last executing test programs: 2.979085075s ago: executing program 4 (id=1166): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000140), 0x0) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='cpu&00\t||') 2.886083513s ago: executing program 4 (id=1168): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r5 = socket(0x2, 0x80805, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="4345f97975e109fd16f4839aa922b3c99d755f00c17fe49de7e0c9695171b26efce3e7800d3102a2e33c128e070f446aa6ade486bffe65e88df7fb21393673d2aeb94976a900990db21d4e149c354e333870bedb408a4d25eef163d31e253aadc927d7780bc88048b1c26af34b10ec7acd5bb37dffc037ffde88c4450780a80ad0de641444393c4b870fb022968ad6f968c2e898a838ad2c24bf3acd9675d094eccbe46ad3265ca3a02f3d56bda054"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35a, &(0x7f0000000b00)="$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") r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r8, 0x7ffffb, 0x0) write$binfmt_elf64(r8, &(0x7f0000000240)=ANY=[], 0xfd14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) 2.030809352s ago: executing program 2 (id=1178): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x4, 0x3, 0x7ffc0000}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_vlan\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x237, 0x3b4622b4, 0x0, 0x1500, 0x1, 0xfffffeff, '\x00', r0, r1, 0x3, 0x5, 0x1, 0x5, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="000000f5870000a5d4bc6a89191d53c5b76b000000dc611fb3f26700000000f633316e0337f429045319000000000000435fb5b40903233ef8209c00000000006f9380ff000000666d761bc5750dab7cd9601545e2d2a726884d7b35943cc3e29d5e3acb201185b5aa766a5f3d0522b418fc823e5832194204abe8c949bc43fb564fb6aa3f7b5995a8a88566dd3d27b0ef4f42e9300d60ed6197a2544091ffcb3ce5a3f11e92a508edc4a572c6cdad28e65de0fac596c89e67033546784d108ac798ab05cd98ebfb7f5ed9fc388efae14a2a4e465e1c9bfc1c9e11fa54ea9f4830e657f11c0ee0c671da6bc7219107aa2da076df0b35ad"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) sysfs$1(0x1, &(0x7f0000000000)='dE\x00') statx(0xffffffffffffffff, 0x0, 0x6000, 0x8, 0x0) 1.960507049s ago: executing program 2 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x81, 0x0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x561, 0x10001, {{0xe, 0x4, 0x0, 0x18, 0x38, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xd8, @broadcast, {[@ssrr={0x89, 0x1b, 0x5e, [@dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010102, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x44, 0x7, "fc17ecefd9"}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES8=r1, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r3, &(0x7f0000000000)=0x6000000000000000, r0, &(0x7f0000000040)=0x10000, 0x2, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) 1.959582149s ago: executing program 4 (id=1180): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/softnet_stat\x00') preadv(r2, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="020018a1229224c850bd000000830004008a1bdfd470fa7c95c397f1a0159275d92a05c1c26b41a8f08326f390e490ddd8bf46ebfcbbfef6d381acd3b869e78ab3175eca370629fe712cefbd5f13fa37aed03a6da9a9e1a79bbb54e1c819ad1d033264182d11b2e8e57974dbbc00000000a2189003ecbbbf0d8a65f43276fd3e122093195173e37e2cd0d981ec2439062316a63034a7f43ea196bf30d701425f6b067c89d2e468b8681c9b33b906981b2601d46151", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x0) 1.940750971s ago: executing program 2 (id=1182): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000280)=""/198, 0xc6, 0x0, &(0x7f0000000380)=""/74, 0x4a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000006232900000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000009500"/79], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3dacaa57cb3dc424e2adae300a914672ff77", @ANYRESHEX=r4, @ANYBLOB=',k']) 1.866069968s ago: executing program 2 (id=1183): socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000006c27cb57e462df6d22f69c80906c67f5a615fe6e773159b86b720a9846f3c72fe898dac9472"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fffffdb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000340)={[0x8000]}, &(0x7f0000000380), 0x8) r7 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r5, 0x3, {0x0, 0x0, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r7) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="4ddad9361030d72fe3a312599103447f4cab105291b3ee253c2465494edf07a17530ccf44a6879f054c4e73eda6e7fc3993e34b94b188be50c26f49ac8523ceeef8e59ede20f8f1cdaecefef7cebf37fdbd3", @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) creat(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.19633602s ago: executing program 1 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = semget$private(0x0, 0x5, 0x6a4) semtimedop(r5, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x3938700}) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x280) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f00000002c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 1.141008925s ago: executing program 4 (id=1197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x4}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) lseek(r2, 0x15a, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.012838256s ago: executing program 4 (id=1198): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/softnet_stat\x00') preadv(r2, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="020018a1229224c850bd000000830004008a1bdfd470fa7c95c397f1a0159275d92a05c1c26b41a8f08326f390e490ddd8bf46ebfcbbfef6d381acd3b869e78ab3175eca370629fe712cefbd5f13fa37aed03a6da9a9e1a79bbb54e1c819ad1d033264182d11b2e8e57974dbbc00000000a2189003ecbbbf0d8a65f43276fd3e122093195173e37e2cd0d981ec2439062316a63034a7f43ea196bf30d701425f6b067c89d2e468b8681c9b33b906981b2601d46151", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x0) 1.008195747s ago: executing program 1 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 758.03632ms ago: executing program 1 (id=1202): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_clone3(&(0x7f0000000340)={0xa0002000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911021000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xf1\xd8\x00'/233, 0x40, 0x0, 0x0) 621.967183ms ago: executing program 3 (id=1207): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff0000000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7fffffff}]}) sendmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="86af7ae5820e7addcca5a3b8ab6c8c5df832334657b9ed986f487262dd9da1392b884bbb7f6c25f0a99600903e9181617710b5487ec964b99c3ce40131e901be4dc5f8ca23937815d199bd6655752685e24d78390ef359490bc9ab986b2e13b30ca198bbd7f8838e75e8941006cb0e5769270d4ec85cd130c4ac2cd8235934302afafd3046800d85653625e99a9c1e5c521b6b2b8ccffd8ecb9376c393aebcfa4bfeef176b52431192af975ad9261424", 0xb0}, {&(0x7f0000000400)="8392997c07b24955004fa1cad7e8cb828ced8f3bbaa0d293cea5167d7a6670ec3d7881a7e7913af852e5779fa2e908f7d7d2565880a654a675ba056765dcee6f99094ba01916f3d70f89cac502d447d61e74fe0f0939f3a3c8e65939d4b9f9902d54fcb1ecf72869f65c7d23db580773a2e2cc3fdf9639e5b62e98485fbdc2b3", 0x80}], 0x2, &(0x7f0000000480)=[{0x40, 0xd79758264cf1930e, 0x6, "d3c9dec1f367f945154984d5c330b14bf661698f0364357fe657af6524c9af8451f4f5f62e093a1afd7c"}, {0xa8, 0x10c, 0x379, "07191ea96f4d8e2535ecba96c4149c183e21950d2e7853cc1da3e65680ef07ec7df306d66661d156192c8d16008e7e74a9a1c85552da9c84e717a02aacd29d93331743ab8f36fe85060289d4ea18e05e591d0d090404a8237c05faca3479b7c43122caa4586d94d1471567399cff2f8f6c9380be68e732e0b4835fdf17fcc030dee0f969273d26aaa285870c4139fc316c05c69b2350"}, {0x98, 0x0, 0x10000, "a4aa6c8e7dd9b2c24f5a62d615a8ed5941a6fe3ddea6d93acd3e64778808de2022a59c26458d833c8988f566fd1e21e4a49b3940bd8fbf681164b6486a0fae470d52504611b262d1a6dc4f1111de134c8bfa681191550d7d83273c4de7f7d38a45ef36f31ed3c5220f096e21b11087b0b01e3aadde0f87acfc6fdf43dd00d2db5d7a0e6062548a6b"}, {0x10, 0x10b, 0x10001}, {0x90, 0x0, 0x5, "d9026659fef2e8066b5b48d0f26f34594a9cd53a8881f41f4aff35f7a65b7cd01ad13b40526e2549bb37f89706eeaabecbb4d3252bf9b135f47b803bfc80e7026678b8516dc0505f4923dfbbb03161e29d78cee68d7ad11d807d067a2a2e209416811b861c1fc7c1866a3d5933d7206f322b964528542044966e0938"}, {0xe0, 0x10e, 0x9, "3bc76ac351103dfc212cc36a01a8a35ac1d667acc182ee9c064102ce337a6c6c311f301ea3fed3fbcbe5291cc0d8243d511da7ed05bd92a73f970f520dd6762d0d1f4cfb1c0cb17333cf6a69effda4e96e5126f848f80e6051ebf20fa3bb0bda29898f6b05db4503a533837f71f4b64106cd57eb6a226daf784ff1737ff2c9240af462ed4ff2536604795b79d9ccf72ebc1c501d261b29be7512f20f224501147c2ee1a282ec5f8d1b045943e4f507e63188bf9d8f309f3959148a7fe7e91a1d246a8268c74416ab7c2757252059c1"}, {0xd0, 0x102, 0xcea, "71bfb210b2eab5382a1a5ed8b5c9ce64da66f0558a9521c149617e0b7c7e22eb140930bfb83d9a8ac050f279aaafc11187418db7f90bf388fb7907bef8b81b9e6a83f699dc0fdaaa1d5113b19d6a7cd22c2081fc3f0498693df21a6f6ebce96816c9a041b74af2e03464f60bb9e492626a40120e0864dcdc7ab045ab56e84cb32c31c3b9203c31af7dbdc12ab87d99e470ceb42ed9da26c7a2dd56f0c5b0b6151322dd396c4d4770d3a5d387e6189b798f4b29d3c817b72cf8"}], 0x3d0}}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e20, 0x2cd, @private0, 0x3}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000a00)="c54f174c4b50d581dc0d3d9470b36a2d6eacd4b9ef63dd796ac2d66cbce1fca1fe6de8c2c637feb1e783a0f512c8f5588a7f9095b5bb4e9a83d903b0181a2fe0ccbcf1787d8983227001c6fbe0559b145649f5e6755a304071faa226118a18c21fb552dc2e1043d9f4d3a0cd3772ef999784c16f88f3d8dc7836211994b2172df291f5303a", 0x85}, {&(0x7f0000000ac0)="23d5b92b60f8a26b71302faf66463bb4052bf3a0db06e316f774e9e31f1c9b199cd1a31dbd104ed572282dedb7ad67d71a534e5bd08b849088e9f2316b5ac76bba4ccc5edd3ae64d0af8cac675d922d6efcd76ed385f2e57133a4d2e654c131ff66aa95006", 0x65}, {&(0x7f0000000b40)="311174cf8b1f954b97ba16111ce09de23116153155f2924ef609045c7f324ab2ba38855917f7269fdc2c6ade42c835e0ebf103ecbcdb152c3c780d605c6ced408512a9a8a5abbe74", 0x48}], 0x3, &(0x7f0000000bc0)=[{0x50, 0x10a, 0x0, "ddd80ba5877bb3e6bc03c68624d4f4d92685aeb344cbf0e18c402fae8244887d97f2d98c6b301af4f98e37b3d154f2b1fbc9032cb2a931a7e1cca56402e32b"}], 0x50}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c40)="4187af201bb683378d337a902d71c2bad7f03ffdd19bbe20b081343ad598c74bdaae59e4ab740959c9fa23a6f476a520f3b9bdd2516968946a330744441df732e78c79ede0d979eae67336bce0e548dfbf57e43f8e7a17784af46fb1247105f7b259d4ea6314819bcef08d857e558e046049294f4d3d686e43234d49e1bf031554fb81ea95cbbc0b3ddcd333498314a7bf196fa10f841e087ff52dbccbae85f4c8e46e8d", 0xa4}, {&(0x7f0000001380)="03a830e481c35a57cfa79a3fba2fad8d5c56d02e90f18e9931d9b32504503fb25cadd9bb8b2dae8c8195b94756706ef4f4d0a8adc98963281e06a15c9e6e3cd0adf02d4a43cef08b74eed01006c284903e50e48767b6179eb08cade2bffbfc8531bed4a33a99123497a608838f75b7cad981821aefeb5eb233b479165187e95dded6235d634a1971bc1f7b7b91569a0ea1dd8b6aac9acd521e5614d3528468975b265f6341b51f91", 0xa8}, {&(0x7f0000001440)="b8d9e58345eb1b15229c021b9a4e0ab3f8bf4671910eed33d78ecec08aa2c9557691fab1eaf3c4fcde4532e62da957aea4f9dbd2cdf1583655b8a3a92bbe61205a5e247b19c70307a2490d6b5904743506a8003edb3242cc249209dece7c5e7135740629fabd177c698eb9de6dedccc524c20260bf012ce2f0c4db8948af42f594c3e78156c78d03cc4dda23b790dd14eb92082aa6794ee7a0d368659092fd48", 0xa0}, {&(0x7f0000001500)="5a2ed499ad085f6f0b6998d54a3dfd47489739e6f69046dce6772c4489f595ec915a47a0feb17c453e9ab04b8cc58756fbdb9ece5ba99f9e9fa37d2496065780366ca166539a503cd784a2d613750ac80a6c62938f8633b0c780fc50fdf69ff7e86a7a86e26ff254dcc3d2a3b7c1d48f68bad21e95a6500ec5d6713e49b1", 0x7e}], 0x4, &(0x7f0000001580)=[{0x1010, 0x10a, 0x8, "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"}, {0x100, 0x29, 0x8314, "132e2da140ae5a8cea4def25243ae8d57156a7040072b9550782977f6d8f33f0aeca2e0596009f24286a3e7df9f87b82323ca19563d36548e3d480acde197000e35426713bfc741c48988b07cbdb57db2734c5e63f0318d1a0f0982d384ee1647e26250e3cb1e417c901f7d4b16b4bc3eca9ca707c3638b157e723cee4996e2f0ee2ea8cf5783f407aeea2a5aea57190a85d11f76d92b23f82f307cfd12324d7fff4704874c51bbc32aeb70bb9a89f171140f86d429029775a0699d63f431263fc1e260ffa806f027d7ee3a280a58c47d5ff60cc47fc60fd3388bf2c52d7fe0ae5f6d7eaa0f0558e9a"}, {0x30, 0x115, 0x6f6, "3492efa82092b0716873c0a62a40aeb67ccbb79325d880ea7bf422e5"}, {0xf0, 0x113, 0x2, "dd803f5bcac382b92ae91391d4e2f741237a9a5e6cab52787dd52f1d83128854d3b0a84fa9ba6e4bdd05aa255ac1e56040acd323b1ef9459c59fdadeb25e7a5a8a9b887d277abda48e2d7459347c6542e90985e676cfda14700394f4c391f1226135b0aae2390adae619141096f658d4ebb8c59421132e36f706db1cdb3dad18da0c3439074d68dc926524194343579aac93efb0bb2302efd7217e474b8afae5e5ed7c13ac34de78ced1a86cb1854d7d3eeeefb0b51a8a2a56fb6400b1ab1eda80ec479bbc200316be7c5c1d8088102251777c5074ccb2d88dab16"}], 0x1230}}, {{&(0x7f00000027c0)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 'virt_wifi0\x00'}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002840)="9af1ccc444427b62edd1a812266b14d8b7e8bd367a582cce56624f147f6539162ddeda36824668b9bbbea2ccc960260256b419b1e796c2abe3251ba127bc19d827ff67ac2cd0e9abd2ed3827664f95e652de91d4081f2bc42ca1849f947271f9d4cf7fbe1648837cdbcbfbd2d11df934b1a5d470151027bd5f010feb1adcb7e2e784cf6dae4b62f8e516a236ee5cb8a9e847856a336c2223b5674479f432e75c6ecd33a8dfaa36c509dc7190e88df76dd6e1313ea1bc394849435fac5131b069bd76a45bae07830054d4543216ac1dfe93a0a77fa3953bdeef5351cc7ff27deff9cd17", 0xe3}, {&(0x7f0000002940)="bbdf108757e146764e7c44e514279ea96748e8aeb5cef63e9e51393c2bd97b656186e127189b7971541701c001c745b344f8e0d17429b7b2b3e9d718b50533db556056158fa1eb7e6f1f0d04c97a26d7d402b4838e442ade05aec0f0d714ce1c29b25303b7cb12902fd97f523f1563a99c", 0x71}, {&(0x7f00000029c0)="c6b812e244b7cb74ff43a549615e78847c611fd4cd3bbd5688a9a829d9585fd30c1e4d6c7b66df041d5146452daacfe755e39bc22c609d56d0ad735871bdb9cb76e3e2c17f6a987ca14a090d4ad5822fc2cf147db00ed72c71c2d654036a416f1e5b996e746e3db1f5a24235b0fcd93b65c0e201dc93a3c7508b74c31719f6aca940eadc413e12c1d69e867eb2171b9d6b2bd8b42b853c61aaa9d6cd8aff226822047435260a9f46d4ec491df1b2d3e3949bbb73524a8518b4f9ab24d2120c2ea5568a69220a318ceb58c2a9b4f5a4feabf516fe4e6f09da2e738190f8d5e86638e01868cee4ebc0dd57253c11cbaccad22ccc6ad7486b", 0xf7}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="98d9f1200b237f6ed58b2a336655bb8f1eb3001cd9f3f4ed37938c0de909b08b73fa1ee2c80538e6df8f311d6d23eb638cb19c47eb29f1bee6870c7b287f9f28038df3b93225a284eb1afdc5b1f1c00a904baad0844ec07cc0f4a4a1168d37f3bae358ad5bdcb93632dc9e311dfd7a239904d4d337c8479dc1bb0042615b247c62a8a2f34575a1fd4096d4f9708e896ab7fb349eeda3487045ebce38581b895adb4a974468dac4dc3ac670df63", 0xad}, {&(0x7f0000003b80)="155d8b7a95288d3acf394067", 0xc}, {0x0}, {&(0x7f0000003d40)="0729a2b5515ca9a7c79da3d018c8ddec098964c3ffa7495b09bec786c8772a03a4ee184641dc277a6876cafd988e90ecd047482f265bcffdf27e986bef7867d80e6a25cd5e60a71d9f12ff31e9655f080795f2fde769761d8704ffe8753d8165959ab2d1fa1147a94ff50ba1cd6eb1a38a6ada9fc48174bd363e091d71d51666c9dbf47b932bc2db9a189f4df9a3ba2f6e45a3f870c645796ebd3cb646377165fe2fcbe6fa0b8a98e36ab1e98ca5c52fbc29d260e18c94be268eeb74a9ddc86656", 0xc1}, {&(0x7f0000003e40)="e587f01ff2eacef8d48c404abc6014d5d4d1c8ace37011e7d294830e2da4a433be8963f8fd6394793a8d9c7f708645e558a64c79bea5491f4ad35ca62b3fcea239bc5b98bc856a1cfa5144871e93a338dddf9778e107042056ec5cd7fc44013001674ca1f5d6a0329c5b5c15bfaae4ae0449bb24fbfdf4c4896e8c9e7f201368217add55559eb618835fb3cd6510b13e889352d2b38a0a701f1264b7275584fcbfe870fa4c8735919263332441628a96a1a1c851ef8f4a86895a550db1a310ec05f3e07d26063498a33f7116a5c6c89901a4a7699b7cc83d15b32372", 0xdc}], 0x9, &(0x7f0000004000)=[{0x30, 0x102, 0x6ed, "f6c5065dbfced055701de2640a117b30ed82fa5fe6672e46ba5b"}, {0x18, 0x110, 0x4, "b8"}, {0xb8, 0x103, 0xffffffff, "c9a7e95d66b8786d7237a92f3406bf1fe1790d386c52d0e435fe7935d9fe1c824b1910fd56d836c31cc1eff4f6462f07ac489d5c26d1a735975c7c39ab09d1c7bc9f2c62c9070746677f742702715f88e98de997b9cfdb3bfe82a46464d0aebcb760428a381c9334c22b3dc6544e3428b97f0ae77f70f2e00eb3e34ff521baf708c5039b313b196f575a2338fcfe6e408b1984a3094479b8130dfe09bd66d8135aa8cc73c81b"}, {0x68, 0xff, 0x9, "fad23748d5f1d2fcbf7124110a177f81ca9427f9a9c2467c9baeb2a274bc2a089aa02816086152ac99571ec80d7888b5a896016f07781f4a7cbeb0d2bcb5069bc722bfe15a246585c37867e6160275616c844c2c"}, {0xb8, 0x10b, 0x7, "b72f49c217b0a3df2736aa287de0a09a04efeac87419c305353a961e8b1efb08ba4554abfa9c9114ffc4af906acdbd5c9d5a15882d244d45c491049030097af5c631dc9173fd2a75ea77584f5209ab109f042d1c4c73fab2cc3ecf78bc3201e44035019cb9e9d6b2db397ee1761023fb7a73f75cb8c642182d774b2bad34947c404d9a40a3e233aa1c217477b10f94d3fbb342bc1aecefaa39505946a95a65d22583f708ad15"}], 0x220}}], 0x4, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) getrlimit(0x5, &(0x7f0000000080)) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES32]) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}], 0x1001, 0x0, 0x0, 0x0) 565.234988ms ago: executing program 1 (id=1209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/574]}, 0x2b6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c75737465720000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000004493000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 553.685329ms ago: executing program 3 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = semget$private(0x0, 0x5, 0x6a4) semtimedop(r5, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x3938700}) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x280) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f00000002c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 