499292][ C1] Code: 72 ff ff ff e8 9b 83 71 ff 48 c7 c7 fe d6 b2 86 e8 3f 6a 8a ff c6 05 d6 2c f4 04 01 90 48 c7 c7 5a a4 1b 86 e8 ab 49 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 6c 83 71 ff 48 c7 c7 fb d6 b2 86 e8 [ 118.518952][ C1] RSP: 0018:ffffc900000cf9d8 EFLAGS: 00010246 [ 118.525052][ C1] RAX: 19174daf3fe0b300 RBX: ffff888107842ee4 RCX: ffff888100f92100 [ 118.533056][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.541080][ C1] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 118.549109][ C1] R10: 0001ffffffffffff R11: ffff888100f92100 R12: ffff88810c933268 [ 118.557125][ C1] R13: 000000000000ff00 R14: ffff888107842ee4 R15: 0000000000000000 [ 118.565155][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 118.574122][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.580760][ C1] CR2: 000000110c2de1a2 CR3: 0000000151822000 CR4: 00000000003506f0 [ 118.588756][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.596753][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.604763][ C1] Call Trace: [ 118.608063][ C1] [ 118.611013][ C1] ? __warn+0x141/0x350 [ 118.615215][ C1] ? report_bug+0x315/0x420 [ 118.619752][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 118.625316][ C1] ? handle_bug+0x60/0x90 [ 118.629686][ C1] ? exc_invalid_op+0x1a/0x50 [ 118.634393][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 118.639490][ C1] ? __warn_printk+0x167/0x1b0 [ 118.644334][ C1] ? refcount_warn_saturate+0x1c6/0x230 [ 118.649911][ C1] ? refcount_warn_saturate+0x1c5/0x230 [ 118.655491][ C1] sk_skb_reason_drop+0xe9/0x290 [ 118.660495][ C1] j1939_session_put+0x157/0x2a0 [ 118.665471][ C1] j1939_xtp_rx_abort_one+0x9d/0x410 [ 118.670817][ C1] j1939_tp_recv+0x71e/0xa80 [ 118.675461][ C1] j1939_can_recv+0x45f/0x550 [ 118.680198][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 118.685420][ C1] can_rcv_filter+0x225/0x4c0 [ 118.690170][ C1] can_receive+0x182/0x1f0 [ 118.694631][ C1] ? can_rcv+0xdc/0x180 [ 118.698872][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 118.703425][ C1] can_rcv+0xe7/0x180 [ 118.707473][ C1] ? __pfx_can_rcv+0x10/0x10 [ 118.712096][ C1] __netif_receive_skb+0x123/0x280 [ 118.717237][ C1] process_backlog+0x22e/0x440 [ 118.722050][ C1] __napi_poll+0x63/0x3c0 [ 118.726407][ C1] ? net_rx_action+0x376/0x7f0 [ 118.731217][ C1] net_rx_action+0x3a1/0x7f0 [ 118.735842][ C1] handle_softirqs+0xbf/0x280 [ 118.740572][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 118.745734][ C1] run_ksoftirqd+0x1c/0x30 [ 118.750200][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 118.755165][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 118.760655][ C1] kthread+0x1d1/0x210 [ 118.764736][ C1] ? __pfx_kthread+0x10/0x10 [ 118.769373][ C1] ret_from_fork+0x4b/0x60 [ 118.773831][ C1] ? __pfx_kthread+0x10/0x10 [ 118.778450][ C1] ret_from_fork_asm+0x1a/0x30 [ 118.783245][ C1] [ 118.786286][ C1] ---[ end trace 0000000000000000 ]--- [ 118.794515][ T3765] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.812748][ T7818] lo speed is unknown, defaulting to 1000 [ 118.861080][ T3765] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.885748][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 118.894709][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 118.915385][ T7843] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 118.928305][ T7818] chnl_net:caif_netlink_parms(): no params data found [ 119.062107][ T7846] loop4: detected capacity change from 0 to 1024 [ 119.071719][ T7846] EXT4-fs: Ignoring removed i_version option [ 119.091645][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.105487][ T7846] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.1491: corrupted in-inode xattr: bad e_name length [ 119.119987][ T7846] EXT4-fs (loop4): Remounting filesystem read-only [ 119.132572][ T3765] bond0 (unregistering): Released all slaves [ 119.141871][ T7846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.169077][ T7846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.272799][ T3765] IPVS: stopping backup sync thread 5009 ... [ 119.293498][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.295562][ T7878] vhci_hcd: default hub control req: 4008 v0000 i0000 l0 [ 119.300623][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.315029][ T7818] bridge_slave_0: entered allmulticast mode [ 119.322854][ T7818] bridge_slave_0: entered promiscuous mode [ 119.362384][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.369614][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.377878][ T7818] bridge_slave_1: entered allmulticast mode [ 119.384720][ T7818] bridge_slave_1: entered promiscuous mode [ 119.393815][ T3765] hsr_slave_0: left promiscuous mode [ 119.399799][ T3765] hsr_slave_1: left promiscuous mode [ 119.406303][ T3765] veth1_macvtap: left promiscuous mode [ 119.411908][ T3765] veth0_macvtap: left promiscuous mode [ 119.546293][ T7818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.562558][ T7818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.600751][ T7818] team0: Port device team_slave_0 added [ 119.610754][ T7818] team0: Port