last executing test programs: 4.636837971s ago: executing program 1 (id=769): mkdir(&(0x7f0000000380)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x802}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000003c0)=0xfffffff6, 0x0, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) dup3(r4, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000000000000007000000000000009500000000030000b141f0e0457ff408da06a4213f60d20375c0c173d2226ab98886bf22fba7713b481c590510941d670ed73e85ccfb7a175d2c95172374460efb2dca67a4910dcad84f9c5b"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000140)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f0000000240)='syz0\x00', 0x1ff) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x81, 0x96, 0x4, 0x3, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x9}, 0x0, 0x3, 0xffff, 0x0, 0x3, 0x6, 0x0, 0x0, 0xdbe2}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) 3.490504805s ago: executing program 1 (id=798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex(0x0, 0x6, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000200)={0xb, 0x4, {0x100000001, @usage=0x2, 0x0, 0xc, 0x5, 0x101, 0xffff, 0x8, 0x83, @usage=0x7, 0x80, 0x3, [0x2, 0x550, 0xd1, 0x8, 0x1ff, 0x91]}, {0x86eb, @usage=0xfffffffffffff321, 0x0, 0x5cdb, 0x8, 0x5, 0x5, 0x3, 0x1a, @usage=0x4, 0x400, 0x9, [0x2, 0x34, 0x5, 0x3, 0x81f, 0xed19]}, {0x0, @usage=0x7, 0x0, 0x892e, 0x7, 0x9, 0x3, 0x6, 0x48a, @struct={0x1, 0x7c000000}, 0x1, 0x5, [0xf4a4, 0xfffffffffffffffb, 0x3, 0x4, 0x0, 0x3]}, {0x6, 0x4d, 0x7ff}}) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/33, 0x21) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000680)={r1, 0x1, 0x0, [0xfffffffffffffffd, 0x1, 0x3, 0xf200000000000], [0x0, 0x7, 0x0, 0x1ff, 0x7fffffffffffffff, 0x6, 0x70b7b7f4, 0x8000, 0x7fffffffffffffff, 0x9, 0x4b36, 0x3, 0x0, 0x50d58dfe, 0x4, 0x2, 0x3, 0x401, 0x1, 0x2, 0x2, 0x60, 0x7, 0x2, 0x1, 0x3, 0x892, 0x1, 0x3, 0x7fffffff, 0x2, 0x0, 0x6, 0x328, 0xdbb, 0x983e, 0x8, 0x0, 0x7, 0x8000000000000000, 0xff, 0x7, 0xbe, 0xffffffff, 0x3, 0x293, 0x7, 0xfffffffffffffffe, 0x1, 0x7, 0x7, 0x52ee7e11, 0x5, 0x6, 0x8, 0x3, 0x8, 0x3, 0x5, 0x5, 0x5, 0x6, 0x4, 0x9, 0x0, 0xe, 0x9, 0x6, 0x8, 0x9, 0x0, 0x7, 0xf22b, 0x8, 0x2, 0x2, 0x7f, 0x0, 0x192c44fe, 0x4a0, 0x58e, 0xe42, 0x6, 0x800, 0x5, 0x4, 0x6, 0x9, 0xfef, 0x80, 0x0, 0x100000000, 0x0, 0x5, 0x6, 0x5, 0xff, 0x4, 0x9, 0x81, 0x0, 0x8, 0x7fff, 0x8000, 0x8, 0x0, 0xfff, 0x7fffffff, 0x9, 0x5, 0x8, 0x8, 0x2, 0x80000000, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x2, 0x400, 0x9, 0xa3fa]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9}, 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000640), 0x2000000000, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) 3.249638585s ago: executing program 1 (id=802): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') unshare(0x2c060000) unshare(0x24020400) socket$inet6(0xa, 0x3, 0x2f) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1\x00', r2}, 0x18) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/igmp\x00') r4 = syz_clone(0x0, 0x0, 0x55, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 2.107513168s ago: executing program 2 (id=826): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x3, 0x4, 0xff, 0x0, 0x8000000008000, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x10000, 0x30, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd0a2, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 2.040551724s ago: executing program 2 (id=829): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r1 = getpgid(r0) sched_rr_get_interval(r1, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x3, 