488.380925ms ago: executing program 1 (id=1212): socket$kcm(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7030000e5ff0000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x9, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt(r0, 0x4, 0xcb, 0x0, &(0x7f0000000380)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @desc3}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc1}}) 422.068861ms ago: executing program 3 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$eJzs27FqU1EYB/B/alpv7GAHJ1EMdHEq6hMYpIIYECoZdDJQXVoR0iUKYp/HWfAVfBmXDtItcnujbWMKrWmaGn8/OJyPfDnkuwfCd4ZzX916u7X5bufN4se9FLVmFpKH2U9WymioNpyLg3gpx9QyiR8TrQYA/srGRreVfJ11GUxRr9fq3lhdHpPpfJ5BOQAAAAAAAAAAAJyDs9z/X0g+jd7/373gegGAyVX3/5lHjeHc67W6t6vz2wj3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDZ2R8Mrg/KUQzn4biapEjSSHItST1J+fms6wUAJrc/ON73T+r/SWpJ9H8AmAPPX7x82mq31zeazSL5vtvv9DvVXOUfP2mv32seWDlctdfvd64kKUd7/X6Vbx7PLx6cG8r1D8bml3J3tcqXuUfP2iP55WxexAYAwH9orfnbkf7+q7cna2vj8mV/rqIj54OR/l3PzfrYn1yY0qMAAKe08/7DVnd7+3Xv3IPa2VY1hgWd/J0v9WmVOmnQmPpmXorgW+0ylJFcjt34h4PidPsMzLfDP/1opphNQQAAAAAAAAAAAAAAwB8u4pWjJHdm/ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyXnwEAAP//2d9NhA==") 398.344983ms ago: executing program 3 (id=1216): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='cpu&00\t||') 364.557367ms ago: executing program 0 (id=1217): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a905000000007464000000", 0xb}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d17879358b394762d6a5387374ccf333", 0x20}], 0x1}}], 0x2, 0x0) 363.377947ms ago: executing program 3 (id=1218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000013c0)={0x1508, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1}, [{{0x254, 0x1, {{0x0, 0x7}, 0xbe, 0x0, 0x40, 0x5, 0x1d, 'syz1\x00', "117a00f3b198aad8af74f48528989d08edc1dfa07bd968cd546cf9f84172987a", "43da5a338a8b48fca577309fdaf5c445b55ac3a5bb02f61ae87925b6a56d9073", [{0x400, 0x8, {0x1, 0x4d3f846d}}, {0x8698, 0x2, {0x0, 0x5}}, {0x4, 0x4f26, {0x2, 0xff}}, {0x8, 0x7}, {0x400, 0x1, {0x1, 0x80000001}}, {0x6bef, 0x4, {0x1, 0x53}}, {0x800, 0x1, {0x2, 0xdc}}, {0xfff, 0x1, {0x2, 0x3}}, {0xe, 0x5, {0x1, 0x7}}, {0x0, 0x0, {0xeb1a0c76c9fd68bb, 0x10000}}, {0x7, 0x5, {0x1, 0x400}}, {0x4, 0x43b6, {0x2, 0x5}}, {0x3, 0x1, {0x3, 0x5273}}, {0x3ff, 0xaa71, {0x0, 0xaec3}}, {0x0, 0x5, {0x3, 0x187a}}, {0x2, 0x3, {0x2, 0x8}}, {0xfff7, 0x46a, {0x2, 0xf}}, {0x401, 0x7f, {0x0, 0x7}}, {0x9, 0x2f6, {0x3, 0x8}}, {0xe90, 0xf000, {0x0, 0x26}}, {0x9, 0x9, {0x1, 0x5}}, {0x1800, 0x9, {0x2, 0x800}}, {0x2c, 0x3, {0x2, 0x2}}, {0x5, 0x2, {0x1, 0x3ca7cd6f}}, {0x7, 0x1, {0x1, 0x4}}, {0x3, 0x264, {0x0, 0x2}}, {0x2, 0x17, {0x1, 0x640}}, {0x0, 0xd94f, {0x3, 0x24}}, {0x2a, 0x9, {0x1, 0x395}}, {0x6, 0x58b8, {0x0, 0x3}}, {0x6, 0x35d, {0x3, 0x8}}, {0x0, 0x0, {0x3, 0x3}}, {0x0, 0x101, {0x0, 0x5}}, {0x1, 0x6, {0x3, 0x81}}, {0x411e, 0x1, {0x3, 0x1}}, {0x9, 0x6, {0x2}}, {0x7, 0xf, {0x1, 0x7}}, {0x1, 0x38, {0x2, 0x101}}, {0x100, 0xd4b3, {0x1, 0x401}}, {0x8, 0x2, {0x2, 0x94}}]}}}, {{0x254, 0x1, {{0x0, 0x7fffffff}, 0x2, 0x6, 0x2, 0x4f, 0x3, 'syz1\x00', "a05013b940bee541ffed27dee092d909b891d5ea9bc07603c113fa0ba55ffe88", "f968cdc41ab7df01576bd47dfe6b6b91f28f787abf834e71ccf596834d67b0f2", [{0xf2, 0xec1, {0x2, 0x9}}, {0x4, 0xfff7, {0x3, 0x5}}, {0x81, 0x6, {0x0, 0x2}}, {0x80, 0x8, {0x3, 0x29c}}, {0x8, 0x2, {0x0, 0x8}}, {0x0, 0x4, {0x1, 0x7}}, {0x7fff, 0xff, {0x2, 0x9}}, {0x5, 0x9, {0x3, 0x6}}, {0x0, 0x5, {0x2, 0x5}}, {0x3, 0x3, {0x1, 0x3ff}}, {0x5, 0x6, {0x2, 0x9}}, {0x8, 0x6, {0x0, 0x2}}, {0xfe, 0x4, {0x2, 0x1}}, {0x3, 0x2, {0x2, 0x7}}, {0x40, 0x80, {0x2, 0x793}}, {0x0, 0x5, {0x0, 0x2}}, {0x2, 0x0, {0x3, 0x5}}, {0x100, 0x4e4, {0x1, 0x1680}}, {0x4, 0xfffe, {0x1, 0x5}}, {0x5, 0x63, {0x3, 0x4}}, {0x2, 0x5, {0x1, 0xb3d6}}, {0x177, 0x3000, {0x3, 0x2}}, {0x8, 0x2, {0x24476004de22513a, 0x6e35}}, {0x400, 0x0, {0x1, 0x9}}, {0xfbaf, 0xa, {0x2, 0x8000}}, {0xc2, 0x6, {0x2, 0xfffffffb}}, {0x6, 0x4, {0x0, 0x1ff}}, {0x1a, 0x4, {0x1, 0x10000}}, {0x6, 0x9, {0x2, 0x4}}, {0x10, 0x101, {0x3, 0x8}}, {0x5, 0x8, {0x0, 0x836}}, {0x5, 0x3c, {0x1, 0x929}}, {0x5, 0x0, {0x2}}, {0x1, 0x6, {0x0, 0x4f7b}}, {0x8f, 0x7, {0x1, 0x299d722c}}, {0x7, 0x2, {0x1, 0x40}}, {0xe, 0xff89, {0x3, 0x7}}, {0x7f, 0x2, {0x2, 0x9}}, {0x8, 0x9, {0x0, 0x904}}, {0x8, 0x5, {0x0, 0x77}}]}}}, {{0x254, 0x1, {{0x0, 0x17e1}, 0x8, 0x8, 0x6, 0x9, 0x20, 'syz1\x00', "ea1a8a67b1f113133e76f983e272975dcebfafc388adc6a8e6d86fbbcad3bc84", "a4db12071b592023a10961df96a4b067f3b94292ca77db6bf2c75b1681d0c89c", [{0x8, 0x8, {0x3, 0x9}}, {0x503d, 0xb, {0x0, 0x80000001}}, {0x9, 0x81, {0x0, 0x3}}, {0xfffb, 0x8000, {0x0, 0x4}}, {0x5, 0x800, {0x3, 0x3}}, {0xff, 0x2, {0x2, 0x4}}, {0x5, 0x101, {0x3, 0x6}}, {0xef, 0xf, {0x0, 0x8}}, {0x7, 0xb, {0x2, 0x7631ec00}}, {0x400, 0x0, {0x1, 0x9}}, {0x757, 0x2, {0x2, 0x8}}, {0x0, 0x2, {0x2, 0x8}}, {0xfffb, 0x7, {0x3, 0x3}}, {0xe, 0x4, {0x2, 0x5}}, {0x1, 0xfffc, {0x3, 0x1}}, {0x7fff, 0xc, {0x1, 0xffff}}, {0x6, 0x1, {0x3, 0x4}}, {0x1ff, 0x7, {0x3, 0x1}}, {0x4, 0xa, {0x1, 0xb}}, {0xffaa, 0x5, {0x4}}, {0x0, 0x8, {0x0, 0x1}}, {0x6, 0x6, {0x3, 0x6}}, {0x3ff, 0x8}, {0x2, 0xfffa, {0x2}}, {0xd40, 0x1000, {0x2}}, {0x53b, 0x6, {0x1, 0x5}}, {0x5, 0x6, {0x1, 0x7}}, {0xfbd, 0x80, {0x0, 0x3}}, {0x80, 0x5, {0x3, 0x800}}, {0x6, 0x32, {0x1, 0x10}}, {0x0, 0x1, {0x2, 0x2}}, {0x9, 0x6, {0x1, 0x8}}, {0x90d9, 0x1, {0x2, 0x1}}, {0x7697, 0x1, {0x2, 0x4}}, {0x0, 0x5, {0x1, 0x6}}, {0x4, 0x40, {0x0, 0xfffffffb}}, {0x6247, 0x5, {0x3, 0xa8}}, {0x2, 0x8, {0x2, 0x9}}, {0x800, 0x6, {0x22955b75aa52227a, 0x4}}, {0x8, 0x1bf5, {0x2, 0x43}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x58, 0xa4, 0x6, 0x2, 0xc, 'syz0\x00', "909dbcc139569fed16caf629b46b8e52902a3676e9340ff249f667848743a8cc", "0ce93f2d96f4486e8143fc9b4ad4a7ae8bcd98cbf07f896621088687b055860e", [{0x95de, 0x30, {0x3, 0x6}}, {0x5, 0x1a65, {0x2, 0x6}}, {0x54a8, 0x2, {0x0, 0x3ff}}, {0xfff9, 0x4, {0x2, 0x8}}, {0x6, 0x62e6, {0x2, 0x1}}, {0x3, 0x4, {0x3, 0xed}}, {0xfff5, 0x0, {0x3, 0x456}}, {0x5, 0xffff, {0x3, 0x9}}, {0x99f2, 0x0, {0x3, 0x42d}}, {0x5, 0xb, {0x1, 0x3}}, {0x72b, 0x9, {0x2, 0x6c2}}, {0x6cd9, 0x40, {0x1, 0x3}}, {0x8, 0x9, {0x3, 0xca}}, {0xfff9, 0x5, {0x0, 0x2}}, {0x3, 0xff, {0x3, 0x8}}, {0x6, 0xb, {0x1, 0x7}}, {0x0, 0x6, {0x2, 0x1}}, {0x6f, 0x41fd, {0x2}}, {0x5e, 0xffff, {0x3, 0x1}}, {0x4, 0x0, {0x2, 0x531a}}, {0x5, 0x1, {0x27d2b587ad07ca4e, 0x40}}, {0xe213, 0x8, {0x1, 0x1}}, {0x400, 0x9716, {0x0, 0x2}}, {0xb6, 0x2, {0x2, 0x1}}, {0x8001, 0x40, {0x0, 0x1}}, {0x6, 0x8, {0x2, 0x8}}, {0x77, 0x9, {0x3, 0x2}}, {0xb, 0xff9a, {0x4dae74ed2df21e58, 0xfffffff7}}, {0x9, 0x0, {0x0, 0x5}}, {0x6, 0x4, {0x0, 0x7f}}, {0x15e, 0x5, {0x0, 0x3}}, {0x5, 0x2, {0x2, 0x4}}, {0x906, 0x0, {0x3, 0x401}}, {0x3, 0x8, {0x0, 0x9}}, {0x5, 0x2, {0x0, 0x4}}, {0x0, 0x20ca, {0x3, 0x7}}, {0x2, 0x8, {0x1, 0x5}}, {0x6, 0xfff, {0x0, 0xc2ed}}, {0x3, 0x8, {0x1, 0x9}}, {0x81, 0x2, {0x3, 0x100}}]}}}, {{0x254, 0x1, {{0x3}, 0x9, 0x0, 0x6, 0x1, 0x12, 'syz0\x00', "6cfe12cf074c9ba1c2bc0c0e3f48fbe0b989c77884ed82e761e8332b34e27ae7", "4ca37118423174718bb758d29284d5eacaa2ae98fda654ce22187ce45781cd57", [{0x7, 0xf77b, {0x1}}, {0x3, 0x8, {0x2, 0x1}}, {0x9, 0xc000, {0x1, 0xff}}, {0x40, 0x9, {0x3, 0x7348}}, {0xf, 0x7, {0x0, 0x787}}, {0x7ff, 0x8, {0x2, 0x7fffffff}}, {0x1, 0xb04, {0x0, 0x8}}, {0x7, 0x7, {0x2, 0x6}}, {0x7, 0x2, {0x0, 0x7fad}}, {0x6c, 0x8, {0x0, 0x1}}, {0x40, 0x3, {0x0, 0xd}}, {0xd866, 0xd, {0x1, 0x3}}, {0xffb7, 0x8, {0x0, 0x32f5}}, {0x7, 0x5, {0x3, 0xe}}, {0x1000, 0xb5}, {0x9, 0x0, {0x2, 0x8}}, {0xffff, 0xff, {0x1, 0x7}}, {0x99, 0x9, {0x1, 0x3}}, {0x2, 0x4, {0x2, 0x1}}, {0x4, 0x0, {0x3}}, {0x8, 0x5e6a, {0x0, 0x4}}, {0x7, 0x4, {0x2, 0x1}}, {0x1000, 0x2, {0x0, 0x4}}, {0x118, 0x1ff, {0x1, 0x4f3df9b2}}, {0x1000, 0x2, {0x2, 0x4a}}, {0x2, 0x3, {0x1, 0x4}}, {0x2, 0xa890, {0x2, 0x3}}, {0x23a, 0x5, {0x1, 0x3}}, {0x2, 0x51e, {0x3, 0xfffffff9}}, {0x611, 0x7, {0x3, 0x5}}, {0x8, 0xf0ac, {0x1, 0x1}}, {0x1, 0x1, {0x1}}, {0x1, 0x9, {0x1, 0x8}}, {0xa, 0x6, {0x3, 0x8}}, {0x10, 0x81e, {0x2}}, {0xa, 0x1, {0x0, 0x12}}, {0xe, 0x5, {0x3, 0x3ff}}, {0x401, 0x1, {0x1, 0x7fff}}, {0xa, 0x7, {0x0, 0x7ff}}, {0x5, 0x6, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x5, 0x3ff, 0x5, 0x1c, 'syz1\x00', "e91e5dd1c6401b61c29cb03507fa7356085aafb42d991c88ebfdea5308dc3608", "9c0011d23762302b2f5c07e4f3aa51fa44fc0642b726aff91999f916c047352d", [{0x8b0, 0x0, {0x3, 0xfffe0}}, {0x10, 0x8001, {0x1, 0x40}}, {0x9, 0x3ff, {0x0, 0x9}}, {0x577e, 0x5, {0x2, 0x94}}, {0x8, 0x100, {0x3, 0x7ff}}, {0x9, 0x718, {0x0, 0x1}}, {0x3e, 0xfff, {0x2, 0x7c}}, {0xb56, 0x800, {0x2, 0x9}}, {0x2, 0x2, {0x1, 0x8}}, {0xcf26, 0x40, {0x2, 0xffffffff}}, {0xfffd, 0x10, {0x3, 0x4}}, {0xc48c, 0xfc01, {0x1, 0x24}}, {0x2, 0xfffb, {0x0, 0x3}}, {0x9, 0x6, {0x2, 0x63e3}}, {0x1, 0x7, {0x0, 0x3}}, {0x9, 0x7e87, {0x3, 0x3}}, {0x8, 0x1, {0x2, 0x8001}}, {0xab, 0xfffb, {0x0, 0x4}}, {0x2, 0x1000, {0x1, 0x4e}}, {0x5, 0x5, {0x0, 0x3ff}}, {0x2, 0x7, {0x1}}, {0x6, 0x0, {0x1, 0x6}}, {0xf045, 0x7ff, {0x3, 0x6}}, {0xeb, 0x7, {0x0, 0xfffffffd}}, {0x8, 0xf2, {0x2, 0x81}}, {0xff81, 0x6, {0x2, 0x1000}}, {0xc1c, 0x1b3, {0x2, 0x7}}, {0x44bb, 0xffff, {0x0, 0xebc}}, {0x6, 0x3, {0x3}}, {0x5, 0x9, {0x1, 0xe}}, {0x3, 0x3ff, {0x3, 0x2}}, {0x59, 0x80, {0x1, 0x717}}, {0x2, 0x2, {0x1, 0x8}}, {0x3, 0x85, {0x3, 0xd}}, {0x258a, 0x2, {0x3, 0x6}}, {0x8, 0xacdf, {0x3, 0x7ff}}, {0x5, 0xbd25, {0x3, 0x7c4d}}, {0x495, 0x2, {0x3, 0x5}}, {0x6, 0x4, {0x0, 0xb38}}, {0x2, 0x32be, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x7f}, 0x7, 0xc, 0x100, 0xb90, 0xd, 'syz1\x00', "0076c8d7a7ddd94f74b44811805a3c42199dc867f29097d7c4359f62b4b74415", "8a212d15c7747838802e568ea3cf4a7a900f7fe9118fed246c99499ecfc3adcf", [{0x9, 0x4, {0x1, 0x2}}, {0x1ff, 0x7, {0x3, 0x10001}}, {0x8, 0x7, {0x0, 0x4}}, {0xfff9, 0x6, {0x3, 0x3}}, {0x719, 0xc, {0x1, 0x81}}, {0x9, 0x3c41, {0x3, 0x1}}, {0x100, 0xe, {0x0, 0x40}}, {0x1, 0x3, {0x0, 0x7}}, {0x81, 0xaac1, {0x3, 0x2}}, {0x101, 0x1, {0x1, 0xfffffff9}}, {0x8, 0x8001, {0x2, 0x1}}, {0x1, 0x9, {0x1, 0x5}}, {0xa7a, 0xfff, {0x0, 0x3}}, {0x28e, 0xfffa, {0x2, 0x5}}, {0x9, 0xc3ba, {0x3, 0xa843}}, {0x2, 0xe87, {0x3, 0x2}}, {0x1000, 0x6, {0x1, 0x2bcc}}, {0x8, 0x8, {0x2, 0x3}}, {0x6, 0x0, {0x3, 0x4}}, {0x0, 0x100, {0x2, 0x8}}, {0x8, 0xc, {0x0, 0x7}}, {0x2, 0x1, {0x1, 0x7}}, {0x9de, 0x8, {0x3, 0x400}}, {0x2e57, 0x1, {0x2}}, {0x200, 0x8001, {0x3, 0x6}}, {0x6, 0x40, {0x2, 0x9}}, {0x5, 0x78eb, {0x3, 0x3}}, {0x7, 0x7, {0x0, 0x2}}, {0x1, 0x8, {0x0, 0x4}}, {0xc, 0x0, {0x1, 0x28}}, {0x1, 0x1, {0x0, 0x400}}, {0x0, 0x4, {0x0, 0x8232}}, {0x71, 0xb, {0x3, 0xfffffffa}}, {0x8, 0x1, {0x0, 0x5}}, {0x40, 0xdd2e, {0x2}}, {0x0, 0x4, {0x0, 0xfffffcde}}, {0xee0, 0x3, {0x3, 0x1}}, {0x2, 0x7, {0x1, 0x10}}, {0x6, 0xa86, {0x3, 0xe}}, {0xc, 0x101, {0x0, 0xee4}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x4, 0x1, 0xf, 0x3ff, 0xe, 'syz0\x00', "7ebf592cc5b3825a9ec0d1e48e716a8f3e6e61bfbac5256e4f8271eae493af26", "b6497ef78d55bf4002f5163c5058f1475826d63db1f5e5205877f08b3e1fcd3e", [{0x2, 0x2, {0x1}}, {0xf330, 0x1, {0x1, 0xff}}, {0x8, 0x21, {0x0, 0x9}}, {0x9, 0x6, {0x2, 0xe}}, {0x2, 0x39f3, {0x1, 0x4}}, {0x4, 0x9, {0xe8920d64ae69fa89, 0x100}}, {0x3, 0x401, {0x1, 0x6}}, {0x4, 0x6a, {0x2, 0x9}}, {0x7, 0x148, {0x0, 0xfffffff6}}, {0x2, 0x0, {0x2, 0xfff}}, {0x7ff, 0xe43, {0x0, 0x8}}, {0x5, 0x101, {0x753ba6bd988f0b51, 0x5}}, {0x2, 0x9, {0x1, 0x8001}}, {0x3ef, 0x0, {0x1}}, {0x5, 0x800, {0x3, 0x7}}, {0x1, 0x9, {0x3, 0x3ee3b0df}}, {0x7, 0x101, {0x2, 0x3}}, {0xd9, 0xe, {0x0, 0x101}}, {0x0, 0x7f, {0x2, 0xfffffffc}}, {0xb895, 0x3, {0x3, 0x8}}, {0x1, 0x5, {0x1, 0x3}}, {0x1, 0x8000, {0x3, 0x80}}, {0x5, 0x99, {0x2, 0x3}}, {0xa8, 0x2, {0x0, 0x7}}, {0x8, 0x3, {0x3, 0x100}}, {0x10, 0x4d, {0x2, 0xa}}, {0x2, 0x9, {0x3, 0x9}}, {0xc7, 0xdf, {0x0, 0x6}}, {0x7, 0x9, {0x0, 0x6}}, {0x8000, 0x4, {0x2, 0x8}}, {0x0, 0x200, {0x1, 0x10001}}, {0x800, 0x80, {0x0, 0xa14}}, {0x809, 0x8, {0x3, 0x401}}, {0xf353, 0x9, {0x1, 0x1}}, {0x9, 0xfffb, {0x3, 0x100}}, {0x7, 0x40, {0x2, 0x1ff}}, {0x4, 0x3, {0x3}}, {0x90e, 0x4, {0x2, 0x6}}, {0x1, 0x7, {0x2, 0x100}}, {0x3, 0x6, {0x0, 0x1000}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x2, 0x80, 0xc, 0x6, 0x12, 'syz0\x00', "029644c2f9e7c3a1fa1e21de6da1fdb04846745f9f17a9b4feae8ae715b3d770", "48377aaaf2fcbb195b7587c89a38b5a902ea45fb13aac6250240db92ab1a718c", [{0x0, 0x5, {0x2, 0x3}}, {0x6, 0x1, {0x3, 0xffffffff}}, {0x2, 0x7, {0x2}}, {0x0, 0x4, {0x3, 0x6ac}}, {0x81, 0x5, {0x1, 0x39}}, {0x9, 0x0, {0x2, 0x6}}, {0x16ea, 0x95, {0x1, 0x9}}, {0x8, 0x2, {0x3, 0x4}}, {0x80, 0x4, {0x2, 0xfffff4a3}}, {0x7f, 0x40, {0x3, 0x5}}, {0x8001, 0x3, {0x0, 0xa4}}, {0x1c0, 0x9, {0x1, 0xfffffffb}}, {0x8, 0xd, {0x3, 0xe75}}, {0x40, 0x6, {0x2, 0x2}}, {0x7f, 0x1000, {0x2, 0x7f}}, {0x7, 0x5, {0x0, 0x1}}, {0x5, 0x2, {0x1, 0x5}}, {0xff, 0x8000, {0x3, 0x1}}, {0x7f, 0x9, {0x3, 0xffff9173}}, {0xfff8, 0x7, {0x2, 0x94a}}, {0x9, 0x1, {0x3, 0x5eb}}, {0xffff, 0x3, {0x1, 0x9}}, {0x4, 0x2, {0x1, 0x1}}, {0x9, 0x8, {0x3, 0xd4}}, {0x38a, 0x1, {0x0, 0xc}}, {0xfff6, 0x200, {0x0, 0xffff7fff}}, {0xa8b, 0xe000, {0x2, 0x9}}, {0x800, 0x9, {0x0, 0x8}}, {0x18, 0x3ff, {0x3, 0x7}}, {0x6, 0x5, {0x3, 0xe3}}, {0x0, 0x1000, {0x0, 0x9}}, {0x200, 0x54e, {0x2, 0x7}}, {0x2, 0xf48, {0x3, 0x10001}}, {0x62c, 0x3, {0x2, 0x642100c2}}, {0x48, 0x100, {0x1, 0x401}}, {0x0, 0x5, {0x2, 0xfffffd55}}, {0x7, 0x0, {0x3, 0x1}}, {0x200, 0x8000, {0x0, 0x5e1}}, {0x2, 0x45, {0x3, 0x9db}}, {0x22, 0xe, {0x2, 0xa}}]}}}]}, 0x1508}}, 0x4) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 324.90806ms ago: executing program 0 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) dup(r0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000006000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x72) 324.16841ms ago: executing program 3 (id=1220): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_clone3(&(0x7f0000000340)={0xa0002000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911021000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xf1\xd8\x00'/233, 0x40, 0x0, 0x0) 322.67792ms ago: executing program 0 (id=1221): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x4}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 312.725001ms ago: executing program 2 (id=1222): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/23, 0x17}], 0x1}}], 0x1, 0x0, 0x0) 280.329214ms ago: executing program 0 (id=1223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='tcp_retransmit_synack\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) openat$vcs(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x2}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) 262.512536ms ago: executing program 2 (id=1224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) (fail_nth: 1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) mkdir(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f00000006c0)=[{&(0x7f0000000140)="db", 0x11}], 0x1, 0x100000, 0x0, 0x4) 251.537767ms ago: executing program 1 (id=1225): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback}, {@in=@local, 0x1000000, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x42}, [@coaddr={0x14, 0xe, @in6=@private0}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff0500000005000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) 250.756017ms ago: executing program 0 (id=1226): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) 225.13687ms ago: executing program 0 (id=1227): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = semget$private(0x0, 0x5, 0x6a4) semtimedop(r5, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x3938700}) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000002c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 0s ago: executing program 4 (id=1228): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='cpu&00\t||') kernel console output (not intermixed with test programs): [ 52.370910][ T5262] kmem_cache_alloc_noprof+0x4c/0x290 [ 52.376338][ T5262] getname_flags+0x81/0x3b0 [ 52.380877][ T5262] user_path_at+0x26/0x110 [ 52.385349][ T5262] __se_sys_mount_setattr+0x49c/0x1330 [ 52.390809][ T5262] ? fput+0x14e/0x190 [ 52.394874][ T5262] __x64_sys_mount_setattr+0x67/0x80 [ 52.400157][ T5262] x64_sys_call+0x2a7b/0x2d60 [ 52.404836][ T5262] do_syscall_64+0xc9/0x1c0 [ 52.409327][ T5262] ? clear_bhb_loop+0x55/0xb0 [ 52.414061][ T5262] ? clear_bhb_loop+0x55/0xb0 [ 52.418733][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.424619][ T5262] RIP: 0033:0x7f75caf2dff9 [ 52.429087][ T5262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.448737][ T5262] RSP: 002b:00007f75c9ba1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 52.457139][ T5262] RAX: ffffffffffffffda RBX: 00007f75cb0e5f80 RCX: 00007f75caf2dff9 [ 52.465106][ T5262] RDX: 0000000000000000 RSI: 0000000020001d80 RDI: 0000000000000006 [ 52.473070][ T5262] RBP: 00007f75c9ba1090 R08: 0000000000000020 R09: 0000000000000000 [ 52.481066][ T5262] R10: 0000000020001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 52.489028][ T5262] R13: 0000000000000000 R14: 00007f75cb0e5f80 R15: 00007ffdf15e1b38 [ 52.497041][ T5262] [ 52.551627][ T5265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.406'. [ 52.561352][ T29] kauditd_printk_skb: 2953 callbacks suppressed [ 52.561362][ T29] audit: type=1400 