device team_slave_1 added [ 119.664718][ T7893] loop3: detected capacity change from 0 to 1024 [ 119.674384][ T7893] EXT4-fs: Ignoring removed orlov option [ 119.680155][ T7893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.689335][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.696332][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.722355][ T7818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.744354][ T7893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.760879][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 119.771675][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.778686][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.804691][ T7818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.815679][ T5302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.832925][ T5434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.845927][ T7818] hsr_slave_0: entered promiscuous mode [ 119.853351][ T7818] hsr_slave_1: entered promiscuous mode [ 119.860923][ T7899] FAULT_INJECTION: forcing a failure. [ 119.860923][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.874109][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.3.1509 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 119.886283][ T7899] Tainted: [W]=WARN [ 119.890100][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.900233][ T7899] Call Trace: [ 119.903505][ T7899] [ 119.906427][ T7899] dump_stack_lvl+0xf2/0x150 [ 119.911095][ T7899] dump_stack+0x15/0x20 [ 119.915275][ T7899] should_fail_ex+0x223/0x230 [ 119.919963][ T7899] should_fail+0xb/0x10 [ 119.924181][ T7899] should_fail_usercopy+0x1a/0x20 [ 119.929277][ T7899] copy_page_from_iter_atomic+0x22e/0xfa0 [ 119.935076][ T7899] ? shmem_write_begin+0xa2/0x180 [ 119.940138][ T7899] ? shmem_write_begin+0xda/0x180 [ 119.945176][ T7899] generic_perform_write+0x2f1/0x4a0 [ 119.950614][ T7899] shmem_file_write_iter+0xc2/0xe0 [ 119.955841][ T7899] vfs_write+0x76a/0x910 [ 119.960105][ T7899] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 119.965991][ T7899] ksys_write+0xeb/0x1b0 [ 119.970266][ T7899] __x64_sys_write+0x42/0x50 [ 119.974910][ T7899] x64_sys_call+0x27dd/0x2d60 [ 119.979667][ T7899] do_syscall_64+0xc9/0x1c0 [ 119.984213][ T7899] ? clear_bhb_loop+0x55/0xb0 [ 119.988909][ T7899] ? clear_bhb_loop+0x55/0xb0 [ 119.993690][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.999704][ T7899] RIP: 0033:0x7fd0be3ccadf [ 120.004121][ T7899] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 120.023808][ T7899] RSP: 002b:00007fd0bd040df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 120.032261][ T7899] RAX: ffffffffffffffda RBX: 0000000000014800 RCX: 00007fd0be3ccadf [ 120.040242][ T7899] RDX: 0000000000014800 RSI: 00007fd0b4c21000 RDI: 0000000000000007 [ 120.048230][ T7899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000552 [ 120.056210][ T7899] R10: 00000000000003f0 R11: 0000000000000293 R12: 0000000000000007 [ 120.064332][ T7899] R13: 00007fd0bd040ef0 R14: 00007fd0bd040eb0 R15: 00007fd0b4c21000 [ 120.072313][ T7899] [ 120.076092][ T7818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.080755][ T7899] loop3: detected capacity change from 0 to 164 [ 120.083802][ T7818] Cannot create hsr debugfs directory [ 120.150466][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1511'. [ 120.175559][ T7907] 9pnet_fd: Insufficient options for proto=fd [ 120.186322][ T3765] IPVS: stop unused estimator thread 0... [ 120.210399][ T7909] loop4: detected capacity change from 0 to 512 [ 120.229682][ T7911] FAULT_INJECTION: forcing a failure. [ 120.229682][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 120.242413][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.0.1514 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 120.254619][ T7911] Tainted: [W]=WARN [ 120.255818][ T7909] EXT4-fs: Ignoring removed orlov option [ 120.258430][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.258453][ T7911] Call Trace: [ 120.258461][ T7911] [ 120.258470][ T7911] dump_stack_lvl+0xf2/0x150 [ 120.258496][ T7911] dump_stack+0x15/0x20 [ 120.258515][ T7911] should_fail_ex+0x223/0x230 [ 120.294032][ T7911] ? __alloc_skb+0x10b/0x310 [ 120.298647][ T7911] should_failslab+0x8f/0xb0 [ 120.303311][ T7911] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 120.309140][ T7911] __alloc_skb+0x10b/0x310 [ 120.313625][ T7911] netlink_ack+0xef/0x4f0 [ 120.318022][ T7911] netlink_rcv_skb+0x19c/0x230 [ 120.322809][ T7911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.327869][ T7911] genl_rcv+0x28/0x40 [ 120.331951][ T7911] netlink_unicast+0x599/0x670 [ 120.336767][ T7911] netlink_sendmsg+0x5cc/0x6e0 [ 120.341540][ T7911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.346872][ T7911] __sock_sendmsg+0x140/0x180 [ 120.351565][ T7911] __sys_sendto+0x1d6/0x260 [ 120.356166][ T7911] __x64_sys_sendto+0x78/0x90 [ 120.360958][ T7911] x64_sys_call+0x2959/0x2d60 [ 120.365718][ T7911] do_syscall_64+0xc9/0x1c0 [ 120.370282][ T7911] ? clear_bhb_loop+0x55/0xb0 [ 120.374983][ T7911] ? clear_bhb_loop+0x55/0xb0 [ 120.379695][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.385611][ T7911] RIP: 0033:0x7f17e4e3fe8c [ 120.390033][ T7911] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 120.409715][ T7911] RSP: 002b:00007f17e3aafec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 120.418133][ T7911] RAX: ffffffffffffffda RBX: 00007f17e3aaffc0 RCX: 00007f17e4e3fe8c [ 120.426106][ T7911] RDX: 0000000000000024 RSI: 00007f17e3ab0010 RDI: 0000000000000007 [ 120.434082][ T7911] RBP: 0000000000000000 R08: 00007f17e3aaff14 R09: 000000000000000c [ 120.442066][ T7911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 120.450069][ T7911] R13: 00007f17e3aaff68 R14: 00007f17e3ab0010 R15: 0000000000000000 [ 120.458062][ T7911] [ 120.503361][ T7909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.525021][ T7909] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.627037][ T7925] loop4: detected capacity change from 0 to 512 [ 120.640410][ T7925] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.710785][ T7925] lo speed is unknown, defaulting to 1000 [ 120.722712][ T7931] syz.1.1520[7931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.722783][ T7931] syz.1.1520[7931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.751132][ T7931] syz.1.1520[7931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.770112][ T7933] netlink: 'syz.0.1521': attribute type 6 has an invalid length. [ 120.792631][ T7933] FAULT_INJECTION: forcing a failure. [ 120.792631][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.794541][ T7934] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.805840][ T7933] CPU: 1 UID: 0 PID: 7933 Comm: syz.0.1521 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 120.825107][ T7933] Tainted: [W]=WARN [ 120.828920][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.838996][ T7933] Call Trace: [ 120.842285][ T7933] [ 120.845221][ T7933] dump_stack_lvl+0xf2/0x150 [ 120.849832][ T7933] dump_stack+0x15/0x20 [ 120.854063][ T7933] should_fail_ex+0x223/0x230 [ 120.858778][ T7933] should_fail+0xb/0x10 [ 120.862963][ T7933] should_fail_usercopy+0x1a/0x20 [ 120.868019][ T7933] _copy_to_user+0x1e/0xa0 [ 120.872444][ T7933] simple_read_from_buffer+0xa0/0x110 [ 120.877841][ T7933] proc_fail_nth_read+0xf9/0x140 [ 120.882831][ T7933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.888403][ T7933] vfs_read+0x195/0x720 [ 120.892612][ T7933] ? __rcu_read_unlock+0x4e/0x70 [ 120.897626][ T7933] ? __fget_files+0x1d4/0x210 [ 120.902331][ T7933] ksys_read+0xeb/0x1b0 [ 120.906519][ T7933] __x64_sys_read+0x42/0x50 [ 120.911184][ T7933] x64_sys_call+0x27d3/0x2d60 [ 120.915942][ T7933] do_syscall_64+0xc9/0x1c0 [ 120.920505][ T7933] ? clear_bhb_loop+0x55/0xb0 [ 120.925217][ T7933] ? clear_bhb_loop+0x55/0xb0 [ 120.930010][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.936031][ T7933] RIP: 0033:0x7f17e4e3ca3c [ 120.940453][ T7933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 120.960073][ T7933] RSP: 002b:00007f17e3ab1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.968498][ T7933] RAX: ffffffffffffffda RBX: 00007f17e4ff5f80 RCX: 00007f17e4e3ca3c [ 120.976476][ T7933] RDX: 000000000000000f RSI: 00007f17e3ab10a0 RDI: 0000000000000011 [ 120.984469][ T7933] RBP: 00007f17e3ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 120.992486][ T7933] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 121.000472][ T7933] R13: 0000000000000000 R14: 00007f17e4ff5f80 R15: 00007fffa217c278 [ 121.008534][ T7933] [ 121.154353][ T7818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.183526][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 121.192670][ T7951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.200108][ T7951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.208787][ T7951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.216421][ T7951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.242869][ T7818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.253099][ T7818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.273532][ T7818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.289791][ T7960] loop4: detected capacity change from 0 to 128 [ 121.381680][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.402724][ T7964] syz.4.1531: attempt to access beyond end of device [ 121.402724][ T7964] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 121.422707][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.434855][ T7959] syz.4.1531: attempt to access beyond end of device [ 121.434855][ T7959] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 121.459101][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.461261][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 121.466200][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.475269][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 121.486669][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.498695][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.507529][ T7964] syz.4.1531: attempt to access beyond end of device [ 121.507529][ T7964] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 121.531905][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 