0x4, 0x8, 0x2}, {0x5, 0x9, 0x71, 0x1}, {0x4, 0x8, 0xff, 0x5}, {0xc2b0, 0x5, 0x2, 0xffff3a89}, {0x4, 0x91, 0x3, 0xff}]}) 1.981214259s ago: executing program 2 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000ec7174ef82040a55128327e9e90922af0bf78dc9a1b76c3e141a6681bf4fe0cc29f2f0e0e2e3976713c909b4ee4312ed8bd5278354ff60e824fda4f97792820f64f46851c31e650954feddeb98fd0d889429af59dd8c43ac7b2bb5"], 0x14}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000ec7174ef82040a55128327e9e90922af0bf78dc9a1b76c3e141a6681bf4fe0cc29f2f0e0e2e3976713c909b4ee4312ed8bd5278354ff60e824fda4f97792820f64f46851c31e650954feddeb98fd0d889429af59dd8c43ac7b2bb5"], 0x14}}, 0x0) recvmsg$can_bcm(r3, &(0x7f00000006c0)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000140)=""/20, 0x14}], 0x4, &(0x7f00000005c0)=""/226, 0xe2}, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, @remote, 0x7, 0x18}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, @remote, 0x7, 0x18}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4200}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3ff, 0x3ff}}]}]}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x24040000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4200}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3ff, 0x3ff}}]}]}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x24040000) 1.545648124s ago: executing program 0 (id=842): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x20000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7f}, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000006820010000000000000000000a00000000000000060007000300000008000500e941793efc20b15f3fddf2588123ae9a5f4a233596c07581fa6844c370e9f20a234396b311f9208da5d3", @ANYRES32=r4, @ANYBLOB="100008800c0001000000000000000000"], 0x38}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x7, 0x1ff, 0x8, 0xffffffffffffffff, 0x8, '\x00', 0x0, r5, 0x0, 0x3, 0x1, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xfffffd84, 0x4, 0x100, 0x409, r6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c00000008000380040004000c0003800800020004000000610294b07e364618f9fa068e2ca0f3d7c5d14392d07cd4feb8d99f116bbd790e27051296419d915f8caf"], 0x28}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x8925, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 1.409569875s ago: executing program 0 (id=845): getdents(0xffffffffffffffff, &(0x7f0000000380)=""/256, 0x100) getdents(0xffffffffffffffff, &(0x7f0000001440)=""/228, 0xe4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000000, &(0x7f0000000280)={[{@noquota}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0), 0x1000000000000081}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006772657461700000180002800600020020"], 0x48}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f00000017c0)=""/4109, 0x100d, 0x0) 1.193562463s ago: executing program 0 (id=848): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2c}, {0x6}]}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) ptrace(0x4207, r0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000400)={0x20080522, r0}, &(0x7f0000000440)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2c}, {0x6}]}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) (async) ptrace(0x4207, r0) (async) ptrace(0x8, r0) (async) wait4(0x0, 0x0, 0x0, 0x0) (async) capget(&(0x7f0000000400)={0x20080522, r0}, &(0x7f0000000440)) (async) 1.169177175s ago: executing program 2 (id=849): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x238, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xad, 0x20, 