audit(1727770032.734:4309): avc: granted { setsecparam } for pid=5264 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.587173][ T5265] random: crng reseeded on system resumption [ 52.636391][ T29] audit: type=1400 audit(1727770032.764:4310): avc: denied { write } for pid=5264 comm="syz.4.406" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.659419][ T29] audit: type=1400 audit(1727770032.764:4311): avc: denied { open } for pid=5264 comm="syz.4.406" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.722598][ T29] audit: type=1400 audit(1727770032.894:4312): avc: denied { ioctl } for pid=5264 comm="syz.4.406" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 52.764091][ T5265] Restarting kernel threads ... done. [ 52.773196][ T5272] loop2: detected capacity change from 0 to 256 [ 52.786119][ T5272] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.891914][ T5283] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.904169][ T5283] smc: net device bond0 erased user defined pnetid SYZ0 [ 52.947524][ T29] audit: type=1400 audit(1727770033.104:4313): avc: denied { read write } for pid=5284 comm="syz.0.413" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 52.971172][ T29] audit: type=1400 audit(1727770033.104:4314): avc: denied { open } for pid=5284 comm="syz.0.413" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 52.994788][ T29] audit: type=1400 audit(1727770033.104:4315): avc: denied { ioctl } for pid=5284 comm="syz.0.413" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.019760][ T29] audit: type=1400 audit(1727770033.104:4316): avc: denied { sqpoll } for pid=5284 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.069308][ T5296] ebtables: ebtables: counters copy to user failed while replacing table [ 53.078839][ T29] audit: type=1326 audit(1727770033.174:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 53.102186][ T29] audit: type=1326 audit(1727770033.174:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 53.151130][ T5299] ebtables: ebtables: counters copy to user failed while replacing table [ 53.175072][ T5293] ebtables: ebtables: counters copy to user failed while replacing table [ 53.182306][ T5304] loop0: detected capacity change from 0 to 2048 [ 53.202062][ T5309] ebtables: ebtables: counters copy to user failed while replacing table [ 53.319251][ T5331] loop3: detected capacity change from 0 to 256 [ 53.326621][ T5340] SELinux: policydb string S&Ruxï}< does not match my string SE Linux [ 53.335006][ T5340] SELinux: failed to load policy [ 53.355310][ T5304] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.376239][ T5304] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1024 with error 28 [ 53.389589][ T5304] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.389589][ T5304] [ 53.399734][ T5304] EXT4-fs (loop0): Total free blocks count 0 [ 53.405754][ T5304] EXT4-fs (loop0): Free/Dirty block details [ 53.411655][ T5304] EXT4-fs (loop0): free_blocks=2415919104 [ 53.417414][ T5304] EXT4-fs (loop0): dirty_blocks=1040 [ 53.422722][ T5304] EXT4-fs (loop0): Block reservation details [ 53.428725][ T5304] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 53.507445][ T5368] dvmrp0: entered allmulticast mode [ 53.513627][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 53.522496][ T5369] netlink: 56 bytes leftover after parsing attributes in process `syz.0.430'. [ 53.536180][ T5369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 53.601637][ T5371] ebtables: ebtables: counters copy to user failed while replacing table [ 53.622197][ T5380] dvmrp0: left allmulticast mode [ 53.645766][ T5382] dvmrp0: entered allmulticast mode [ 53.674867][ T5368] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 53.683046][ T5368] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 53.696152][ T5368] loop4: detected capacity change from 0 to 512 [ 53.703098][ T5368] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.728329][ T5387] dvmrp0: left allmulticast mode [ 53.742017][ T5390] loop2: detected capacity change from 0 to 256 [ 53.756096][ T5368] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.774387][ T5368] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.431: corrupted inode contents [ 53.776684][ T5390] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.788336][ T5368] EXT4-fs (loop4): Remounting filesystem read-only [ 53.803325][ T5368] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 53.812589][ T5392] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 53.820883][ T5392] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 53.846515][ T5382] loop3: detected capacity change from 0 to 512 [ 53.856402][ T5382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.884826][ T5382] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.894534][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.905190][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.916173][ T5382] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #18: comm syz.3.435: corrupted inode contents [ 53.929726][ T5382] EXT4-fs (loop3): Remounting filesystem read-only [ 53.937066][ T5382] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 54.050806][ T5412] loop4: detected capacity change from 0 to 512 [ 54.052841][ T5410] loop3: detected capacity change from 0 to 2048 [ 54.074800][ T5412] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.088378][ T5412] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.445: corrupted inode contents [ 54.093785][ T5410] loop3: p2 < > [ 54.108590][ T5412] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.445: mark_inode_dirty error [ 54.123677][ T2967] loop3: p2 < > [ 54.126824][ T5412] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.445: corrupted inode contents [ 54.142589][ T5412] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.445: corrupted inode contents [ 54.157931][ T5410] 9pnet_fd: Insufficient options for proto=fd [ 54.197119][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 54.256027][ T5430] loop4: detected capacity change from 0 to 256 [ 54.285204][ T5432] FAULT_INJECTION: forcing a failure. [ 54.285204][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 54.291626][ T5434] loop4: detected capacity change from 0 to 512 [ 54.297812][ T5432] CPU: 1 UID: 0 PID: 5432 Comm: syz.2.453 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 54.314689][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.324734][ T5432] Call Trace: [ 54.328002][ T5432] [ 54.330949][ T5432] dump_stack_lvl+0xf2/0x150 [ 54.335530][ T5432] dump_stack+0x15/0x20 [ 54.339676][ T5432] should_fail_ex+0x223/0x230 [ 54.344460][ T5432] ? kobject_uevent_env+0x1a4/0x550 [ 54.349690][ T5432] should_failslab+0x8f/0xb0 [ 54.354305][ T5432] __kmalloc_cache_noprof+0x4b/0x2a0 [ 54.359596][ T5432] ? __pfx_dev_uevent_name+0x10/0x10 [ 54.364945][ T5432] kobject_uevent_env+0x1a4/0x550 [ 54.370021][ T5432] ? kobject_put+0x10a/0x180 [ 54.374603][ T5432] kobject_uevent+0x1c/0x30 [ 54.379157][ T5432] device_release_driver_internal+0x478/0x4f0 [ 54.385254][ T5432] device_release_driver+0x19/0x20 [ 54.390371][ T5432] usb_driver_release_interface+0xf2/0x100 [ 54.396308][ T5432] proc_ioctl+0x1ef/0x400 [ 54.400636][ T5432] usbdev_ioctl+0x1f01/0x3e00 [ 54.405312][ T5432] ? do_vfs_ioctl+0x96e/0x1530 [ 54.410107][ T5432] ? selinux_file_ioctl+0x2f7/0x380 [ 54.415330][ T5432] ? __fget_files+0x1d4/0x210 [ 54.420002][ T5432] ? __pfx_usbdev_ioctl+0x10/0x10 [ 54.425069][ T5432] __se_sys_ioctl+0xcd/0x140 [ 54.429650][ T5432] __x64_sys_ioctl+0x43/0x50 [ 54.434336][ T5432] x64_sys_call+0x15cc/0x2d60 [ 54.439071][ T5432] do_syscall_64+0xc9/0x1c0 [ 54.443579][ T5432] ? clear_bhb_loop+0x55/0xb0 [ 54.448268][ T5432] ? clear_bhb_loop+0x55/0xb0 [ 54.453069][ T5432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.458955][ T5432] RIP: 0033:0x7f2ed5c0dff9 [ 54.463356][ T5432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.483007][ T5432] RSP: 002b:00007f2ed4881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.491471][ T5432] RAX: ffffffffffffffda RBX: 00007f2ed5dc5f80 RCX: 00007f2ed5c0dff9 [ 54.499433][ T5432] RDX: 0000000020000200 RSI: 00000000c0105512 RDI: 0000000000000003 [ 54.507396][ T5432] RBP: 00007f2ed4881090 R08: 0000000000000000 R09: 0000000000000000 [ 54.515356][ T5432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.523322][ T5432] R13: 0000000000000000 R14: 00007f2ed5dc5f80 R15: 00007ffd703ec478 [ 54.531284][ T5432] [ 54.540256][ T5432] hub 9-0:1.0: USB hub found [ 54.546412][ T5432] hub 9-0:1.0: 8 ports detected [ 54.571912][ T5441] loop0: detected capacity change from 0 to 512 [ 54.589388][ T5446] loop2: detected capacity change from 0 to 512 [ 54.601789][ T5434] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.616571][ T5441] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.618553][ T5446] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.673069][ T5434] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.454: corrupted inode contents [ 54.694319][ T5434] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.454: mark_inode_dirty error [ 54.710377][ T5434] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.454: corrupted inode contents [ 54.722688][ T5457] loop3: detected capacity change from 0 to 512 [ 54.723874][ T5434] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.454: corrupted inode contents [ 54.772175][ T5462] block device autoloading is deprecated and will be removed. [ 54.784384][ T5457] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.828173][ T5470] loop2: detected capacity change from 0 to 512 [ 54.844458][ T5457] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.462: corrupted inode contents [ 54.856459][ T5457] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.462: mark_inode_dirty error [ 54.867768][ T5470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.870683][ T5457] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.462: corrupted inode contents [ 54.901444][ T5457] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.462: corrupted inode contents [ 54.916969][ T5476] loop1: detected capacity change from 0 to 256 [ 54.923692][ T5476] /dev/loop1: Can't open blockdev [ 54.949267][ T5475] loop4: detected capacity change from 0 to 256 [ 54.966008][ T5470] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.019235][ T5487] xt_CONNSECMARK: invalid mode: 0 [ 55.028650][ T5487] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.037907][ T5487] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.059550][ T5495] FAULT_INJECTION: forcing a failure. [ 55.059550][ T5495] name failslab, interval 1, probability 0, space 0, times 0 [ 55.072203][ T5495] CPU: 0 UID: 0 PID: 5495 Comm: syz.4.475 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 55.082604][ T5493] loop0: detected capacity change from 0 to 512 [ 55.082799][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.099070][ T5495] Call Trace: [ 55.102340][ T5495] [ 55.105260][ T5495] dump_stack_lvl+0xf2/0x150 [ 55.109909][ T5495] dump_stack+0x15/0x20 [ 55.114056][ T5495] should_fail_ex+0x223/0x230 [ 55.118757][ T5495] ? vmemdup_user+0x42/0x1b0 [ 55.123345][ T5495] should_failslab+0x8f/0xb0 [ 55.127995][ T5495] __kmalloc_node_noprof+0xa8/0x380 [ 55.133196][ T5495] ? should_fail_usercopy+0x1a/0x20 [ 55.138467][ T5495] vmemdup_user+0x42/0x1b0 [ 55.142884][ T5495] path_setxattr+0x134/0x360 [ 55.147458][ T5495] ? get_pid_task+0x8e/0xc0 [ 55.151996][ T5495] __x64_sys_setxattr+0x6d/0x80 [ 55.156922][ T5495] x64_sys_call+0x2927/0x2d60 [ 55.161604][ T5495] do_syscall_64+0xc9/0x1c0 [ 55.166096][ T5495] ? clear_bhb_loop+0x55/0xb0 [ 55.170771][ T5495] ? clear_bhb_loop+0x55/0xb0 [ 55.175443][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.181368][ T5495] RIP: 0033:0x7fb4da12dff9 [ 55.185840][ T5495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.205515][ T5495] RSP: 002b:00007fb4d8da1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 55.213935][ T5495] RAX: ffffffffffffffda RBX: 00007fb4da2e5f80 RCX: 00007fb4da12dff9 [ 55.221897][ T5495] RDX: 0000000020001400 RSI: 00000000200001c0 RDI: 0000000020000380 [ 55.229869][ T5495] RBP: 00007fb4d8da1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.237828][ T5495] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 55.245783][ T5495] R13: 0000000000000001 R14: 00007fb4da2e5f80 R15: 00007fffc9d372a8 [ 55.253762][ T5495] [ 55.310778][ T5493] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.364782][ T5517] loop3: detected capacity change from 0 to 512 [ 55.388315][ T5521] loop4: detected capacity change from 0 to 512 [ 55.412626][ T5521] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.429860][ T5517] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.452773][ T5517] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.480: corrupted inode contents [ 55.473787][ T5517] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.480: mark_inode_dirty error [ 55.476800][ T5535] xt_CONNSECMARK: invalid mode: 0 [ 55.503931][ T5535] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.511326][ T5535] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.539534][ T5517] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.480: corrupted inode contents [ 55.552168][ T5538] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.480: corrupted inode contents [ 55.568910][ T5539] loop2: detected capacity change from 0 to 512 [ 55.579401][ T5539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.654147][ T5539] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.786125][ T5564] syz.3.489: attempt to access beyond end of device [ 55.786125][ T5564] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.825307][ T5564] loop3: detected capacity change from 0 to 2048 [ 55.943027][ T5564] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.958086][ T5564] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.970542][ T5564] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.970542][ T5564] [ 55.980319][ T5564] EXT4-fs (loop3): Total free blocks count 0 [ 55.986328][ T5564] EXT4-fs (loop3): Free/Dirty block details [ 55.992288][ T5564] EXT4-fs (loop3): free_blocks=2415919104 [ 55.998104][ T5564] EXT4-fs (loop3): dirty_blocks=2192 [ 56.003413][ T5564] EXT4-fs (loop3): Block reservation details [ 56.009378][ T5564] EXT4-fs (loop3): i_reserved_data_blocks=137 [ 56.073358][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 126 with error 28 [ 56.080990][ T5586] 9pnet_fd: Insufficient options for proto=fd [ 56.086126][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.086126][ T11] [ 56.171453][ T5590] loop3: detected capacity change from 0 to 2048 [ 56.187476][ T5599] loop0: detected capacity change from 0 to 256 [ 56.195062][ T5599] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.214040][ T5590] loop3: p2 < > [ 56.229696][ T5590] 9pnet_fd: Insufficient options for proto=fd [ 56.238325][ T2967] loop3: p2 < > [ 56.339943][ T5614] ebtables: ebtables: counters copy to user failed while replacing table [ 56.471684][ T5629] hub 9-0:1.0: USB hub found [ 56.479843][ T5629] hub 9-0:1.0: 8 ports detected [ 56.551589][ T5649] loop3: detected capacity change from 0 to 2048 [ 56.603724][ T5649] loop3: p2 < > [ 56.612960][ T2967] loop3: p2 < > [ 56.614674][ T5649] 9pnet_fd: Insufficient options for proto=fd [ 56.659997][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 56.681033][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 56.706719][ T5678] dvmrp0: entered allmulticast mode [ 56.751628][ T5688] syz.0.516: attempt to access beyond end of device [ 56.751628][ T5688] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 56.770794][ T5681] loop1: detected capacity change from 0 to 512 [ 56.791792][ T5681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.800675][ T5681] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.805933][ T5688] loop0: detected capacity change from 0 to 2048 [ 56.809774][ T5681] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 56.853158][ T5696] dvmrp0: left allmulticast mode [ 56.900952][ T5696] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 56.909171][ T5696] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 56.950821][ T5678] loop3: detected capacity change from 0 to 512 [ 56.963171][ T5678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.964221][ T5688] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.002911][ T5713] syz.1.521: attempt to access beyond end of device [ 57.002911][ T5713] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.016584][ T5715] loop4: detected capacity change from 0 to 256 [ 57.027905][ T5678] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.041033][ T5715] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.043837][ T5688] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 57.063969][ T5688] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.063969][ T5688] [ 57.073612][ T5688] EXT4-fs (loop0): Total free blocks count 0 [ 57.079605][ T5688] EXT4-fs (loop0): Free/Dirty block details [ 57.082465][ T5713] loop1: detected capacity change from 0 to 2048 [ 57.085626][ T5688] EXT4-fs (loop0): free_blocks=2415919104 [ 57.097775][ T5688] EXT4-fs (loop0): dirty_blocks=2736 [ 57.103053][ T5688] EXT4-fs (loop0): Block reservation details [ 57.109349][ T5688] EXT4-fs (loop0): i_reserved_data_blocks=171 [ 57.118605][ T5678] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #18: comm syz.3.514: corrupted inode contents [ 57.146049][ T5726] dvmrp0: entered allmulticast mode [ 57.177672][ T5678] EXT4-fs (loop3): Remounting filesystem read-only [ 57.195653][ T57] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 678 with error 28 [ 57.208284][ T57] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.208284][ T57] [ 57.220297][ T5678] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 57.230836][ T5742] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.260871][ T5742] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 466 with error 28 [ 57.268059][ T5747] loop4: detected capacity change from 0 to 512 [ 57.273339][ T5742] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.273339][ T5742] [ 57.273354][ T5742] EXT4-fs (loop1): Total free blocks count 0 [ 57.290079][ T5747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.295272][ T5742] EXT4-fs (loop1): Free/Dirty block details [ 57.295283][ T5742] EXT4-fs (loop1): free_blocks=2415919104 [ 57.295295][ T5742] EXT4-fs (loop1): dirty_blocks=480 [ 57.295305][ T5742] EXT4-fs (loop1): Block reservation details [ 57.295347][ T5742] EXT4-fs (loop1): i_reserved_data_blocks=30 [ 57.363542][ T5749] dvmrp0: left allmulticast mode [ 57.385012][ T5747] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.441127][ T5726] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 57.449441][ T5726] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 57.475895][ T5765] xt_CONNSECMARK: invalid mode: 0 [ 57.505791][ T5726] loop2: detected capacity change from 0 to 512 [ 57.506745][ T5765] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.528034][ T5771] FAULT_INJECTION: forcing a failure. [ 57.528034][ T5771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.530423][ T5765] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.541096][ T5771] CPU: 1 UID: 0 PID: 5771 Comm: syz.4.533 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 57.558572][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.568750][ T5771] Call Trace: [ 57.572012][ T5771] [ 57.574928][ T5771] dump_stack_lvl+0xf2/0x150 [ 57.579510][ T5771] dump_stack+0x15/0x20 [ 57.583648][ T5771] should_fail_ex+0x223/0x230 [ 57.588331][ T5771] should_fail+0xb/0x10 [ 57.592582][ T5771] should_fail_usercopy+0x1a/0x20 [ 57.597696][ T5771] _copy_from_iter+0xd3/0xd20 [ 57.602374][ T5771] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 57.607916][ T5771] copy_page_from_iter+0x14f/0x280 [ 57.613011][ T5771] tun_get_user+0x686/0x24e0 [ 57.617595][ T5771] ? kstrtoull+0x110/0x140 [ 57.622029][ T5771] ? ref_tracker_alloc+0x1f5/0x2f0 [ 57.627179][ T5771] tun_chr_write_iter+0x188/0x240 [ 57.632192][ T5771] vfs_write+0x76a/0x910 [ 57.636441][ T5771] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 57.641990][ T5771] ksys_write+0xeb/0x1b0 [ 57.646254][ T5771] __x64_sys_write+0x42/0x50 [ 57.650872][ T5771] x64_sys_call+0x27dd/0x2d60 [ 57.655597][ T5771] do_syscall_64+0xc9/0x1c0 [ 57.660086][ T5771] ? clear_bhb_loop+0x55/0xb0 [ 57.664858][ T5771] ? clear_bhb_loop+0x55/0xb0 [ 57.669527][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.675458][ T5771] RIP: 0033:0x7fb4da12cadf [ 57.679870][ T5771] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 57.699686][ T5771] RSP: 002b:00007fb4d8da1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 57.708166][ T5771] RAX: ffffffffffffffda RBX: 00007fb4da2e5f80 RCX: 00007fb4da12cadf [ 57.716207][ T5771] RDX: 000000000000004a RSI: 0000000020000000 RDI: 00000000000000c8 [ 57.724163][ T5771] RBP: 00007fb4d8da1090 R08: 0000000000000000 R09: 0000000000000000 [ 57.732130][ T5771] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 57.740144][ T5771] R13: 0000000000000001 R14: 00007fb4da2e5f80 R15: 00007fffc9d372a8 [ 57.748107][ T5771] [ 57.751213][ T5726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.789673][ T5776] 9pnet_fd: p9_fd_create_tcp (5776): problem connecting socket to 127.0.0.1 [ 57.799492][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 57.799505][ T29] audit: type=1400 audit(1727770037.984:4421): avc: denied { connect } for pid=5775 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.835732][ T5780] loop1: detected capacity change from 0 to 512 [ 57.836056][ T5726] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.860491][ T5726] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #18: comm syz.2.525: corrupted inode contents [ 57.874082][ T5726] EXT4-fs (loop2): Remounting filesystem read-only [ 57.880724][ T5726] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 57.893197][ T5780] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.926360][ T5788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5788 comm=syz.4.539 [ 57.926862][ T29] audit: type=1326 audit(1727770038.094:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 57.962297][ T29] audit: type=1326 audit(1727770038.094:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 57.985614][ T29] audit: type=1326 audit(1727770038.104:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.008953][ T29] audit: type=1326 audit(1727770038.104:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.032404][ T29] audit: type=1326 audit(1727770038.104:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.055712][ T29] audit: type=1326 audit(1727770038.104:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.079094][ T29] audit: type=1326 audit(1727770038.104:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.102448][ T29] audit: type=1326 audit(1727770038.104:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.125726][ T29] audit: type=1326 audit(1727770038.104:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5787 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 58.254397][ T5799] syz.2.543[5799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.254503][ T5799] syz.2.543[5799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.279126][ T5799] syz.2.543[5799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.291991][ T5801] xt_CONNSECMARK: invalid mode: 0 [ 58.326546][ T5799] sock: sock_set_timeout: `syz.2.543' (pid 5799) tries to set negative timeout [ 58.340210][ T5808] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.362262][ T5801] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.433677][ T5815] ebtables: ebtables: counters copy to user failed while replacing table [ 58.495474][ T5827] loop3: detected capacity change from 0 to 512 [ 58.516843][ T5827] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.527950][ T5833] ebtables: ebtables: counters copy to user failed while replacing table [ 58.529735][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.548: corrupted inode contents [ 58.561772][ T5827] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.548: mark_inode_dirty error [ 58.590601][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.548: corrupted inode contents [ 58.633831][ T5852] loop2: detected capacity change from 0 to 256 [ 58.659100][ T5855] loop0: detected capacity change from 0 to 256 [ 58.708672][ T5868] loop3: detected capacity change from 0 to 128 [ 58.766708][ T5875] xt_CONNSECMARK: invalid mode: 0 [ 58.772806][ T5875] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.780082][ T5875] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.811139][ T5871] loop2: detected capacity change from 0 to 2048 [ 58.861532][ T5889] syz.4.566: attempt to access beyond end of device [ 58.861532][ T5889] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.875566][ T5871] loop2: p2 < > [ 58.881849][ T2967] loop2: p2 < > [ 58.887563][ T5871] 9pnet_fd: Insufficient options for proto=fd [ 58.911395][ T5889] loop4: detected capacity change from 0 to 2048 [ 58.944515][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 58.977557][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 58.978754][ T5897] ebtables: ebtables: counters copy to user failed while replacing table [ 59.038509][ T5909] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 59.045939][ T5889] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.049786][ T5908] loop1: detected capacity change from 0 to 512 [ 59.063260][ T5889] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1142 with error 28 [ 59.080284][ T5889] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.080284][ T5889] [ 59.089938][ T5889] EXT4-fs (loop4): Total free blocks count 0 [ 59.095963][ T5889] EXT4-fs (loop4): Free/Dirty block details [ 59.101888][ T5889] EXT4-fs (loop4): free_blocks=2415919104 [ 59.104958][ T5908] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.107608][ T5889] EXT4-fs (loop4): dirty_blocks=1152 [ 59.123405][ T5889] EXT4-fs (loop4): Block reservation details [ 59.128909][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.570: corrupted inode contents [ 59.129357][ T5889] EXT4-fs (loop4): i_reserved_data_blocks=72 [ 59.152312][ T5908] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.570: mark_inode_dirty error [ 59.166008][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.570: corrupted inode contents [ 59.180484][ T5908] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.570: corrupted inode contents [ 59.243046][ T5925] syz.4.574: attempt to access beyond end of device [ 59.243046][ T5925] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.312746][ T5925] loop4: detected capacity change from 0 to 2048 [ 59.338040][ T5938] loop2: detected capacity change from 0 to 2048 [ 59.347336][ T5939] loop0: detected capacity change from 0 to 2048 [ 59.394585][ T5939] loop0: p1 < > p4 [ 59.398635][ T5938] loop2: p2 < > [ 59.403181][ T5939] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.415432][ T5938] 9pnet_fd: Insufficient options for proto=fd [ 59.435580][ T5958] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.463027][ T2967] loop0: p1 < > p4 [ 59.467575][ T5958] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1176 with error 28 [ 59.473196][ T2967] loop0: p4 size 8388608 extends beyond EOD, [ 59.480068][ T5958] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.480068][ T5958] [ 59.480082][ T5958] EXT4-fs (loop4): Total free blocks count 0 [ 59.486193][ T2967] truncated [ 59.505002][ T5958] EXT4-fs (loop4): Free/Dirty block details [ 59.510891][ T5958] EXT4-fs (loop4): free_blocks=2415919104 [ 59.516640][ T5958] EXT4-fs (loop4): dirty_blocks=1184 [ 59.521917][ T5958] EXT4-fs (loop4): Block reservation details [ 59.525193][ T5965] loop1: detected capacity change from 0 to 128 [ 59.528075][ T5958] EXT4-fs (loop4): i_reserved_data_blocks=74 [ 59.580099][ T5966] ebtables: ebtables: counters copy to user failed while replacing table [ 59.586449][ T2967] loop0: p1 < > p4 [ 59.598038][ T2967] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.607398][ T5972] dvmrp0: entered allmulticast mode [ 59.682838][ T5979] dvmrp0: left allmulticast mode [ 59.714142][ T5983] xt_CONNSECMARK: invalid mode: 0 [ 59.716320][ T5985] loop4: detected capacity change from 0 to 512 [ 59.724941][ T5983] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.733790][ T5983] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.736221][ T5972] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 59.749013][ T5972] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 59.774529][ T5985] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.886310][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 59.919177][ T5998] loop3: detected capacity change from 0 to 2048 [ 59.983943][ T5998] loop3: p2 < > [ 59.996467][ T5998] 9pnet_fd: Insufficient options for proto=fd [ 60.042543][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 60.060316][ T6008] syz.3.594: attempt to access beyond end of device [ 60.060316][ T6008] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 60.109763][ T6008] loop3: detected capacity change from 0 to 2048 [ 60.123609][ T6011] FAULT_INJECTION: forcing a failure. [ 60.123609][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 60.136304][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.2.595 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 60.146886][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.156931][ T6011] Call Trace: [ 60.160193][ T6011] [ 60.163112][ T6011] dump_stack_lvl+0xf2/0x150 [ 60.167748][ T6011] dump_stack+0x15/0x20 [ 60.171891][ T6011] should_fail_ex+0x223/0x230 [ 60.176639][ T6011] ? __alloc_skb+0x10b/0x310 [ 60.181221][ T6011] should_failslab+0x8f/0xb0 [ 60.185858][ T6011] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 60.191675][ T6011] __alloc_skb+0x10b/0x310 [ 60.196082][ T6011] netlink_alloc_large_skb+0xad/0xe0 [ 60.201365][ T6011] netlink_sendmsg+0x3b4/0x6e0 [ 60.206164][ T6011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.211483][ T6011] __sock_sendmsg+0x140/0x180 [ 60.216147][ T6011] ____sys_sendmsg+0x312/0x410 [ 60.220925][ T6011] __sys_sendmsg+0x1d9/0x270 [ 60.225525][ T6011] __x64_sys_sendmsg+0x46/0x50 [ 60.230283][ T6011] x64_sys_call+0x2689/0x2d60 [ 60.235064][ T6011] do_syscall_64+0xc9/0x1c0 [ 60.239615][ T6011] ? clear_bhb_loop+0x55/0xb0 [ 60.244317][ T6011] ? clear_bhb_loop+0x55/0xb0 [ 60.249042][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.254932][ T6011] RIP: 0033:0x7f2ed5c0dff9 [ 60.259328][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.279005][ T6011] RSP: 002b:00007f2ed4881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.287405][ T6011] RAX: ffffffffffffffda RBX: 00007f2ed5dc5f80 RCX: 00007f2ed5c0dff9 [ 60.295435][ T6011] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 60.303390][ T6011] RBP: 00007f2ed4881090 R08: 0000000000000000 R09: 0000000000000000 [ 60.311420][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.319416][ T6011] R13: 0000000000000000 R14: 00007f2ed5dc5f80 R15: 00007ffd703ec478 [ 60.327378][ T6011] [ 60.469349][ T6008] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.484331][ T6008] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 60.496792][ T6008] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.496792][ T6008] [ 60.506520][ T6008] EXT4-fs (loop3): Total free blocks count 0 [ 60.512526][ T6008] EXT4-fs (loop3): Free/Dirty block details [ 60.518670][ T6008] EXT4-fs (loop3): free_blocks=2415919104 [ 60.524542][ T6008] EXT4-fs (loop3): dirty_blocks=2928 [ 60.529826][ T6008] EXT4-fs (loop3): Block reservation details [ 60.535832][ T6008] EXT4-fs (loop3): i_reserved_data_blocks=183 [ 60.538106][ T6026] xt_CONNSECMARK: invalid mode: 0 [ 60.602234][ T6026] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.620116][ T335] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 870 with error 28 [ 60.632745][ T335] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.632745][ T335] [ 60.642471][ T6030] ebtables: ebtables: counters copy to user failed while replacing table [ 60.652121][ T6034] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.707600][ T6039] loop0: detected capacity change from 0 to 512 [ 60.726759][ T6041] dvmrp0: entered allmulticast mode [ 60.756653][ T6039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.783100][ T6044] loop3: detected capacity change from 0 to 512 [ 60.803809][ T6047] dvmrp0: left allmulticast mode [ 60.810626][ T6039] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.822742][ T6044] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.830887][ T6051] loop4: detected capacity change from 0 to 512 [ 60.843186][ T6051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.859055][ T6041] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 60.867264][ T6041] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 60.884676][ T6051] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.936704][ T6057] loop1: detected capacity change from 0 to 512 [ 60.982741][ T6057] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.016282][ T6068] dvmrp0: entered allmulticast mode [ 61.021228][ T6072] syz.3.616: attempt to access beyond end of device [ 61.021228][ T6072] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.022636][ T6057] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.612: corrupted inode contents [ 61.049883][ T6057] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.612: mark_inode_dirty error [ 61.052331][ T6072] loop3: detected capacity change from 0 to 2048 [ 61.062050][ T6057] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.612: corrupted inode contents [ 61.131623][ T6079] loop1: detected capacity change from 0 to 1024 [ 61.152298][ T6082] dvmrp0: left allmulticast mode [ 61.179674][ T6084] loop0: detected capacity change from 0 to 512 [ 61.195453][ T6085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.197756][ T6079] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.218774][ T6085] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 61.233153][ T6085] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.233153][ T6085] [ 61.236697][ T6068] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 61.242800][ T6085] EXT4-fs (loop3): Total free blocks count 0 [ 61.250932][ T6068] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 61.256883][ T6085] EXT4-fs (loop3): Free/Dirty block details [ 61.256896][ T6085] EXT4-fs (loop3): free_blocks=2415919104 [ 61.277063][ T6085] EXT4-fs (loop3): dirty_blocks=2800 [ 61.282392][ T6085] EXT4-fs (loop3): Block reservation details [ 61.288434][ T6085] EXT4-fs (loop3): i_reserved_data_blocks=175 [ 61.296555][ T6068] loop4: detected capacity change from 0 to 512 [ 61.340052][ T6068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.341430][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 734 with error 28 [ 61.355594][ T6084] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.361316][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.361316][ T11] [ 61.402836][ T6094] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 61.411115][ T6094] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 61.430675][ T6079] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.440776][ T6068] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.688404][ T6123] loop3: detected capacity change from 0 to 256 [ 61.733064][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 61.775069][ T6127] FAULT_INJECTION: forcing a failure. [ 61.775069][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.788146][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.3.633 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 61.798793][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.808841][ T6127] Call Trace: [ 61.812108][ T6127] [ 61.815030][ T6127] dump_stack_lvl+0xf2/0x150 [ 61.819619][ T6127] dump_stack+0x15/0x20 [ 61.823838][ T6127] should_fail_ex+0x223/0x230 [ 61.828515][ T6127] should_fail+0xb/0x10 [ 61.832677][ T6127] should_fail_usercopy+0x1a/0x20 [ 61.837696][ T6127] _copy_from_user+0x1e/0xd0 [ 61.842299][ T6127] get_timespec64+0x49/0x140 [ 61.846892][ T6127] __x64_sys_utimensat+0xd9/0x170 [ 61.852007][ T6127] ? __bpf_trace_sys_enter+0x9/0x10 [ 61.857246][ T6127] ? fpregs_assert_state_consistent+0x83/0xa0 [ 61.863328][ T6127] x64_sys_call+0x1fde/0x2d60 [ 61.868062][ T6127] do_syscall_64+0xc9/0x1c0 [ 61.872586][ T6127] ? clear_bhb_loop+0x55/0xb0 [ 61.877266][ T6127] ? clear_bhb_loop+0x55/0xb0 [ 61.881989][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.887884][ T6127] RIP: 0033:0x7f585eacdff9 [ 61.892353][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.911956][ T6127] RSP: 002b:00007f585d747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 61.920397][ T6127] RAX: ffffffffffffffda RBX: 00007f585ec85f80 RCX: 00007f585eacdff9 [ 61.928363][ T6127] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 61.936323][ T6127] RBP: 00007f585d747090 R08: 0000000000000000 R09: 0000000000000000 [ 61.944365][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.952332][ T6127] R13: 0000000000000000 R14: 00007f585ec85f80 R15: 00007ffd5a8f1598 [ 61.960303][ T6127] [ 61.988566][ T6129] loop4: detected capacity change from 0 to 512 [ 62.019513][ T6131] loop3: detected capacity change from 0 to 2048 [ 62.019850][ T6129] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.067254][ T6131] loop3: p2 < > [ 62.072233][ T6131] 9pnet_fd: Insufficient options for proto=fd [ 62.092347][ T6135] block device autoloading is deprecated and will be removed. [ 62.120470][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.134001][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 62.164972][ T6140] loop3: detected capacity change from 0 to 256 [ 62.210869][ T6144] dvmrp0: entered allmulticast mode [ 62.243730][ T6146] loop0: detected capacity change from 0 to 256 [ 62.250959][ T6146] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.284629][ T6147] dvmrp0: left allmulticast mode [ 62.326614][ T6144] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 62.334842][ T6144] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 62.341120][ T6153] syz.2.644: attempt to access beyond end of device [ 62.341120][ T6153] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.348173][ T6144] loop4: detected capacity change from 0 to 512 [ 62.372566][ T6144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.383940][ T6153] loop2: detected capacity change from 0 to 2048 [ 62.406073][ T6144] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.474050][ T6166] FAULT_INJECTION: forcing a failure. [ 62.474050][ T6166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.487138][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.1.647 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 62.497797][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.503838][ T6153] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 62.507839][ T6166] Call Trace: [ 62.507847][ T6166] [ 62.507855][ T6166] dump_stack_lvl+0xf2/0x150 [ 62.507877][ T6166] dump_stack+0x15/0x20 [ 62.507892][ T6166] should_fail_ex+0x223/0x230 [ 62.516173][ T6153] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.519367][ T6166] should_fail+0xb/0x10 [ 62.523811][ T6153] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 62.526831][ T6166] should_fail_usercopy+0x1a/0x20 [ 62.530963][ T6153] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.530963][ T6153] [ 62.535607][ T6166] _copy_from_iter+0xd3/0xd20 [ 62.535640][ T6166] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 62.544405][ T6153] EXT4-fs (loop2): Total free blocks count 0 [ 62.548502][ T6166] copy_page_from_iter+0x14f/0x280 [ 62.560895][ T6153] EXT4-fs (loop2): Free/Dirty block details [ 62.565863][ T6166] tun_get_user+0x686/0x24e0 [ 62.565890][ T6166] ? kstrtoull+0x110/0x140 [ 62.575553][ T6153] EXT4-fs (loop2): free_blocks=2415919104 [ 62.580174][ T6166] ? ref_tracker_alloc+0x1f5/0x2f0 [ 62.585709][ T6153] EXT4-fs (loop2): dirty_blocks=2624 [ 62.591637][ T6166] tun_chr_write_iter+0x188/0x240 [ 62.596740][ T6153] EXT4-fs (loop2): Block reservation details [ 62.602565][ T6166] vfs_write+0x76a/0x910 [ 62.607145][ T6153] EXT4-fs (loop2): i_reserved_data_blocks=164 [ 62.611498][ T6166] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 62.654608][ T6166] ksys_write+0xeb/0x1b0 [ 62.658837][ T6166] __x64_sys_write+0x42/0x50 [ 62.663408][ T6166] x64_sys_call+0x27dd/0x2d60 [ 62.668069][ T6166] do_syscall_64+0xc9/0x1c0 [ 62.672548][ T6166] ? clear_bhb_loop+0x55/0xb0 [ 62.677240][ T6166] ? clear_bhb_loop+0x55/0xb0 [ 62.681898][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.687774][ T6166] RIP: 0033:0x7f75caf2cadf [ 62.692165][ T6166] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 62.711823][ T6166] RSP: 002b:00007f75c9ba1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 62.720214][ T6166] RAX: ffffffffffffffda RBX: 00007f75cb0e5f80 RCX: 00007f75caf2cadf [ 62.728209][ T6166] RDX: 000000000000002a RSI: 0000000020000a00 RDI: 00000000000000c8 [ 62.736342][ T6166] RBP: 00007f75c9ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 62.744377][ T6166] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 62.752324][ T6166] R13: 0000000000000001 R14: 00007f75cb0e5f80 R15: 00007ffdf15e1b38 [ 62.760340][ T6166] [ 62.768002][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 572 with error 28 [ 62.780722][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.780722][ T40] [ 62.793777][ T6169] loop1: detected capacity change from 0 to 256 [ 62.813919][ T6171] 9pnet_fd: p9_fd_create_tcp (6171): problem connecting socket to 127.0.0.1 [ 62.822702][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 62.822712][ T29] audit: type=1400 audit(1727770042.994:4547): avc: denied { mounton } for pid=6170 comm="syz.4.649" path="/67/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.856505][ T6171] loop4: detected capacity change from 0 to 128 [ 62.887451][ T29] audit: type=1326 audit(1727770043.064:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 62.912180][ T29] audit: type=1326 audit(1727770043.064:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 62.935565][ T29] audit: type=1326 audit(1727770043.064:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 62.958843][ T29] audit: type=1326 audit(1727770043.064:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 62.982170][ T29] audit: type=1326 audit(1727770043.064:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 63.005510][ T29] audit: type=1326 audit(1727770043.064:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 63.028909][ T29] audit: type=1326 audit(1727770043.064:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 63.052243][ T29] audit: type=1326 audit(1727770043.064:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 63.075619][ T29] audit: type=1326 audit(1727770043.064:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 63.142208][ T6181] syz.1.652: attempt to access beyond end of device [ 63.142208][ T6181] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 63.177329][ T6189] blktrace: Concurrent blktraces are not allowed on loop5 [ 63.183728][ T6185] ebtables: ebtables: counters copy to user failed while replacing table [ 63.207157][ T6194] xt_CONNSECMARK: invalid mode: 0 [ 63.215016][ T6194] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.228368][ T6181] loop1: detected capacity change from 0 to 2048 [ 63.235631][ T6194] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.268833][ T6201] dvmrp0: entered allmulticast mode [ 63.274332][ T6204] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 63.287556][ T6196] xt_CONNSECMARK: invalid mode: 0 [ 63.294407][ T6196] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.301711][ T6196] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.315979][ T6192] ebtables: ebtables: counters copy to user failed while replacing table [ 63.358999][ T6210] dvmrp0: left allmulticast mode [ 63.413143][ T6201] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 63.421400][ T6201] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 63.453966][ T6201] loop2: detected capacity change from 0 to 512 [ 63.468700][ T6201] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.505297][ T6181] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.523264][ T6181] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 63.535892][ T6181] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.535892][ T6181] [ 63.545557][ T6181] EXT4-fs (loop1): Total free blocks count 0 [ 63.551606][ T6181] EXT4-fs (loop1): Free/Dirty block details [ 63.555750][ T6236] loop4: detected capacity change from 0 to 512 [ 63.557533][ T6181] EXT4-fs (loop1): free_blocks=2415919104 [ 63.569534][ T6181] EXT4-fs (loop1): dirty_blocks=3632 [ 63.571924][ T6227] ebtables: ebtables: counters copy to user failed while replacing table [ 63.574841][ T6181] EXT4-fs (loop1): Block reservation details [ 63.585433][ T6236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.589344][ T6181] EXT4-fs (loop1): i_reserved_data_blocks=227 [ 63.606663][ T6201] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.641834][ T6236] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.652295][ T6243] FAULT_INJECTION: forcing a failure. [ 63.652295][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 63.664935][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.3.673 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 63.675632][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.685661][ T6243] Call Trace: [ 63.688989][ T6243] [ 63.691940][ T6243] dump_stack_lvl+0xf2/0x150 [ 63.696558][ T6243] dump_stack+0x15/0x20 [ 63.700712][ T6243] should_fail_ex+0x223/0x230 [ 63.705413][ T6243] ? __pfx_ip6_dst_gc+0x10/0x10 [ 63.710368][ T6243] ? dst_alloc+0xc0/0x100 [ 63.714698][ T6243] should_failslab+0x8f/0xb0 [ 63.719279][ T6243] kmem_cache_alloc_noprof+0x4c/0x290 [ 63.724647][ T6243] dst_alloc+0xc0/0x100 [ 63.728793][ T6243] ip6_rt_cache_alloc+0x20f/0x5b0 [ 63.733856][ T6243] ip6_pol_route+0xac8/0xb90 [ 63.738469][ T6243] ip6_pol_route_output+0x3f/0x50 [ 63.743543][ T6243] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 63.749288][ T6243] fib6_rule_lookup+0x137/0x4e0 [ 63.754157][ T6243] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 63.759948][ T6243] ? memcg_list_lru_alloc+0xd2/0x740 [ 63.765227][ T6243] ? mod_objcg_state+0x2ea/0x4f0 [ 63.770202][ T6243] ? mod_objcg_state+0x2ea/0x4f0 [ 63.775132][ T6243] ? dev_get_by_index_rcu+0x9a/0xb0 [ 63.780394][ T6243] ip6_route_output_flags+0x1f1/0x2e0 [ 63.785783][ T6243] ip6_dst_lookup_tail+0x4d6/0xa60 [ 63.790897][ T6243] ? selinux_file_open+0x34a/0x3b0 [ 63.795997][ T6243] ip6_dst_lookup_flow+0x48/0xc0 [ 63.801120][ T6243] rawv6_sendmsg+0x9b2/0xf50 [ 63.805771][ T6243] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 63.811008][ T6243] inet_sendmsg+0xc5/0xd0 [ 63.815327][ T6243] __sock_sendmsg+0x102/0x180 [ 63.819993][ T6243] sock_write_iter+0x15e/0x1a0 [ 63.824775][ T6243] vfs_write+0x76a/0x910 [ 63.829058][ T6243] ? __pfx_sock_write_iter+0x10/0x10 [ 63.834336][ T6243] ksys_write+0xeb/0x1b0 [ 63.838590][ T6243] __x64_sys_write+0x42/0x50 [ 63.843251][ T6243] x64_sys_call+0x27dd/0x2d60 [ 63.847973][ T6243] do_syscall_64+0xc9/0x1c0 [ 63.852557][ T6243] ? clear_bhb_loop+0x55/0xb0 [ 63.857303][ T6243] ? clear_bhb_loop+0x55/0xb0 [ 63.861973][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.867858][ T6243] RIP: 0033:0x7f585eacdff9 [ 63.872260][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.891934][ T6243] RSP: 002b:00007f585d747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.900384][ T6243] RAX: ffffffffffffffda RBX: 00007f585ec85f80 RCX: 00007f585eacdff9 [ 63.908339][ T6243] RDX: 0000000000000043 RSI: 00000000200000c0 RDI: 0000000000000006 [ 63.916311][ T6243] RBP: 00007f585d747090 R08: 0000000000000000 R09: 0000000000000000 [ 63.924270][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.932227][ T6243] R13: 0000000000000000 R14: 00007f585ec85f80 R15: 00007ffd5a8f1598 [ 63.940187][ T6243] [ 63.949510][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1580 with error 28 [ 63.962268][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.962268][ T50] [ 64.027061][ T6250] loop1: detected capacity change from 0 to 256 [ 64.110542][ T6257] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 64.127821][ T6263] smc: net device bond0 applied user defined pnetid SYZ0 [ 64.130843][ T6265] netlink: 'syz.4.676': attribute type 3 has an invalid length. [ 64.136784][ T6263] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.236729][ T6280] ebtables: ebtables: counters copy to user failed while replacing table [ 64.332700][ T6300] loop1: detected capacity change from 0 to 256 [ 64.346049][ T6300] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.396791][ T6305] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.620328][ T6332] 9pnet_fd: Insufficient options for proto=fd [ 64.700886][ T6351] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.730262][ T6356] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.793163][ T6367] dvmrp0: entered allmulticast mode [ 64.800890][ T6360] loop3: detected capacity change from 0 to 2048 [ 64.824831][ T6372] loop4: detected capacity change from 0 to 256 [ 64.832071][ T6372] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.855944][ T6360] loop3: p2 < > [ 64.865853][ T6360] 9pnet_fd: Insufficient options for proto=fd [ 64.892457][ T3253] udevd[3253]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 64.902359][ T6378] loop3: detected capacity change from 0 to 512 [ 64.921446][ T6375] dvmrp0: left allmulticast mode [ 64.957100][ T6378] EXT4-fs mount: 98 callbacks suppressed [ 64.957112][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 64.965450][ T6388] ebtables: ebtables: counters copy to user failed while replacing table [ 64.975458][ T6378] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.020193][ T6393] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 65.028419][ T6393] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 65.088373][ T6397] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.181119][ T6413] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 65.282624][ T6428] loop1: detected capacity change from 0 to 512 [ 65.311355][ T6428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.335129][ T6428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.349771][ T6428] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.476775][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.575427][ T6461] dvmrp0: entered allmulticast mode [ 65.660044][ T6474] dvmrp0: left allmulticast mode [ 65.724296][ T6461] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 65.732524][ T6461] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 65.745427][ T6461] loop4: detected capacity change from 0 to 512 [ 65.757496][ T6461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.775705][ T6461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.788386][ T6461] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.800817][ T6461] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.749: corrupted inode contents [ 65.812894][ T6461] EXT4-fs (loop4): Remounting filesystem read-only [ 65.820756][ T6461] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 65.875394][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 65.892324][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.934832][ T6487] loop4: detected capacity change from 0 to 512 [ 65.943597][ T6487] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.752: bg 0: block 5: invalid block bitmap [ 65.956015][ T6487] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.964942][ T6487] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.752: invalid indirect mapped block 3 (level 2) [ 65.978157][ T6487] EXT4-fs (loop4): 1 orphan inode deleted [ 65.983935][ T6487] EXT4-fs (loop4): 1 truncate cleaned up [ 65.989822][ T6487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.006635][ T6495] xt_CONNSECMARK: invalid mode: 0 [ 66.006797][ T6487] EXT4-fs error (device loop4): ext4_check_dx_root:2220: inode #2: comm syz.4.752: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 66.015807][ T6495] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.037608][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.037670][ T6495] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.067782][ T6498] FAULT_INJECTION: forcing a failure. [ 66.067782][ T6498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.080859][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.4.756 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 66.091458][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.101512][ T6498] Call Trace: [ 66.104784][ T6498] [ 66.107719][ T6498] dump_stack_lvl+0xf2/0x150 [ 66.112326][ T6498] dump_stack+0x15/0x20 [ 66.116490][ T6498] should_fail_ex+0x223/0x230 [ 66.121189][ T6498] should_fail+0xb/0x10 [ 66.125450][ T6498] should_fail_usercopy+0x1a/0x20 [ 66.130481][ T6498] _copy_to_user+0x1e/0xa0 [ 66.134943][ T6498] simple_read_from_buffer+0xa0/0x110 [ 66.140327][ T6498] proc_fail_nth_read+0xf9/0x140 [ 66.145269][ T6498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.150819][ T6498] vfs_read+0x195/0x720 [ 66.155068][ T6498] ? __rcu_read_unlock+0x4e/0x70 [ 66.160006][ T6498] ? __fget_files+0x1d4/0x210 [ 66.164746][ T6498] ksys_read+0xeb/0x1b0 [ 66.168905][ T6498] __x64_sys_read+0x42/0x50 [ 66.173467][ T6498] x64_sys_call+0x27d3/0x2d60 [ 66.178201][ T6498] do_syscall_64+0xc9/0x1c0 [ 66.182690][ T6498] ? clear_bhb_loop+0x55/0xb0 [ 66.187396][ T6498] ? clear_bhb_loop+0x55/0xb0 [ 66.192102][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.197995][ T6498] RIP: 0033:0x7fb4da12ca3c [ 66.202424][ T6498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 66.222094][ T6498] RSP: 002b:00007fb4d8da1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.230563][ T6498] RAX: ffffffffffffffda RBX: 00007fb4da2e5f80 RCX: 00007fb4da12ca3c [ 66.238521][ T6498] RDX: 000000000000000f RSI: 00007fb4d8da10a0 RDI: 0000000000000005 [ 66.246502][ T6498] RBP: 00007fb4d8da1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.254460][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.262495][ T6498] R13: 0000000000000000 R14: 00007fb4da2e5f80 R15: 00007fffc9d372a8 [ 66.270472][ T6498] [ 66.312675][ T6506] netlink: 'syz.3.759': attribute type 3 has an invalid length. [ 66.379382][ T6518] syz.0.763: attempt to access beyond end of device [ 66.379382][ T6518] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 66.536782][ T6532] ebtables: ebtables: counters copy to user failed while replacing table [ 66.565494][ T6539] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 66.575221][ T6539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.767'. [ 66.705604][ T6548] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 66.808276][ T6555] ebtables: ebtables: counters copy to user failed while replacing table [ 66.909255][ T6578] loop4: detected capacity change from 0 to 1024 [ 66.934381][ T6578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.976606][ T6578] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.011450][ T6594] FAULT_INJECTION: forcing a failure. [ 67.011450][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 67.024096][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.3.780 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 67.034689][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.044799][ T6594] Call Trace: [ 67.048077][ T6594] [ 67.051034][ T6594] dump_stack_lvl+0xf2/0x150 [ 67.055623][ T6594] dump_stack+0x15/0x20 [ 67.059771][ T6594] should_fail_ex+0x223/0x230 [ 67.064467][ T6594] ? __alloc_skb+0x10b/0x310 [ 67.069058][ T6594] should_failslab+0x8f/0xb0 [ 67.073644][ T6594] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 67.079461][ T6594] __alloc_skb+0x10b/0x310 [ 67.083927][ T6594] netlink_alloc_large_skb+0xad/0xe0 [ 67.089311][ T6594] netlink_sendmsg+0x3b4/0x6e0 [ 67.094091][ T6594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.099373][ T6594] __sock_sendmsg+0x140/0x180 [ 67.104082][ T6594] ____sys_sendmsg+0x312/0x410 [ 67.108850][ T6594] __sys_sendmsg+0x1d9/0x270 [ 67.113457][ T6594] __x64_sys_sendmsg+0x46/0x50 [ 67.118280][ T6594] x64_sys_call+0x2689/0x2d60 [ 67.122961][ T6594] do_syscall_64+0xc9/0x1c0 [ 67.127464][ T6594] ? clear_bhb_loop+0x55/0xb0 [ 67.132246][ T6594] ? clear_bhb_loop+0x55/0xb0 [ 67.136917][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.144384][ T6594] RIP: 0033:0x7f585eacdff9 [ 67.148821][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.168477][ T6594] RSP: 002b:00007f585d747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.177004][ T6594] RAX: ffffffffffffffda RBX: 00007f585ec85f80 RCX: 00007f585eacdff9 [ 67.184977][ T6594] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 67.192945][ T6594] RBP: 00007f585d747090 R08: 0000000000000000 R09: 0000000000000000 [ 67.200977][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.208946][ T6594] R13: 0000000000000000 R14: 00007f585ec85f80 R15: 00007ffd5a8f1598 [ 67.216937][ T6594] [ 67.254822][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.305962][ T6602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6602 comm=syz.3.781 [ 67.331660][ T6609] tmpfs: Unknown parameter 'nr_bocks' [ 67.337131][ T6608] tmpfs: Unknown parameter 'nr_bocks' [ 67.469653][ T6620] ebtables: ebtables: counters copy to user failed while replacing table [ 67.563612][ T6631] dvmrp0: entered allmulticast mode [ 67.588571][ T6637] loop4: detected capacity change from 0 to 512 [ 67.608545][ T6637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.658151][ T6637] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.672669][ T6648] dvmrp0: left allmulticast mode [ 67.680932][ T6655] loop1: detected capacity change from 0 to 512 [ 67.701397][ T6655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.736284][ T6655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.755806][ T6655] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.758665][ T6631] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 67.774682][ T6631] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 67.786469][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.839801][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.879829][ T6684] loop1: detected capacity change from 0 to 512 [ 67.901885][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 67.901897][ T29] audit: type=1326 audit(1727770048.074:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 67.934348][ T29] audit: type=1326 audit(1727770048.074:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 67.957838][ T29] audit: type=1326 audit(1727770048.074:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 67.981467][ T29] audit: type=1326 audit(1727770048.074:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 67.997328][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 68.004881][ T29] audit: type=1326 audit(1727770048.074:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 68.018328][ T6684] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.040626][ T29] audit: type=1326 audit(1727770048.074:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ed5c0cadf code=0x7ffc0000 [ 68.074118][ T29] audit: type=1326 audit(1727770048.074:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 68.097474][ T29] audit: type=1326 audit(1727770048.074:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 68.120775][ T29] audit: type=1326 audit(1727770048.074:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 68.144269][ T29] audit: type=1326 audit(1727770048.074:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ed5c0dff9 code=0x7ffc0000 [ 68.265329][ T6714] syz.0.809: attempt to access beyond end of device [ 68.265329][ T6714] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 68.502123][ T6722] rdma_op ffff8881189ad180 conn xmit_rdma 0000000000000000 [ 68.564988][ T6724] xt_CONNSECMARK: invalid mode: 0 [ 68.570908][ T6724] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.588723][ T6724] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.954223][ T6754] xt_CONNSECMARK: invalid mode: 0 [ 68.991916][ T6754] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.012057][ T6754] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.012679][ T6757] netlink: 'syz.2.823': attribute type 2 has an invalid length. [ 69.056512][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 69.137540][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.235164][ T6802] 9pnet_fd: Insufficient options for proto=fd [ 69.325051][ T6814] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.336754][ T6816] ebtables: ebtables: counters copy to user failed while replacing table [ 69.359103][ T6822] syz.4.836: attempt to access beyond end of device [ 69.359103][ T6822] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 69.375273][ T6826] xt_CONNSECMARK: invalid mode: 0 [ 69.381300][ T6826] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.390071][ T6826] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.424031][ T6822] loop4: detected capacity change from 0 to 2048 [ 69.445806][ T6822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.526892][ T6851] loop1: detected capacity change from 0 to 256 [ 69.536189][ T6822] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.556100][ T6822] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.568563][ T6822] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.568563][ T6822] [ 69.569264][ T6851] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.578190][ T6822] EXT4-fs (loop4): Total free blocks count 0 [ 69.594659][ T6822] EXT4-fs (loop4): Free/Dirty block details [ 69.600558][ T6822] EXT4-fs (loop4): free_blocks=2415919104 [ 69.606368][ T6822] EXT4-fs (loop4): dirty_blocks=2256 [ 69.611811][ T6822] EXT4-fs (loop4): Block reservation details [ 69.617817][ T6822] EXT4-fs (loop4): i_reserved_data_blocks=141 [ 69.682602][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 194 with error 28 [ 69.695954][ T6872] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.730716][ T6879] random: crng reseeded on system resumption [ 69.783314][ T6869] FAULT_INJECTION: forcing a failure. [ 69.783314][ T6869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.796444][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.1.845 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 69.796784][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 69.807079][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.807093][ T6869] Call Trace: [ 69.827526][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 69.829161][ T6869] [ 69.829171][ T6869] dump_stack_lvl+0xf2/0x150 [ 69.845643][ T6869] dump_stack+0x15/0x20 [ 69.849870][ T6869] should_fail_ex+0x223/0x230 [ 69.854614][ T6869] should_fail+0xb/0x10 [ 69.858828][ T6869] should_fail_usercopy+0x1a/0x20 [ 69.863969][ T6869] _copy_from_user+0x1e/0xd0 [ 69.868628][ T6869] restore_altstack+0x48/0xd0 [ 69.873316][ T6869] __do_sys_rt_sigreturn+0xbf/0x150 [ 69.878555][ T6869] x64_sys_call+0x28e1/0x2d60 [ 69.883232][ T6869] do_syscall_64+0xc9/0x1c0 [ 69.887747][ T6869] ? clear_bhb_loop+0x55/0xb0 [ 69.892462][ T6869] ? clear_bhb_loop+0x55/0xb0 [ 69.897148][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.903047][ T6869] RIP: 0033:0x7f75caec9959 [ 69.907462][ T6869] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 69.927109][ T6869] RSP: 002b:00007f75c9ba0a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 69.935529][ T6869] RAX: ffffffffffffffda RBX: 00007f75cb0e5f80 RCX: 00007f75caec9959 [ 69.943498][ T6869] RDX: 00007f75c9ba0a80 RSI: 00007f75c9ba0bb0 RDI: 0000000000000011 [ 69.951468][ T6869] RBP: 00007f75c9ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 69.959517][ T6869] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 69.967478][ T6869] R13: 0000000000000000 R14: 00007f75cb0e5f80 R15: 00007ffdf15e1b38 [ 69.975442][ T6869] [ 70.086088][ T6890] loop1: detected capacity change from 0 to 2048 [ 70.104914][ T6890] loop1: p2 < > p4 [ 70.109208][ T6890] loop1: p4 size 8192 extends beyond EOD, truncated [ 70.120043][ T6893] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.144682][ T6896] loop3: detected capacity change from 0 to 512 [ 70.165891][ T6897] FAULT_INJECTION: forcing a failure. [ 70.165891][ T6897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.173453][ T6896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.178960][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.0.853 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 70.178983][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.208001][ T6897] Call Trace: [ 70.211279][ T6897] [ 70.214228][ T6897] dump_stack_lvl+0xf2/0x150 [ 70.218817][ T6897] dump_stack+0x15/0x20 [ 70.222972][ T6897] should_fail_ex+0x223/0x230 [ 70.227714][ T6897] should_fail+0xb/0x10 [ 70.231976][ T6897] should_fail_usercopy+0x1a/0x20 [ 70.237049][ T6897] _copy_to_user+0x1e/0xa0 [ 70.241527][ T6897] simple_read_from_buffer+0xa0/0x110 [ 70.246909][ T6897] proc_fail_nth_read+0xf9/0x140 [ 70.251856][ T6897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.257461][ T6897] vfs_read+0x195/0x720 [ 70.261630][ T6897] ? __rcu_read_unlock+0x4e/0x70 [ 70.266577][ T6897] ? __fget_files+0x1d4/0x210 [ 70.271304][ T6897] ksys_read+0xeb/0x1b0 [ 70.275486][ T6897] __x64_sys_read+0x42/0x50 [ 70.280052][ T6897] x64_sys_call+0x27d3/0x2d60 [ 70.284815][ T6897] do_syscall_64+0xc9/0x1c0 [ 70.289315][ T6897] ? clear_bhb_loop+0x55/0xb0 [ 70.294006][ T6897] ? clear_bhb_loop+0x55/0xb0 [ 70.298821][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.304779][ T6897] RIP: 0033:0x7fcbae55ca3c [ 70.309194][ T6897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 70.328800][ T6897] RSP: 002b:00007fcbad1d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.337215][ T6897] RAX: ffffffffffffffda RBX: 00007fcbae715f80 RCX: 00007fcbae55ca3c [ 70.345247][ T6897] RDX: 000000000000000f RSI: 00007fcbad1d70a0 RDI: 0000000000000003 [ 70.353213][ T6897] RBP: 00007fcbad1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.361205][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.369348][ T6897] R13: 0000000000000000 R14: 00007fcbae715f80 R15: 00007ffc210d3e38 [ 70.377320][ T6897] [ 70.391525][ T6896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.414575][ T6896] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.479772][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.565680][ T6919] loop4: detected capacity change from 0 to 256 [ 70.625849][ T6927] syz.0.865: attempt to access beyond end of device [ 70.625849][ T6927] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 70.775021][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 70.896729][ T6960] pim6reg1: entered promiscuous mode [ 70.902143][ T6960] pim6reg1: entered allmulticast mode [ 70.979719][ T6975] loop1: detected capacity change from 0 to 1024 [ 71.005092][ T6975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.017230][ T6975] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.035523][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.063786][ T6983] loop1: detected capacity change from 0 to 2048 [ 71.103054][ T6987] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 71.112091][ T6983] loop1: p1 < > p4 [ 71.117483][ T6983] loop1: p4 size 8388608 extends beyond EOD, truncated [ 71.141464][ T2967] loop1: p1 < > p4 [ 71.145935][ T2967] loop1: p4 size 8388608 extends beyond EOD, truncated [ 71.177787][ T3253] udevd[3253]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 71.180638][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.291017][ T7014] FAULT_INJECTION: forcing a failure. [ 71.291017][ T7014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.304146][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.1.890 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 71.314789][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.324854][ T7014] Call Trace: [ 71.328164][ T7014] [ 71.331089][ T7014] dump_stack_lvl+0xf2/0x150 [ 71.335689][ T7014] dump_stack+0x15/0x20 [ 71.339851][ T7014] should_fail_ex+0x223/0x230 [ 71.344590][ T7014] should_fail+0xb/0x10 [ 71.348826][ T7014] should_fail_usercopy+0x1a/0x20 [ 71.353910][ T7014] _copy_from_user+0x1e/0xd0 [ 71.358624][ T7014] __se_sys_memfd_create+0x26b/0x5c0 [ 71.363909][ T7014] __x64_sys_memfd_create+0x31/0x40 [ 71.369184][ T7014] x64_sys_call+0x2891/0x2d60 [ 71.373854][ T7014] do_syscall_64+0xc9/0x1c0 [ 71.378397][ T7014] ? clear_bhb_loop+0x55/0xb0 [ 