121.556582][ T7818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.567122][ T7818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.648834][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.714471][ T7981] loop3: detected capacity change from 0 to 2048 [ 121.786720][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 121.804482][ T7818] veth0_vlan: entered promiscuous mode [ 121.813699][ T7818] veth1_vlan: entered promiscuous mode [ 121.845721][ T7995] syz.3.1539[7995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.845873][ T7995] syz.3.1539[7995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.866845][ T7818] veth0_macvtap: entered promiscuous mode [ 121.885309][ T7995] syz.3.1539[7995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.913166][ T7818] veth1_macvtap: entered promiscuous mode [ 121.938285][ T7996] syz.3.1539[7996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.938379][ T7996] syz.3.1539[7996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.962088][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.967525][ T7996] syz.3.1539[7996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.973507][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.005120][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.015572][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.025426][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.035905][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.045807][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.056382][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066413][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066452][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066533][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066613][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066632][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066648][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066664][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066701][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066743][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066755][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066769][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.066785][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.138461][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.146595][ T7996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1539'. [ 122.146621][ T7996] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.150362][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.262550][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.272410][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.282874][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.292730][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.303324][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.313211][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.323691][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.333549][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.344007][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.353871][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.364357][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.374221][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.384743][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.394668][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.405149][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.415016][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.425494][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.435336][ T7818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.445796][ T7818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.467551][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 122.467567][ T29] audit: type=1326 audit(1729758361.483:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.4.1542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85c3bcdff9 code=0x0 [ 122.468879][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.510088][ T7818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.518948][ T7818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.527729][ T7818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.536467][ T7818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.544912][ T8003] loop4: detected capacity change from 0 to 1024 [ 122.655353][ T29] audit: type=1400 audit(1729758361.663:4952): avc: denied { read } for pid=8014 comm="syz.1.1547" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.678645][ T29] audit: type=1400 audit(1729758361.663:4953): avc: denied { open } for pid=8014 comm="syz.1.1547" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.697952][ T8020] lo speed is unknown, defaulting to 1000 [ 122.702980][ T29] audit: type=1400 audit(1729758361.673:4954): avc: denied { read } for pid=8018 comm="syz.2.1483" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.731215][ T29] audit: type=1400 audit(1729758361.673:4955): avc: denied { open } for pid=8018 comm="syz.2.1483" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.755274][ T8021] xt_CT: No such helper "pptp" [ 122.755384][ T29] audit: type=1400 audit(1729758361.673:4956): avc: denied { ioctl } for pid=8018 comm="syz.2.1483" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.784907][ T29] audit: type=1400 audit(1729758361.733:4957): avc: denied { map } for pid=8002 comm="syz.4.1542" path="/224/file1/pids.