0xaf, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x3, 0xeb, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x944}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x52, 0x8}}}}}]}}]}}, &(0x7f0000002e40)={0xa, &(0x7f00000029c0)={0xa, 0x6, 0x110, 0x9c, 0x7, 0x3, 0x40, 0x5}, 0x179, &(0x7f0000002a00)={0x5, 0xf, 0x179, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x0, 0x2}, @generic={0x6e, 0x10, 0x1, "8bbbd968ab3fa1955760d0beae3cfa2274e350074a2534d2b56255ce43138412ba97786579c5d25f2800268d64233788008afa9d2a8bf4be54cf7b180f0abc22e7697675a6fe0a053c93f431864d840ed13c88bc82835ead73aaf11f80f093ce634a6969a8e4e6b64870c9"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c60cc0dd4d22d02493d2cb234dc1a308"}, @generic={0xe0, 0x10, 0xb, "5a3f0913a0d313bced5f1d411b8567eb0cb70fcd1caf97b22c1f3cb1cd0a5825bcc01264c6ec74a78a924d1b7e2523f85a5e2a7e92c9cf1a175ca59d546283484ad494ce897a260da029c8b58cdac65a5d33029f5efe69024a8cbf6c712eeb438e18598786b7f11605aef52af38218db6109f66f8a2996607d730b0514a3e261c6113f3f389cd2a61fad806373f92ae9ce45bda5e1058185e3da36a6df44611413e1367ed01ba6c6e8925a0f2bc1c67721eec4ba7e0ef088c6573224abe8cd5de886f9a1009a6974da42d6f08d8fda22c13f63905a10ad8fbe6fb054a0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x4, 0xa, 0x1, 0x9}]}, 0x5, [{0x52, &(0x7f0000002b80)=@string={0x52, 0x3, "642310a353b4c15266fa622e8c7edbd22787d4488caf585365d5fdb856f0574c0eacf00097b19682a3ea59958461d952c3a2fea4ad7417aafb78d0867a0bc313c3444bd0b7c46b19f5df43699d08b783"}}, {0x4, &(0x7f0000002c00)=@lang_id={0x4}}, {0x2b, &(0x7f0000002c40)=@string={0x2b, 0x3, "1d137b125af47602aa0b0ab8b31aeffa2aee192398e1c4146266266d27d5bd654d01ca2fee8c0813be"}}, {0xc2, &(0x7f0000002c80)=@string={0xc2, 0x3, "c80c9b2f0ac6ac83b2bc5a09d5596f32f770cb211d05c320bc8da42a463448ce927ac1b75aa293da36312eaa5fe99659898ebcbee75c14686e2b1eacb903ea08bde08451799c8a1b5102d05917b1d5644ad4de962548f51118f3b0def0a343826bec18cd3e8a94d964ce6345570f469648e2be9240e63bf9ca48d08de099dc3b2a65ba5c2e2c0337d1d7595596f1d7c2928eefb7e4b2ea2c4f7d19a75438207ebc9dcf3fa59c3ca7a0bcd832b11569f4aff18bb0655562aefb23e835d070d0c2"}}, {0x83, &(0x7f0000002d80)=@string={0x83, 0x3, "f5d0379314801cfa318242ef098bb29ea9a61b5756fb596dac4ad7256d3c091f32212811269a5c3729f565e8fa534faad935fda8b1890af1b8ba4253e288465b29596c1fd1e3d92b3f2d739d2a90e379de5a7b0d2de368aaff2224bfd237257f5007627fbbf6a775d2f3b53fc066044572fb1a61ed2244b00edfc14d0ca7971ff1"}}]}) 1.138967337s ago: executing program 0 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000200000000000000002200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 882.585628ms ago: executing program 0 (id=852): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2Ksib9W/euTY8+fGT89ui9K0ydGs7NivZ9+Xnq9Ufs7ir8Flm+WY3/d8381/oHcvoi5a9cvVa7XzjXfxtJvnzb8TLPd878792Yl3Z0+9sHE/PzVsYju3KvrHx+//dwsn9VPzv/h4/XH/6G4vScejojkJD4WEY9ExKNp3x+LiMcj4vgG8f/w4hPvNh//BqvyLZTEP7XZ8Y/a4998onDp+2+ajz+THP9TldRw+shWXv+22sGd7DsAAAD4r8hXvgOfy4+spvP5kZHqd/gPx/58aXZu/pkLs+9fmap+V34givlspau/Zj10LF0bzvLja/In03Xjzwu9lfzI5Gxpqt3BQ4c70GD8J34vtLt3wK5zvxZ0LuMfOpfxD53L+IfOZfxD56o3/j9qQz+AvbfJ+3/vXvUD2Hvm/9C5jH/oXMY/dKSG98bnd3TLv0SbEt927+y3GraeiPxdEvI9kyhG3aKuLf+YxTYTPXWL2v3KBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Br/BgAA//+whuMT") 772.943987ms ago: executing program 0 (id=854): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000070100000000f703ffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x12) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c100078006400002f019078ac1414170a01010183131fac1414bbac1414aaac1414ffffffff9404000044240d20000000091b000009000010000000007f000064c5000000060000000b0000007f441c71117f000000000000000000000009e0000002000000058303a50000120090780000002100"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000810c01001c0012800c0001006d6163766c616e000c000280080007000100000008000500", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x8000) semget$private(0x0, 