71.383145][ T7014] ? clear_bhb_loop+0x55/0xb0 [ 71.387860][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.393752][ T7014] RIP: 0033:0x7f75caf2dff9 [ 71.398158][ T7014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.417760][ T7014] RSP: 002b:00007f75c9ba0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.426172][ T7014] RAX: ffffffffffffffda RBX: 00000000000005b2 RCX: 00007f75caf2dff9 [ 71.434129][ T7014] RDX: 00007f75c9ba0ef0 RSI: 0000000000000000 RDI: 00007f75cafa0b02 [ 71.442199][ T7014] RBP: 0000000020000600 R08: 00007f75c9ba0bb7 R09: 00007f75c9ba0e40 [ 71.450175][ T7014] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 71.458150][ T7014] R13: 00007f75c9ba0ef0 R14: 00007f75c9ba0eb0 R15: 00000000200004c0 [ 71.466114][ T7014] [ 71.542150][ T7033] pim6reg1: entered promiscuous mode [ 71.547541][ T7033] pim6reg1: entered allmulticast mode [ 71.837868][ T7076] netlink: 'syz.4.914': attribute type 33 has an invalid length. [ 71.853134][ T7076] team0: Port device team_slave_0 removed [ 71.859373][ T7076] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 71.875712][ T7078] pim6reg1: entered promiscuous mode [ 71.881024][ T7078] pim6reg1: entered allmulticast mode [ 71.908492][ T7081] FAULT_INJECTION: forcing a failure. [ 71.908492][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.921566][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.4.915 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 71.932151][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.942200][ T7081] Call Trace: [ 71.945482][ T7081] [ 71.948433][ T7081] dump_stack_lvl+0xf2/0x150 [ 71.953006][ T7081] dump_stack+0x15/0x20 [ 71.957179][ T7081] should_fail_ex+0x223/0x230 [ 71.961843][ T7081] should_fail+0xb/0x10 [ 71.966053][ T7081] should_fail_usercopy+0x1a/0x20 [ 71.971088][ T7081] _copy_to_user+0x1e/0xa0 [ 71.975641][ T7081] simple_read_from_buffer+0xa0/0x110 [ 71.981030][ T7081] proc_fail_nth_read+0xf9/0x140 [ 71.985998][ T7081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.991535][ T7081] vfs_read+0x195/0x720 [ 71.995701][ T7081] ? __rcu_read_unlock+0x4e/0x70 [ 72.000647][ T7081] ? __fget_files+0x1d4/0x210 [ 72.005334][ T7081] ksys_read+0xeb/0x1b0 [ 72.009564][ T7081] __x64_sys_read+0x42/0x50 [ 72.014123][ T7081] x64_sys_call+0x27d3/0x2d60 [ 72.018783][ T7081] do_syscall_64+0xc9/0x1c0 [ 72.023273][ T7081] ? clear_bhb_loop+0x55/0xb0 [ 72.027996][ T7081] ? clear_bhb_loop+0x55/0xb0 [ 72.032684][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.038562][ T7081] RIP: 0033:0x7fb4da12ca3c [ 72.042959][ T7081] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 72.062562][ T7081] RSP: 002b:00007fb4d8da1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.070956][ T7081] RAX: ffffffffffffffda RBX: 00007fb4da2e5f80 RCX: 00007fb4da12ca3c [ 72.078919][ T7081] RDX: 000000000000000f RSI: 00007fb4d8da10a0 RDI: 0000000000000005 [ 72.086872][ T7081] RBP: 00007fb4d8da1090 R08: 0000000000000000 R09: 0000000000000000 [ 72.094890][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.102854][ T7081] R13: 0000000000000000 R14: 00007fb4da2e5f80 R15: 00007fffc9d372a8 [ 72.110874][ T7081] [ 72.462382][ T7098] syz.3.919: attempt to access beyond end of device [ 72.462382][ T7098] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 72.717760][ T7123] syzkaller0: entered promiscuous mode [ 72.723340][ T7123] syzkaller0: entered allmulticast mode [ 72.734247][ T7128] dvmrp0: entered allmulticast mode [ 72.841725][ T7151] dvmrp0: left allmulticast mode [ 72.899493][ T7128] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 72.907721][ T7128] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 73.076294][ T7174] block device autoloading is deprecated and will be removed. [ 73.088032][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 73.113269][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 73.113283][ T29] audit: type=1400 audit(1727770053.284:5228): avc: denied { read } for pid=7177 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.162397][ T7182] dvmrp0: entered allmulticast mode [ 73.240164][ T7187] netlink: 'syz.1.943': attribute type 3 has an invalid length. [ 73.286385][ T7192] dvmrp0: left allmulticast mode [ 73.310546][ T7182] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 73.318851][ T7182] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 73.341241][ T29] audit: type=1326 audit(1727770053.514:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 73.364608][ T29] audit: type=1326 audit(1727770053.514:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 73.387827][ T29] audit: type=1326 audit(1727770053.514:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 73.411116][ T29] audit: type=1326 audit(1727770053.514:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz.1.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75caf2dff9 code=0x7ffc0000 [ 73.527031][ T29] audit: type=1400 audit(1727770053.704:5233): avc: denied { read } for pid=7228 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.608834][ T29] audit: type=1326 audit(1727770053.784:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae55dff9 code=0x7ffc0000 [ 73.632243][ T29] audit: type=1326 audit(1727770053.784:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae55dff9 code=0x7ffc0000 [ 73.656490][ T29] audit: type=1326 audit(1727770053.844:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fcbae55dff9 code=0x7ffc0000 [ 73.679899][ T29] audit: type=1326 audit(1727770053.844:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae55dff9 code=0x7ffc0000 [ 73.705495][ T7234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7234 comm=syz.0.947 [ 73.870062][ T7243] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 73.967993][ T7253] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.014598][ T7253] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.577251][ T7288] dvmrp0: entered allmulticast mode [ 74.604484][ T7294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.972'. [ 74.631422][ T7298] pim6reg1: entered promiscuous mode [ 74.636763][ T7298] pim6reg1: entered allmulticast mode [ 74.657201][ T7301] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 74.673112][ T7300] dvmrp0: left allmulticast mode [ 74.680512][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 74.689567][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 74.721290][ T7288] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 74.729545][ T7288] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 74.776686][ T7313] syz.3.979: attempt to access beyond end of device [ 74.776686][ T7313] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 75.071111][ T7338] tun0: tun_chr_ioctl cmd 1074812117 [ 75.156127][ T7346] pim6reg1: entered promiscuous mode [ 75.161459][ T7346] pim6reg1: entered allmulticast mode [ 75.188043][ T7346] FAULT_INJECTION: forcing a failure. [ 75.188043][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 75.200741][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.3.985 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 75.211334][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.221421][ T7346] Call Trace: [ 75.224697][ T7346] [ 75.227626][ T7346] dump_stack_lvl+0xf2/0x150 [ 75.232277][ T7346] dump_stack+0x15/0x20 [ 75.236489][ T7346] should_fail_ex+0x223/0x230 [ 75.241235][ T7346] ? fib6_info_alloc+0x2c/0x90 [ 75.246088][ T7346] should_failslab+0x8f/0xb0 [ 75.250680][ T7346] __kmalloc_noprof+0xa5/0x370 [ 75.255517][ T7346] fib6_info_alloc+0x2c/0x90 [ 75.260156][ T7346] ip6_route_info_create+0x34c/0xba0 [ 75.265516][ T7346] ? ipv6_add_addr+0x7f2/0x820 [ 75.270306][ T7346] ip6_route_add+0x26/0x120 [ 75.274912][ T7346] addrconf_add_linklocal+0x29c/0x390 [ 75.280364][ T7346] addrconf_addr_gen+0x3f7/0x450 [ 75.285310][ T7346] ? addrconf_add_dev+0x1c6/0x240 [ 75.290338][ T7346] addrconf_init_auto_addrs+0x586/0x6b0 [ 75.296016][ T7346] ? finish_task_switch+0xb5/0x2b0 [ 75.301195][ T7346] ? __schedule+0x732/0x940 [ 75.305706][ T7346] ? __pfx_tee_netdev_event+0x10/0x10 [ 75.311099][ T7346] addrconf_notify+0x7ae/0x950 [ 75.315938][ T7346] ? __pfx_addrconf_notify+0x10/0x10 [ 75.321226][ T7346] raw_notifier_call_chain+0x6f/0x1d0 [ 75.326601][ T7346] call_netdevice_notifiers_info+0xae/0x100 [ 75.332500][ T7346] __dev_notify_flags+0xff/0x1a0 [ 75.337442][ T7346] dev_change_flags+0xab/0xd0 [ 75.342180][ T7346] dev_ifsioc+0x67f/0xa10 [ 75.346521][ T7346] dev_ioctl+0x7fa/0xab0 [ 75.350813][ T7346] sock_do_ioctl+0x11c/0x260 [ 75.355494][ T7346] sock_ioctl+0x46a/0x640 [ 75.359827][ T7346] ? __pfx_sock_ioctl+0x10/0x10 [ 75.364677][ T7346] __se_sys_ioctl+0xcd/0x140 [ 75.369265][ T7346] __x64_sys_ioctl+0x43/0x50 [ 75.373860][ T7346] x64_sys_call+0x15cc/0x2d60 [ 75.378620][ T7346] do_syscall_64+0xc9/0x1c0 [ 75.383126][ T7346] ? clear_bhb_loop+0x55/0xb0 [ 75.387976][ T7346] ? clear_bhb_loop+0x55/0xb0 [ 75.392660][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.398592][ T7346] RIP: 0033:0x7f585eacdff9 [ 75.403003][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.422647][ T7346] RSP: 002b:00007f585d747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.431067][ T7346] RAX: ffffffffffffffda RBX: 00007f585ec85f80 RCX: 00007f585eacdff9 [ 75.439048][ T7346] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 000000000000000b [ 75.447029][ T7346] RBP: 00007f585d747090 R08: 0000000000000000 R09: 0000000000000000 [ 75.455004][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.462966][ T7346] R13: 0000000000000000 R14: 00007f585ec85f80 R15: 00007ffd5a8f1598 [ 75.470935][ T7346] [ 75.574880][ T7367] netlink: 'syz.3.987': attribute type 9 has an invalid length. [ 75.582546][ T7367] netlink: 'syz.3.987': attribute type 7 has an invalid length. [ 75.590258][ T7367] netlink: 'syz.3.987': attribute type 8 has an invalid length. [ 75.685481][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 75.799992][ T7376] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 75.914885][ T7384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7384 comm=syz.2.995 [ 76.244308][ T7418] netlink: 'syz.1.1010': attribute type 4 has an invalid length. [ 76.256887][ T7418] netlink: 'syz.1.1010': attribute type 4 has an invalid length. [ 76.820225][ T7456] dvmrp0: entered allmulticast mode [ 76.856338][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 76.868942][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 76.913381][ T7468] dvmrp0: left allmulticast mode [ 76.921095][ T7473] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.525699][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 77.615742][ T7529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7529 comm=syz.1.1044 [ 77.902932][ T7543] block device autoloading is deprecated and will be removed. [ 78.014695][ T7549] 9pnet_fd: Insufficient options for proto=fd [ 78.046660][ T7557] pim6reg1: entered promiscuous mode [ 78.052034][ T7557] pim6reg1: entered allmulticast mode [ 78.076355][ T7561] pim6reg1: entered promiscuous mode [ 78.081678][ T7561] pim6reg1: entered allmulticast mode [ 78.230224][ T7585] netlink: 'syz.3.1059': attribute type 3 has an invalid length. [ 78.245541][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 78.245555][ T29] audit: type=1326 audit(1727770058.414:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 78.275180][ T29] audit: type=1326 audit(1727770058.414:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 78.298596][ T29] audit: type=1326 audit(1727770058.414:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 78.322161][ T29] audit: type=1326 audit(1727770058.414:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585eacdff9 code=0x7ffc0000 [ 78.402312][ T29] audit: type=1326 audit(1727770058.454:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 78.425748][ T29] audit: type=1326 audit(1727770058.454:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 78.449215][ T29] audit: type=1326 audit(1727770058.464:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 78.472883][ T29] audit: type=1326 audit(1727770058.464:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4da12e033 code=0x7ffc0000 [ 78.496358][ T29] audit: type=1326 audit(1727770058.464:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb4da12cadf code=0x7ffc0000 [ 78.519592][ T29] audit: type=1326 audit(1727770058.464:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb4da12e087 code=0x7ffc0000 [ 78.560642][ T7608] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.729864][ T7612] 9pnet_fd: Insufficient options for proto=fd [ 78.826314][ T7658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7658 comm=syz.4.1079 [ 78.873498][ T7666] dvmrp0: entered allmulticast mode [ 78.946503][ T7666] dvmrp0: left allmulticast mode [ 78.999349][ T7676] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 79.007702][ T7676] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 79.068504][ T7694] FAULT_INJECTION: forcing a failure. [ 79.068504][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 79.081158][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.1.1087 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 79.091834][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.101925][ T7694] Call Trace: [ 79.105206][ T7694] [ 79.108136][ T7694] dump_stack_lvl+0xf2/0x150 [ 79.112770][ T7694] dump_stack+0x15/0x20 [ 79.116940][ T7694] should_fail_ex+0x223/0x230 [ 79.121605][ T7694] ? __alloc_skb+0x10b/0x310 [ 79.126184][ T7694] should_failslab+0x8f/0xb0 [ 79.130759][ T7694] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 79.136617][ T7694] __alloc_skb+0x10b/0x310 [ 79.141021][ T7694] audit_log_start+0x368/0x6b0 [ 79.145769][ T7694] audit_seccomp+0x4b/0x130 [ 79.150260][ T7694] __seccomp_filter+0x6fa/0x1180 [ 79.155184][ T7694] __secure_computing+0x9f/0x1c0 [ 79.160107][ T7694] syscall_trace_enter+0xd1/0x1f0 [ 79.165184][ T7694] ? fpregs_assert_state_consistent+0x83/0xa0 [ 79.171305][ T7694] do_syscall_64+0xaa/0x1c0 [ 79.175852][ T7694] ? clear_bhb_loop+0x55/0xb0 [ 79.180532][ T7694] ? clear_bhb_loop+0x55/0xb0 [ 79.185200][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.191221][ T7694] RIP: 0033:0x7f75caf2ca3c [ 79.195644][ T7694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 79.215249][ T7694] RSP: 002b:00007f75c9ba1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.223680][ T7694] RAX: ffffffffffffffda RBX: 00007f75cb0e5f80 RCX: 00007f75caf2ca3c [ 79.231665][ T7694] RDX: 000000000000000f RSI: 00007f75c9ba10a0 RDI: 0000000000000006 [ 79.239623][ T7694] RBP: 00007f75c9ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.247614][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.255576][ T7694] R13: 0000000000000000 R14: 00007f75cb0e5f80 R15: 00007ffdf15e1b38 [ 79.263540][ T7694] [ 79.304961][ T7707] FAULT_INJECTION: forcing a failure. [ 79.304961][ T7707] name failslab, interval 1, probability 0, space 0, times 0 [ 79.317646][ T7707] CPU: 1 UID: 0 PID: 7707 Comm: syz.1.1090 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 79.328486][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.338578][ T7707] Call Trace: [ 79.341883][ T7707] [ 79.344802][ T7707] dump_stack_lvl+0xf2/0x150 [ 79.349394][ T7707] dump_stack+0x15/0x20 [ 79.353616][ T7707] should_fail_ex+0x223/0x230 [ 79.358290][ T7707] ? xfrm_state_alloc+0x2c/0x180 [ 79.363286][ T7707] should_failslab+0x8f/0xb0 [ 79.367866][ T7707] kmem_cache_alloc_noprof+0x4c/0x290 [ 79.373264][ T7707] xfrm_state_alloc+0x2c/0x180 [ 79.378016][ T7707] xfrm_state_find+0x17e1/0x25c0 [ 79.383026][ T7707] ? __rcu_read_unlock+0x34/0x70 [ 79.388039][ T7707] ? bpf_send_signal_common+0x1a5/0x230 [ 79.393586][ T7707] xfrm_resolve_and_create_bundle+0x4b5/0x1c40 [ 79.399746][ T7707] ? xfrm_expand_policies+0x248/0x2b0 [ 79.405174][ T7707] xfrm_lookup_with_ifid+0x19e/0x12f0 [ 79.410631][ T7707] ? rt_set_nexthop+0x4c7/0x560 [ 79.415476][ T7707] ? xas_load+0x3ae/0x3d0 [ 79.419828][ T7707] xfrm_lookup_route+0x3b/0x110 [ 79.424730][ T7707] ip_route_output_flow+0xea/0x120 [ 79.429842][ T7707] udp_sendmsg+0xe5d/0x12f0 [ 79.434521][ T7707] ? __pfx_udplite_getfrag+0x10/0x10 [ 79.439820][ T7707] ? xas_load+0x3ae/0x3d0 [ 79.444193][ T7707] ? xas_load+0x3ae/0x3d0 [ 79.448575][ T7707] udpv6_sendmsg+0x774/0x1590 [ 79.453328][ T7707] ? _raw_spin_unlock_bh+0x36/0x40 [ 79.458514][ T7707] ? udp_lib_get_port+0xd19/0xdc0 [ 79.463540][ T7707] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 79.468665][ T7707] inet6_sendmsg+0xaf/0xd0 [ 79.473127][ T7707] __sock_sendmsg+0x8b/0x180 [ 79.477708][ T7707] ____sys_sendmsg+0x312/0x410 [ 79.482520][ T7707] __sys_sendmmsg+0x259/0x500 [ 79.487196][ T7707] ? audit_log_end+0x1d0/0x1e0 [ 79.491964][ T7707] __x64_sys_sendmmsg+0x57/0x70 [ 79.496870][ T7707] x64_sys_call+0xa49/0x2d60 [ 79.501511][ T7707] do_syscall_64+0xc9/0x1c0 [ 79.506030][ T7707] ? clear_bhb_loop+0x55/0xb0 [ 79.510721][ T7707] ? clear_bhb_loop+0x55/0xb0 [ 79.515403][ T7707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.521292][ T7707] RIP: 0033:0x7f75caf2dff9 [ 79.525692][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.545342][ T7707] RSP: 002b:00007f75c9ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.553746][ T7707] RAX: ffffffffffffffda RBX: 00007f75cb0e5f80 RCX: 00007f75caf2dff9 [ 79.561703][ T7707] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 000000000000000e [ 79.569662][ T7707] RBP: 00007f75c9ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.577625][ T7707] R10: 0000000000004004 R11: 0000000000000246 R12: 0000000000000002 [ 79.585622][ T7707] R13: 0000000000000000 R14: 00007f75cb0e5f80 R15: 00007ffdf15e1b38 [ 79.593585][ T7707] [ 79.734114][ T7728] FAULT_INJECTION: forcing a failure. [ 79.734114][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 79.746843][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.4.1101 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 79.757515][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.767580][ T7728] Call Trace: [ 79.770860][ T7728] [ 79.773788][ T7728] dump_stack_lvl+0xf2/0x150 [ 79.778422][ T7728] dump_stack+0x15/0x20 [ 79.782567][ T7728] should_fail_ex+0x223/0x230 [ 79.787245][ T7728] ? sock_kmalloc+0x83/0xc0 [ 79.791788][ T7728] should_failslab+0x8f/0xb0 [ 79.796388][ T7728] __kmalloc_noprof+0xa5/0x370 [ 79.801225][ T7728] sock_kmalloc+0x83/0xc0 [ 79.805544][ T7728] ____sys_sendmsg+0x127/0x410 [ 79.810326][ T7728] __sys_sendmsg+0x1d9/0x270 [ 79.814965][ T7728] __x64_sys_sendmsg+0x46/0x50 [ 79.819767][ T7728] x64_sys_call+0x2689/0x2d60 [ 79.824442][ T7728] do_syscall_64+0xc9/0x1c0 [ 79.828931][ T7728] ? clear_bhb_loop+0x55/0xb0 [ 79.833686][ T7728] ? clear_bhb_loop+0x55/0xb0 [ 79.838432][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.844400][ T7728] RIP: 0033:0x7fb4da12dff9 [ 79.848828][ T7728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.868424][ T7728] RSP: 002b:00007fb4d8da1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.876903][ T7728] RAX: ffffffffffffffda RBX: 00007fb4da2e5f80 RCX: 00007fb4da12dff9 [ 79.884862][ T7728] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000e [ 79.892825][ T7728] RBP: 00007fb4d8da1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.900817][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.908895][ T7728] R13: 0000000000000000 R14: 00007fb4da2e5f80 R15: 00007fffc9d372a8 [ 79.916917][ T7728] [ 79.986154][ T7742] FAULT_INJECTION: forcing a failure. [ 79.986154][ T7742] name failslab, interval 1, probability 0, space 0, times 0 [ 79.998833][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.2.1107 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 80.000749][ T7746] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 80.009496][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.009509][ T7742] Call Trace: [ 80.009515][ T7742] [ 80.009521][ T7742] dump_stack_lvl+0xf2/0x150 [ 80.009544][ T7742] dump_stack+0x15/0x20 [ 80.042183][ T7742] should_fail_ex+0x223/0x230 [ 80.046870][ T7742] ? __alloc_skb+0x10b/0x310 [ 80.051456][ T7742] should_failslab+0x8f/0xb0 [ 80.056144][ T7742] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 80.061976][ T7742] __alloc_skb+0x10b/0x310 [ 80.066386][ T7742] netlink_alloc_large_skb+0xad/0xe0 [ 80.071666][ T7742] netlink_sendmsg+0x3b4/0x6e0 [ 80.076557][ T7742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.081830][ T7742] __sock_sendmsg+0x140/0x180 [ 80.086523][ T7742] ____sys_sendmsg+0x312/0x410 [ 80.091290][ T7742] __sys_sendmsg+0x1d9/0x270 [ 80.095968][ T7742] __x64_sys_sendmsg+0x46/0x50 [ 80.100728][ T7742] x64_sys_call+0x2689/0x2d60 [ 80.105397][ T7742] do_syscall_64+0xc9/0x1c0 [ 80.109891][ T7742] ? clear_bhb_loop+0x55/0xb0 [ 80.114566][ T7742] ? clear_bhb_loop+0x55/0xb0 [ 80.119280][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.125206][ T7742] RIP: 0033:0x7f2ed5c0dff9 [ 80.129607][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.149203][ T7742] RSP: 002b:00007f2ed4881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.157644][ T7742] RAX: ffffffffffffffda RBX: 00007f2ed5dc5f80 RCX: 00007f2ed5c0dff9 [ 80.165604][ T7742] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 80.173576][ T7742] RBP: 00007f2ed4881090 R08: 0000000000000000 R09: 0000000000000000 [ 80.181546][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.189505][ T7742] R13: 0000000000000000 R14: 00007f2ed5dc5f80 R15: 00007ffd703ec478 [ 80.197471][ T7742] [ 80.302227][ T7768] FAULT_INJECTION: forcing a failure. [ 80.302227][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.315323][ T7768] CPU: 1 UID: 0 PID: 7768 Comm: syz.3.1119 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 80.326065][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.336198][ T7768] Call Trace: [ 80.339461][ T7768] [ 80.342382][ T7768] dump_stack_lvl+0xf2/0x150 [ 80.347032][ T7768] dump_stack+0x15/0x20 [ 80.351233][ T7768] should_fail_ex+0x223/0x230 [ 80.355924][ T7768] should_fail+0xb/0x10 [ 80.360100][ T7768] should_fail_usercopy+0x1a/0x20 [ 80.365121][ T7768] _copy_to_user+0x1e/0xa0 [ 80.369523][ T7768] simple_read_from_buffer+0xa0/0x110 [ 80.374891][ T7768] proc_fail_nth_read+0xf9/0x140 [ 80.379824][ T7768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.385485][ T7768] vfs_read+0x195/0x720 [ 80.389673][ T7768] ? __rcu_read_unlock+0x4e/0x70 [ 80.394657][ T7768] ? __fget_files+0x1d4/0x210 [ 80.399388][ T7768] ksys_read+0xeb/0x1b0 [ 80.403620][ T7768] __x64_sys_read+0x42/0x50 [ 80.408117][ T7768] x64_sys_call+0x27d3/0x2d60 [ 80.412826][ T7768] do_syscall_64+0xc9/0x1c0 [ 80.417357][ T7768] ? clear_bhb_loop+0x55/0xb0 [ 80.422029][ T7768] ? clear_bhb_loop+0x55/0xb0 [ 80.426705][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.432651][ T7768] RIP: 0033:0x7f585eacca3c [ 80.437056][ T7768] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 80.456724][ T7768] RSP: 002b:00007f585d747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.465268][ T7768] RAX: ffffffffffffffda RBX: 00007f585ec85f80 RCX: 00007f585eacca3c [ 80.473227][ T7768] RDX: 000000000000000f RSI: 00007f585d7470a0 RDI: 0000000000000007 [ 80.481189][ T7768] RBP: 00007f585d747090 R08: 0000000000000000 R09: 0000000000000000 [ 80.489148][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.497160][ T7768] R13: 0000000000000000 R14: 00007f585ec85f80 R15: 00007ffd5a8f1598 [ 80.505193][ T7768] [ 80.531754][ C0] hrtimer: interrupt took 46838 ns [ 80.581099][ T7780] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 80.714766][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1130'. [ 80.735346][ T7794] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 80.802031][ T7794] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 80.908359][ T7813] FAULT_INJECTION: forcing a failure. [ 80.908359][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 80.921064][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.3.1133 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 80.932427][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.942471][ T7813] Call Trace: [ 80.945735][ T7813] [ 80.948649][ T7813] dump_stack_lvl+0xf2/0x150 [ 80.953315][ T7813] dump_stack+0x15/0x20 [ 80.957488][ T7813] should_fail_ex+0x223/0x230 [ 80.962160][ T7813] ? __alloc_skb+0x10b/0x310 [ 80.966744][ T7813] should_failslab+0x8f/0xb0 [ 80.971385][ T7813] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 80.977191][ T7813] __alloc_skb+0x10b/0x310 [ 80.981699][ T7813] netlink_alloc_large_skb+0xad/0xe0 [ 80.986980][ T7813] netlink_sendmsg+0x3b4/0x6e0 [ 80.991859][ T7813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.997129][ T7813] __sock_sendmsg+0x140/0x180 [ 81.001795][ T7813] ____sys_sendmsg+0x312/0x410 [ 81.006605][ T7813] __sys_sendmsg+0x1d9/0x270 [ 81.011198][ T7813] __x64_sys_sendmsg+0x46/0x50 [ 81.016000][ T7813] x64_sys_call+0x2689/0x2d60 [ 81.020748][ T7813] do_syscall_64+0xc9/0x1c0 [ 81.025268][ T7813] ? clear_bhb_loop+0x55/0xb0 [ 81.029944][ T7813] ? clear_bhb_loop+0x55/0xb0 [ 81.034652][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.040542][ T7813] RIP: 0033:0x7f585eacdff9 [ 81.044941][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.064630][ T7813] RSP: 002b:00007f585d747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.073042][ T7813] RAX: ffffffffffffffda RBX: 00007f585ec85f80 RCX: 00007f585eacdff9 [ 81.081000][ T7813] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000005 [ 81.088988][ T7813] RBP: 00007f585d747090 R08: 0000000000000000 R09: 0000000000000000 [ 81.096947][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.104918][ T7813] R13: 0000000000000000 R14: 00007f585ec85f80 R15: 00007ffd5a8f1598 [ 81.112887][ T7813] [ 81.322588][ T7831] pim6reg1: entered promiscuous mode [ 81.328049][ T7831] pim6reg1: entered allmulticast mode [ 82.582983][ T7913] FAULT_INJECTION: forcing a failure. [ 82.582983][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.596102][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.2.1174 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 82.606775][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.616886][ T7913] Call Trace: [ 82.620159][ T7913] [ 82.623089][ T7913] dump_stack_lvl+0xf2/0x150 [ 82.627685][ T7913] dump_stack+0x15/0x20 [ 82.631830][ T7913] should_fail_ex+0x223/0x230 [ 82.636577][ T7913] should_fail+0xb/0x10 [ 82.640782][ T7913] should_fail_usercopy+0x1a/0x20 [ 82.645861][ T7913] _copy_from_iter+0xd3/0xd20 [ 82.650606][ T7913] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 82.656282][ T7913] copy_page_from_iter+0x14f/0x280 [ 82.661395][ T7913] tun_get_user+0x686/0x24e0 [ 82.666049][ T7913] ? kstrtoull+0x110/0x140 [ 82.670471][ T7913] ? ref_tracker_alloc+0x1f5/0x2f0 [ 82.675591][ T7913] tun_chr_write_iter+0x188/0x240 [ 82.680636][ T7913] vfs_write+0x76a/0x910 [ 82.684897][ T7913] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 82.690447][ T7913] ksys_write+0xeb/0x1b0 [ 82.694767][ T7913] __x64_sys_write+0x42/0x50 [ 82.699459][ T7913] x64_sys_call+0x27dd/0x2d60 [ 82.704136][ T7913] do_syscall_64+0xc9/0x1c0 [ 82.708693][ T7913] ? clear_bhb_loop+0x55/0xb0 [ 82.713410][ T7913] ? clear_bhb_loop+0x55/0xb0 [ 82.718099][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.724015][ T7913] RIP: 0033:0x7f2ed5c0cadf [ 82.728416][ T7913] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 82.748090][ T7913] RSP: 002b:00007f2ed4881000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 82.756490][ T7913] RAX: ffffffffffffffda RBX: 00007f2ed5dc5f80 RCX: 00007f2ed5c0cadf [ 82.764477][ T7913] RDX: 000000000000004a RSI: 0000000020000000 RDI: 00000000000000c8 [ 82.772503][ T7913] RBP: 00007f2ed4881090 R08: 0000000000000000 R09: 0000000000000000 [ 82.780460][ T7913] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 82.788479][ T7913] R13: 0000000000000001 R14: 00007f2ed5dc5f80 R15: 00007ffd703ec478 [ 82.796469][ T7913] [ 83.067542][ T7929] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 83.073433][ T7932] 9pnet_fd: Insufficient options for proto=fd [ 83.113828][ T7938] veth0_vlan: entered allmulticast mode [ 83.220411][ T7953] pim6reg1: entered promiscuous mode [ 83.225775][ T7953] pim6reg1: entered allmulticast mode [ 83.286968][ T7938] veth0_vlan: left promiscuous mode [ 83.292739][ T7938] veth0_vlan: entered promiscuous mode [ 83.338663][ T7967] block device autoloading is deprecated and will be removed. [ 83.416244][ T7973] loop3: detected capacity change from 0 to 2048 [ 83.438490][ T7973] /dev/loop3: Can't open blockdev [ 83.462903][ T7973] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.790464][ T8026] block device autoloading is deprecated and will be removed. [ 83.827585][ T8035] pim6reg1: entered promiscuous mode [ 83.832900][ T8035] pim6reg1: entered allmulticast mode [ 83.883479][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 83.883494][ T29] audit: type=1326 audit(1727770064.054:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 83.913109][ T29] audit: type=1326 audit(1727770064.054:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 83.943279][ T29] audit: type=1326 audit(1727770064.114:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.015882][ T29] audit: type=1326 audit(1727770064.124:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.039389][ T29] audit: type=1326 audit(1727770064.124:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.062798][ T29] audit: type=1326 audit(1727770064.144:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.086277][ T29] audit: type=1326 audit(1727770064.144:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.109927][ T29] audit: type=1326 audit(1727770064.144:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.133602][ T29] audit: type=1326 audit(1727770064.144:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.157050][ T29] audit: type=1326 audit(1727770064.144:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.4.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4da12dff9 code=0x7ffc0000 [ 84.388402][ T8112] loop3: detected capacity change from 0 to 2048 [ 84.423774][ T8112] loop3: p2 < > [ 84.432813][ T8112] 9pnet_fd: Insufficient options for proto=fd [ 84.494804][ T8131] pim6reg1: entered promiscuous mode [ 84.500232][ T8131] pim6reg1: entered allmulticast mode [ 84.547178][ T8142] dvmrp0: entered allmulticast mode [ 84.616528][ T8162] dvmrp0: left allmulticast mode [ 84.658224][ T8142] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 84.666434][ T8142] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 84.734939][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 84.769245][ T8182] FAULT_INJECTION: forcing a failure. [ 84.769245][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 84.782093][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.2.1224 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 84.785842][ T8189] pim6reg1: entered promiscuous mode [ 84.792839][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.792853][ T8182] Call Trace: [ 84.798161][ T8189] pim6reg1: entered allmulticast mode [ 84.808141][ T8182] [ 84.808154][ T8182] dump_stack_lvl+0xf2/0x150 [ 84.808179][ T8182] dump_stack+0x15/0x20 [ 84.828460][ T8182] should_fail_ex+0x223/0x230 [ 84.828491][ T8182] ? audit_log_start+0x34c/0x6b0 [ 84.828511][ T8182] should_failslab+0x8f/0xb0 [ 84.828537][ T8182] kmem_cache_alloc_noprof+0x4c/0x290 [ 84.828565][ T8182] audit_log_start+0x34c/0x6b0 [ 84.828589][ T8182] audit_seccomp+0x4b/0x130 [ 84.828661][ T8182] __seccomp_filter+0x6fa/0x1180 [ 84.828685][ T8182] ? proc_fail_nth_write+0x12a/0x150 [ 84.828707][ T8182] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.828784][ T8182] ? vfs_write+0x580/0x910 [ 84.828831][ T8182] __secure_computing+0x9f/0x1c0 [ 84.828858][ T8182] syscall_trace_enter+0xd1/0x1f0 [ 84.828889][ T8182] do_syscall_64+0xaa/0x1c0 [ 84.828909][ T8182] ? clear_bhb_loop+0x55/0xb0 [ 84.828997][ T8182] ? clear_bhb_loop+0x55/0xb0 [ 84.829075][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.829105][ T8182] RIP: 0033:0x7f2ed5c0c990 [ 84.829119][ T8182] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 84.829164][ T8182] RSP: 002b:00007f2ed4880b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 84.829181][ T8182] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2ed5c0c990 [ 84.829192][ T8182] RDX: 0000000000000002 RSI: 00007f2ed4880c10 RDI: 00000000ffffff9c [ 84.837847][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.838756][ T8182] RBP: 00007f2ed4880c10 R08: 0000000000000000 R09: 00007f2ed4880986 [ 84.972171][ T8182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 84.980135][ T8182] R13: 0000000000000000 R14: 00007f2ed5dc5f80 R15: 00007ffd703ec478 [ 84.988102][ T8182] [ 84.994215][ T4233] ================================================================== [ 85.002304][ T4233] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_current [ 85.010468][ T4233] [ 85.010473][ T4233] write to 0xffff8881047560f0 of 4 bytes by task 3253 on cpu 1: [ 85.020397][ T4233] inode_set_ctime_current+0x35/0x50 [ 85.025677][ T4233] shmem_symlink+0x32d/0x3a0 [ 85.030254][ T4233] vfs_symlink+0xca/0x1d0 [ 85.034580][ T4233] do_symlinkat+0xe3/0x350 [ 85.039001][ T4233] __x64_sys_symlink+0x50/0x60 [ 85.043774][ T4233] x64_sys_call+0x2819/0x2d60 [ 85.048446][ T4233] do_syscall_64+0xc9/0x1c0 [ 85.052936][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.058827][ T4233] [ 85.061135][ T4233] read to 0xffff8881047560f0 of 4 bytes by task 4233 on cpu 0: [ 85.068687][ T4233] generic_fillattr+0x1dd/0x2f0 [ 85.073527][ T4233] shmem_getattr+0x17b/0x200 [ 85.078101][ T4233] vfs_getattr+0x19b/0x1e0 [ 85.082503][ T4233] vfs_statx+0x134/0x2f0 [ 85.086731][ T4233] vfs_fstatat+0xec/0x110 [ 85.091053][ T4233] __se_sys_newfstatat+0x58/0x260 [ 85.096069][ T4233] __x64_sys_newfstatat+0x55/0x70 [ 85.101086][ T4233] x64_sys_call+0x141f/0x2d60 [ 85.105757][ T4233] do_syscall_64+0xc9/0x1c0 [ 85.110252][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.116145][ T4233] [ 85.118455][ T4233] value changed: 0x19537d7b -> 0x0a6ccb20 [ 85.124155][ T4233] [ 85.126459][ T4233] Reported by Kernel Concurrency Sanitizer on: [ 85.132594][ T4233] CPU: 0 UID: 0 PID: 4233 Comm: udevd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 85.142819][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.152863][ T4233] ================================================================== [ 85.169580][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16