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.809506][ T29] audit: type=1400 audit(1729758361.813:4958): avc: denied { write } for pid=8026 comm="+}[@" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.857151][ T29] audit: type=1400 audit(1729758361.873:4959): avc: denied { setopt } for pid=8026 comm="syz.3.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.011855][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.021001][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.074734][ T8040] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.116480][ T5837] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 123.134234][ T5837] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1748 with error 28 [ 123.146809][ T5837] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.146809][ T5837] [ 123.156606][ T5837] EXT4-fs (loop4): Total free blocks count 0 [ 123.162707][ T5837] EXT4-fs (loop4): Free/Dirty block details [ 123.168718][ T5837] EXT4-fs (loop4): free_blocks=68451041280 [ 123.174579][ T5837] EXT4-fs (loop4): dirty_blocks=1760 [ 123.180025][ T5837] EXT4-fs (loop4): Block reservation details [ 123.186112][ T5837] EXT4-fs (loop4): i_reserved_data_blocks=110 [ 123.220553][ T8043] loop4: detected capacity change from 0 to 1024 [ 123.251535][ T8043] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.347269][ T8055] loop4: detected capacity change from 0 to 128 [ 123.355899][ T8055] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.370413][ T8055] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.419293][ T29] audit: type=1400 audit(1729758362.443:4960): avc: denied { read write } for pid=8056 comm="syz.4.1557" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.445382][ T8057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1557'. [ 123.455726][ T8057] IPVS: Error connecting to the multicast addr [ 123.465031][ T8057] netlink: 'syz.4.1557': attribute type 10 has an invalid length. [ 123.560184][ T8067] 9pnet_fd: Insufficient options for proto=fd [ 123.565792][ T8063] ebtables: ebtables: counters copy to user failed while replacing table [ 123.612062][ T8069] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 123.841915][ T8088] loop4: detected capacity change from 0 to 1024 [ 123.900573][ T8097] vlan2: entered promiscuous mode [ 123.905665][ T8097] vlan2: entered allmulticast mode [ 123.917624][ T8097] bridge0: port 3(vlan2) entered blocking state [ 123.923959][ T8097] bridge0: port 3(vlan2) entered disabled state [ 123.943588][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 124.051820][ T8110] 9pnet_fd: Insufficient options for proto=fd [ 124.074806][ T8112] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.084422][ T8112] ref_ctr increment failed for inode: 0x34 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888102478000 [ 124.098555][ T8112] uprobe: syz.2.1572:8112 failed to unregister, leaking uprobe [ 124.115640][ T8117] loop3: detected capacity change from 0 to 2048 [ 124.120337][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1576'. [ 124.183870][ T8135] Cannot find set identified by id 0 to match [ 124.276264][ T8140] loop3: detected capacity change from 0 to 764 [ 124.984240][ T8156] FAULT_INJECTION: forcing a failure. [ 124.984240][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 124.996970][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: syz.0.1586 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 125.009160][ T8156] Tainted: [W]=WARN [ 125.012974][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.023050][ T8156] Call Trace: [ 125.026340][ T8156] [ 125.029301][ T8156] dump_stack_lvl+0xf2/0x150 [ 125.033922][ T8156] dump_stack+0x15/0x20 [ 125.038096][ T8156] should_fail_ex+0x223/0x230 [ 125.042812][ T8156] ? skb_clone+0x154/0x1f0 [ 125.047325][ T8156] should_failslab+0x8f/0xb0 [ 125.051997][ T8156] kmem_cache_alloc_noprof+0x4c/0x290 [ 125.057426][ T8156] skb_clone+0x154/0x1f0 [ 125.061751][ T8156] __netlink_deliver_tap+0x2bd/0x4c0 [ 125.067189][ T8156] netlink_unicast+0x64a/0x670 [ 125.072037][ T8156] netlink_sendmsg+0x5cc/0x6e0 [ 125.076832][ T8156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.082150][ T8156] __sock_sendmsg+0x140/0x180 [ 125.086892][ T8156] ____sys_sendmsg+0x312/0x410 [ 125.091738][ T8156] __sys_sendmsg+0x1d9/0x270 [ 125.096391][ T8156] __x64_sys_sendmsg+0x46/0x50 [ 125.101268][ T8156] x64_sys_call+0x2689/0x2d60 [ 125.105960][ T8156] do_syscall_64+0xc9/0x1c0 [ 125.110473][ T8156] ? clear_bhb_loop+0x55/0xb0 [ 125.115202][ T8156] ? clear_bhb_loop+0x55/0xb0 [ 125.119933][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.125979][ T8156] RIP: 0033:0x7f17e4e3dff9 [ 125.130397][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.150048][ T8156] RSP: 002b:00007f17e3ab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.158466][ T8156] RAX: ffffffffffffffda RBX: 00007f17e4ff5f80 RCX: 00007f17e4e3dff9 [ 125.166471][ T8156] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 125.174507][ T8156] RBP: 00007f17e3ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 125.182480][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.190454][ T8156] R13: 0000000000000000 R14: 00007f17e4ff5f80 R15: 00007fffa217c278 [ 125.198537][ T8156] [ 125.383704][ T8147] Cannot find add_set index 0 as target [ 125.389722][ T8154] Cannot find add_set index 0 as target [ 125.410859][ T8138] syz.3.1581 (8138) used greatest stack depth: 7288 bytes left [ 125.652621][ T8186] FAULT_INJECTION: forcing a failure. [ 125.652621][ T8186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.665949][ T8186] CPU: 0 UID: 0 PID: 8186 Comm: syz.0.1597 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 125.678212][ T8186] Tainted: [W]=WARN [ 125.682052][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.692207][ T8186] Call Trace: [ 125.695565][ T8186] [ 125.697720][ T8179] loop3: detected capacity change from 0 to 1024 [ 125.698516][ T8186] dump_stack_lvl+0xf2/0x150 [ 125.709458][ T8186] dump_stack+0x15/0x20 [ 125.713695][ T8186] should_fail_ex+0x223/0x230 [ 125.718477][ T8186] should_fail+0xb/0x10 [ 125.722677][ T8186] should_fail_usercopy+0x1a/0x20 [ 125.727831][ T8186] copy_page_from_iter_atomic+0x22e/0xfa0 [ 125.733654][ T8186] ? shmem_write_begin+0xa2/0x180 [ 125.738698][ T8186] ? shmem_write_begin+0xda/0x180 [ 125.743741][ T8186] generic_perform_write+0x2f1/0x4a0 [ 125.749061][ T8186] shmem_file_write_iter+0xc2/0xe0 [ 125.754182][ T8186] vfs_write+0x76a/0x910 [ 125.758565][ T8186] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 125.764385][ T8186] ksys_write+0xeb/0x1b0 [ 125.768705][ T8186] __x64_sys_write+0x42/0x50 [ 125.773316][ T8186] x64_sys_call+0x27dd/0x2d60 [ 125.778080][ T8186] do_syscall_64+0xc9/0x1c0 [ 125.782623][ T8186] ? clear_bhb_loop+0x55/0xb0 [ 125.787353][ T8186] ? clear_bhb_loop+0x55/0xb0 [ 125.792127][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.798043][ T8186] RIP: 0033:0x7f17e4e3cadf [ 125.802487][ T8186] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 125.822140][ T8186] RSP: 002b:00007f17e3ab0df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 125.830567][ T8186] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f17e4e3cadf [ 125.838589][ T8186] RDX: 0000000000040000 RSI: 00007f17db691000 RDI: 0000000000000009 [ 125.846575][ T8186] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004e5 [ 125.854594][ T8186] R10: 0000000020000542 R11: 0000000000000293 R12: 0000000000000009 [ 125.862664][ T8186] R13: 00007f17e3ab0ef0 R14: 00007f17e3ab0eb0 R15: 00007f17db691000 [ 125.870683][ T8186] [ 125.903475][ T8196] loop4: detected capacity change from 0 to 512 [ 125.931722][ T8189] pim6reg1: entered promiscuous mode [ 125.937207][ T8189] pim6reg1: entered allmulticast mode [ 126.047863][ T8224] sg_write: process 575 (syz.4.1603) changed security contexts after opening file descriptor, this is not allowed. [ 126.088601][ T8233] __nla_validate_parse: 8 callbacks suppressed [ 126.088619][ T8233] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1611'. [ 126.137763][ T8224] program syz.4.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.201466][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'. [ 126.413194][ T5837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 126.483949][ T5837] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 126.496615][ T5837] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.496615][ T5837] [ 126.506371][ T5837] EXT4-fs (loop3): Total free blocks count 0 [ 126.512455][ T5837] EXT4-fs (loop3): Free/Dirty block details [ 126.518405][ T5837] EXT4-fs (loop3): free_blocks=68451041280 [ 126.524240][ T5837] EXT4-fs (loop3): dirty_blocks=2368 [ 126.529615][ T5837] EXT4-fs (loop3): Block reservation details [ 126.535598][ T5837] EXT4-fs (loop3): i_reserved_data_blocks=148 [ 126.672842][ T5838] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 308 with error 28 [ 126.685611][ T5838] EXT4-fs (loop3): This should not happen!! Data will be lost [ 126.685611][ T5838] [ 126.725750][ T8256] loop4: detected capacity change from 0 to 1024 [ 126.809673][ T8258] netlink: 'syz.3.1616': attribute type 4 has an invalid length. [ 126.822058][ T8258] netlink: 'syz.3.1616': attribute type 4 has an invalid length. [ 126.951186][ T8267] lo speed is unknown, defaulting to 1000 [ 127.025939][ T8271] lo speed is unknown, defaulting to 1000 [ 127.026220][ T8277] loop4: detected capacity change from 0 to 512 [ 127.042109][ T8277] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.065945][ T8277] EXT4-fs (loop4): can't mount with commit=2, fs mounted w/o journal [ 127.113002][ T8280] loop3: detected capacity change from 0 to 512 [ 127.159050][ T8287] FAULT_INJECTION: forcing a failure. [ 127.159050][ T8287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.172269][ T8287] CPU: 1 UID: 0 PID: 8287 