0x0, 0x0) 697.092693ms ago: executing program 4 (id=855): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c100078006400002f019078ac1414170a01010183131fac1414bbac1414aaac1414ffffffff9404000044240d20000000091b000009000010000000007f000064c5000000060000000b0000007f441c71117f000000000000000000000009e0000002000000058303a50000120090780000002100"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000810c01001c0012800c0001006d6163766c616e000c000280080007000100000008000500", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x8000) 668.355266ms ago: executing program 4 (id=856): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/s\x00\x00s/\xfc\x12\x7f\xdbfS\x80|\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x2, 0x64, 0x3e, 0x0, 0x9, 0x28000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000040)}, 0x1a100, 0x1, 0x2, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) r2 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0xcb4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x400, 0x0, 0x8, 0x0, 0x1d1}, 0x0, 0x0, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1b5f1fee}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = inotify_init1(0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(r8, 0x0, 0x203) ftruncate(r9, 0x6000000) write$UHID_INPUT(r7, &(0x7f0000002080)={0x8, {"01f6a0a7ef557554b980f09ebbc9eece641ea37f8b800c51378031d26193a6ad5a57a5fd399f10b29f75151d0de3c7de33742bcbdd3d6870345d305173ae7fbab37e2f40fdf83c8e23c24b19de686bc260d572d7169ea1e484990b983ffe58fb427781168aa136bfd9dd87743600db02dd9e19210381b99c0a3a45b3d1ed58808fdbf83aee1078e71769c1fca12a3e74bd099c357f57f088177697cf698469993e14ce56e07a00f1f9ef4096d3fa37ab5aad5342b7c12311c90229100a061108d5db68e3169fb6539ce9a0394fb7778e2acc5d0141c77160ac366c9eaa5285bda890e154befe6eeedafc95174201adcea3cd3e3c4331c0182414b37b106d7e163c468f2a53ae8eb3778421323d0ae1846da551b9ccba99b8b42d1d6123423c6ecce894a41b6ed85253f6ef9c75b02fa82b334be3ee2ef88e449c392c932c198be93007eeb4355614317205b7b6ef76ec7c3dcb180c5e6fe6cf9c774ab43205ca012dd4fcfcbcb0bc3b2b3dba7079d9de66f1de6e70c9cd2dff21830aa75b4e4cb3039c18fe16d1ce9ad836acb9dceafc8a1173ad4daa068720da7762c37bfcc86e8385a23c4a70171ec5baa22a7b97a2f3b61e74ed37e7cdd65901cf439641b79666f431eccca3a7d8dd7b311cd7e8a34f3606f5024b0d9851d7058711029818e1ba1de8e6d9986fe48e0a6a90a730b8d30f5945d782914e1c609e49a392bd9537928fc46bcc0b224dadda145750b812849076f404f745c89bc413bede127c734ecb1b2f4ea8784c150c6a5fe23cb79b502870940f37c8530348de478171defad1919e1b13b823336047c25fab6da06e7b801e113108d17d68e68224f2b94277e21de5ba6d81b32866c03b3314a3006ae9a5ac607c080ee83c6cfe9e4d162633360cef180d807c6ca2153f91ed6f3a81c0dfce79566687052bcb29aa5a38979e7bba5170a68a392a4a6bf355cb2e3e5d9ee05b9b40de2ff4b1295dfaa08376d91974cca91523f6c0ab5ecd38cf1e991f55b087f7b2a669ade11d914d1e7557777f4771f4067b32240212d3a6b24f7655227def9c40d762b0e67b5e74eef9406fcda26539c0d8748a3e5df77144da3e18438bd446858fddd42476bde51b68588eedec748c94ba4be1b23bfe627556a0a740accd5cf7c008258382aa14b267f95f2c317c2e927d25a250986021492f3f81c710cde14cd3d0474814c2d2cd2983ddb50baa72c0bfbc48018a18bf2ed33eb01c34d6b1750739675684225f755012cd527e49c8cf545b62df2c09734f7dbf526781efde46060fc109dc41d3bd07fa23b2c8ce83afad7bb9783183e09ad02414dc46d25dcf157009c7c2b6a888d1f93f8a73dd5757f19a6a20eee4cd747962ddcbf8e33c73e351f6e22f6875941e6b4d22f1c8860e8374038