Comm: syz.4.1627 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 127.184620][ T8287] Tainted: [W]=WARN [ 127.188429][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.198616][ T8287] Call Trace: [ 127.201897][ T8287] [ 127.204884][ T8287] dump_stack_lvl+0xf2/0x150 [ 127.209537][ T8287] dump_stack+0x15/0x20 [ 127.213761][ T8287] should_fail_ex+0x223/0x230 [ 127.218506][ T8287] should_fail+0xb/0x10 [ 127.222696][ T8287] should_fail_usercopy+0x1a/0x20 [ 127.227763][ T8287] _copy_from_user+0x1e/0xd0 [ 127.232359][ T8287] generic_map_update_batch+0x379/0x520 [ 127.237924][ T8287] ? __pfx_generic_map_update_batch+0x10/0x10 [ 127.244064][ T8287] bpf_map_do_batch+0x28c/0x3f0 [ 127.248951][ T8287] __sys_bpf+0x2e5/0x7a0 [ 127.253310][ T8287] __x64_sys_bpf+0x43/0x50 [ 127.257825][ T8287] x64_sys_call+0x2625/0x2d60 [ 127.262512][ T8287] do_syscall_64+0xc9/0x1c0 [ 127.267024][ T8287] ? clear_bhb_loop+0x55/0xb0 [ 127.271862][ T8287] ? clear_bhb_loop+0x55/0xb0 [ 127.276594][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.282574][ T8287] RIP: 0033:0x7f85c3bcdff9 [ 127.287024][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.306662][ T8287] RSP: 002b:00007f85c2841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.315110][ T8287] RAX: ffffffffffffffda RBX: 00007f85c3d85f80 RCX: 00007f85c3bcdff9 [ 127.323087][ T8287] RDX: 0000000000000038 RSI: 0000000020000280 RDI: 000000000000001a [ 127.331064][ T8287] RBP: 00007f85c2841090 R08: 0000000000000000 R09: 0000000000000000 [ 127.339039][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.347015][ T8287] R13: 0000000000000000 R14: 00007f85c3d85f80 R15: 00007fff0ebff588 [ 127.354997][ T8287] [ 127.514016][ T8282] netlink: 'syz.0.1625': attribute type 4 has an invalid length. [ 127.526668][ T8293] FAULT_INJECTION: forcing a failure. [ 127.526668][ T8293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.540153][ T8293] CPU: 0 UID: 0 PID: 8293 Comm: syz.4.1629 Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 127.552393][ T8293] Tainted: [W]=WARN [ 127.556220][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.566302][ T8293] Call Trace: [ 127.569606][ T8293] [ 127.572566][ T8293] dump_stack_lvl+0xf2/0x150 [ 127.577222][ T8293] dump_stack+0x15/0x20 [ 127.581413][ T8293] should_fail_ex+0x223/0x230 [ 127.586119][ T8293] should_fail_alloc_page+0xfd/0x110 [ 127.591477][ T8293] __alloc_pages_noprof+0x109/0x340 [ 127.596694][ T8293] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 127.602145][ T8293] folio_alloc_mpol_noprof+0x36/0x70 [ 127.607454][ T8293] shmem_get_folio_gfp+0x3d1/0xd90 [ 127.612638][ T8293] shmem_write_begin+0xa2/0x180 [ 127.617551][ T8293] generic_perform_write+0x1a8/0x4a0 [ 127.622845][ T8293] shmem_file_write_iter+0xc2/0xe0 [ 127.627967][ T8293] vfs_write+0x76a/0x910 [ 127.632259][ T8293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 127.638108][ T8293] ksys_write+0xeb/0x1b0 [ 127.642435][ T8293] __x64_sys_write+0x42/0x50 [ 127.647037][ T8293] x64_sys_call+0x27dd/0x2d60 [ 127.651735][ T8293] do_syscall_64+0xc9/0x1c0 [ 127.656305][ T8293] ? clear_bhb_loop+0x55/0xb0 [ 127.661072][ T8293] ? clear_bhb_loop+0x55/0xb0 [ 127.665798][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.671804][ T8293] RIP: 0033:0x7f85c3bccadf [ 127.676219][ T8293] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 127.695874][ T8293] RSP: 002b:00007f85c2840df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 127.704338][ T8293] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f85c3bccadf [ 127.712311][ T8293] RDX: 0000000000040000 RSI: 00007f85ba421000 RDI: 0000000000000006 [ 127.720285][ T8293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000448 [ 127.728334][ T8293] R10: 0000000020000902 R11: 0000000000000293 R12: 0000000000000006 [ 127.736332][ T8293] R13: 00007f85c2840ef0 R14: 00007f85c2840eb0 R15: 00007f85ba421000 [ 127.744412][ T8293] [ 127.770811][ T8283] netlink: 'syz.0.1625': attribute type 4 has an invalid length. [ 127.789306][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 127.809485][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 127.809503][ T29] audit: type=1400 audit(1729758366.833:5072): avc: denied { setopt } for pid=8289 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.916790][ T8307] Cannot find add_set index 0 as target [ 127.941254][ T29] audit: type=1400 audit(1729758366.963:5073): avc: denied { create } for pid=8309 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.945540][ T8310] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.969882][ T29] audit: type=1400 audit(1729758366.963:5074): avc: denied { write } for pid=8309 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.064109][ T29] audit: type=1400 audit(1729758367.083:5075): avc: denied { shutdown } for pid=8309 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.110814][ T29] audit: type=1400 audit(1729758367.113:5076): avc: denied { write } for pid=8309 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.181104][ T8320] netlink: 'syz.2.1638': attribute type 27 has an invalid length. [ 128.237180][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.244504][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.322304][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.334135][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.382536][ T8320] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.391575][ T8320] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.400578][ T8320] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.409527][ T8320] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.424605][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1640'. [ 128.465839][ T29] audit: type=1400 audit(1729758367.483:5077): avc: denied { ioctl } for pid=8340 comm="syz.1.1644" path="socket:[24729]" dev="sockfs" ino=24729 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.496511][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.505018][ T29] audit: type=1400 audit(1729758367.523:5078): avc: denied { read } for pid=8342 comm="syz.3.1645" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.508172][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.547423][ T29] audit: type=1400 audit(1729758367.523:5079): avc: denied { open } for pid=8342 comm="syz.3.1645" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.571135][ T29] audit: type=1326 audit(1729758367.563:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dc22dff9 code=0x7ffc0000 [ 128.594532][ T29] audit: type=1326 audit(1729758367.563:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22dc22dff9 code=0x7ffc0000 [ 128.594583][ T8333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.594676][ T29] ================================================================== [ 128.594715][ T29] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 128.594758][ T29] [ 128.594768][ T29] write to 0xffffffff88bc0d37 of 1 bytes by task 8333 on cpu 0: [ 128.594789][ T29] vsnprintf+0xdd8/0xe30 [ 128.594826][ T29] vscnprintf+0x42/0x90 [ 128.594857][ T29] printk_sprint+0x30/0x2d0 [ 128.594886][ T29] vprintk_store+0x570/0x810 [ 128.594919][ T29] vprintk_emit+0x15e/0x680 [ 128.594955][ T29] vprintk_default+0x26/0x30 [ 128.594987][ T29] vprintk+0x75/0x80 [ 128.595011][ T29] _printk+0x7a/0xa0 [ 128.595040][ T29] chnl_net_open+0x525/0x5a0 [ 128.595081][ T29] __dev_open+0x1f7/0x2e0 [ 128.595106][ T29] __dev_change_flags+0x155/0x410 [ 128.595130][ T29] dev_change_flags+0x59/0xd0 [ 128.595158][ T29] do_setlink+0x844/0x2490 [ 128.595181][ T29] rtnl_newlink+0xbc6/0x1690 [ 128.595217][ T29] rtnetlink_rcv_msg+0x6aa/0x710 [ 128.595241][ T29] netlink_rcv_skb+0x12c/0x230 [ 128.595281][ T29] rtnetlink_rcv+0x1c/0x30 [ 128.595331][ T29] netlink_unicast+0x599/0x670 [ 128.595367][ T29] netlink_sendmsg+0x5cc/0x6e0 [ 128.595390][ T29] __sock_sendmsg+0x140/0x180 [ 128.595419][ T29] ____sys_sendmsg+0x312/0x410 [ 128.595457][ T29] __sys_sendmsg+0x1d9/0x270 [ 128.595491][ T29] __x64_sys_sendmsg+0x46/0x50 [ 128.595526][ T29] x64_sys_call+0x2689/0x2d60 [ 128.595554][ T29] do_syscall_64+0xc9/0x1c0 [ 128.595577][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.595613][ T29] [ 128.595621][ T29] read to 0xffffffff88bc0d30 of 8 bytes by task 29 on cpu 1: [ 128.595642][ T29] data_push_tail+0x102/0x430 [ 128.595674][ T29] data_alloc+0xbe/0x2c0 [ 128.595703][ T29] prb_reserve+0x85e/0xb60 [ 128.595732][ T29] vprintk_store+0x53f/0x810 [ 128.595763][ T29] vprintk_emit+0x15e/0x680 [ 128.595797][ T29] vprintk_default+0x26/0x30 [ 128.595825][ T29] vprintk+0x75/0x80 [ 128.595844][ T29] _printk+0x7a/0xa0 [ 128.595866][ T29] kauditd_hold_skb+0x1a3/0x1b0 [ 128.595899][ T29] kauditd_send_queue+0x288/0x2e0 [ 128.595930][ T29] kauditd_thread+0x42a/0x650 [ 128.595954][ T29] kthread+0x1d1/0x210 [ 128.595975][ T29] ret_from_fork+0x4b/0x60 [ 128.596000][ T29] ret_from_fork_asm+0x1a/0x30 [ 128.596033][ T29] [ 128.596039][ T29] value changed: 0x00000000ffffebc6 -> 0x000a646564657463 [ 128.596055][ T29] [ 128.596062][ T29] Reported by Kernel Concurrency Sanitizer on: [ 128.596078][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 128.596114][ T29] Tainted: [W]=WARN [ 128.596122][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.596136][ T29] ================================================================== [ 128.907256][ T8336] pim6reg1: entered promiscuous mode [ 128.912704][ T8336] pim6reg1: entered allmulticast mode [ 133.048332][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 133.048350][ T29] audit: type=1400 audit(1729758372.073:5097): avc: denied { read } for pid=2953 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.076776][ T29] audit: type=1400 audit(1729758372.073:5098): avc: denied { search } for pid=2953 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.098504][ T29] audit: type=1400 audit(1729758372.073:5099): avc: denied { append } for pid=2953 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.120776][ T29] audit: type=1400 audit(1729758372.073:5100): avc: denied { open } for pid=2953 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.143288][ T29] audit: type=1400 audit(1729758372.073:5101): avc: denied { getattr } for pid=2953 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1