518ca4a290971e288f2f5bf9f0c0252fe79749622ae18e4d8a71f2ce7b0ef8075a11d89f0869b3326eb165370a7a64ae43f2c3a088691d47e37bcc1132937b6b2a0a7dabc030ba7c4f3e276d7a1539cb8b7c30f640e6f81625d94b436902fecb48dec3abce320cc6e857754b023cc4203eee203b407c5771457d439ad57f61df422281923853c086e2bffae6a0587580d1448f7d1ab478c7c37642559ee544f74c0e3049b2dec62f5c31259ff97a85fabbe738be42d7790e3059d03966a396f09cc3ced405e7676a4d1d9ff8b802ae49ffa557699dc480731c10140de823ed7ca02f5ca4b893be2e437d3596065d9d6d71e8d32e49aac99e9ba10f1bdf050f40b21c056e4cea02b2cf06b1eec9589a0cfafc22582c1a7ec9cd9629b49d9364cbef2cf40c5600bb6c53342600a16a4a0aad39bbd0c675fb5a8f2952c77676851a9b178fc59a1a5e684062f6f677dd618d343eec64f137a8bef35e8e8f10ac655ae8c5e765fdb5a6727d24bdd42d44016681302db34fc52ed6fd4bf382c24ae0a9ffa6026def21f0803e99e5ac98b2c1b94b20743827b1329f5e2b89369b5e739940b76bd4d725387384a945ce56213d7d11ed4966c958c189372f1a4d7243af9f80bdfbdba24af3fa0b1e7e9d667b28183cc9f0917c43b2b814e449abe48c92b6eb7b98449d78d643b0873764817ea945bec616b1b5d568e602effa3aebcc7b802e192dcafa3ec141ad99856f7ccb259d04df47e5edff253f4fa731acb684e01d1538f5df5a7d584326f3632b1b9e3fe0e759b5811bfa09529a28b9951a481c58f8fa010376f442bad8c2f080fc85d4b8112270c1bc4eec7d84c8c3df3dc815b319d8d17d0c0f5037de5f488f4f45dc5ce2323802477c03c381e7ee1857b19b6b7859cf261cf3079d885272fdfd36f9249cb3568ad6fc69d40c0aab2830042debb3b8cc3478d23d81dd7588f35bc51a0f1571bdbcbbdf4b5e5cdffcaec154ec865be5990798c61fb9e0bc6a2c8a3663de8da0f93c4809cc49674eb9541cd85a7a4ace6c28f53cca95781fdaea046a0d63fb6af8b2f91640a9b9f2dcc649d665e543ff0fd9807bf4c517388fe3b571c7276766c770a2733d019b8dc2fc1313bbb260c3b35dcd4569624cef9ff9bf54ceefb26c928393eae064534b015b4ef90ad00043fe6e14ca284ccfdfcecff2b7b59e41dc185abe4082ee5bd7decf860bc696c42680bdabbf01ab8436b79d37c7c500af4c210d978ad92dce0803e622b411cb89e63e9e12f2d85707b7f89f82a1cc4895343a959c184d96b6eb29f9648251944c2c88e0952564ba46f2f122f59191522a902dbd7c118130e05bf4a9afc11002c4fce7ab62f4ef308dea28b632d2bb6db679a8d8dcc79d0d05d43f3c776ae06374801ed85e3889fad35cfb4216ee81959abf0683ea27cc28b0f156663878034e2b674fdfe82199c5430fb132f7874387c29d55d92252053be431860237550147e5634279bba66d48101a1b39673b3bf88c51652f917ffd8e46868b8486420bba6b5aa1300c7a2e90fb8aaf92c9e84ec9962705a4437da03b3cba0aaa8c7e47e3a76f9712898f823077e1475b8aaba8db661c0c7ebcd0ee5152b5e36e1227d4da39a51b8b7aefcdf02131332f845294f9153f675a881c55628fc15d12e79efab532a637b189eec32659b76c267f494a62b6bcee353f8192f9830ac22eeb0b54ab3b0c1d29ccdc596f8038eb43ef7c2e02450d0f2f1766c871287c027077de3e33c7859fc5cbe455256f88d23c63709f7d26db1af5c4c81c85f58e752b5634da455e56f37f6617b9999e49f4b23b527718cfe9140baf238fe6a54fae8287d41daf7d5b94fe9f420bf5e85e5e0048ab239ef8deaf8a7377efd486c96e3801c1a576b6e87a5a5c6c15759e11608ffe83b60715540daa464d13e893d850f9693fdd82c8960086204832c763bcadb02c43a5bf5a7ed04995c6812dbe3add6a6f466e099f1979c9b416333b30f2bf92c2e1078746dc38bf666b54113b328c72189f22a54d13ad7c14a06915425e814fdaad2d3c915af0e5f20ccd2f0e3876f22245d01e89477a99f4413d17203a9809e6a01c03f76c09b4a4960a2777941f0e07f147a7f8839b1221ffcdd039210b85223416c378021b3bde197b1c00897246beb504eba9afcbb01b39825388e6a16acce796f4e57c147f90f75899f592f394734b654c15a78486f08e640dd0de05e1554341d419262471b63c5f01ca279ac57b290ea81f17a70dc30d62b321821b751693573035bd7c64822884d666f487a907f1d1d16e5533f5cbd01266e8550b4870bcc7a0201e6f22d8358426f8e9ced5152d9b8b129cf89beff30ea137d96444959b3eea5af4490b39b1a489b1cc8735d4de9b62e1f80c352994fc5fabeac5566a5758b8dc42c7f0f9c4db95df4d090dce1280d4ac386d8a75743d3500558401adcb11362a85b6376ad2a28fdd13a8ba21cb7a45a902f7849462963b68aab39360acfa6ce75fde133e77625d918633f3141cf94979bfb3a51aa14fd4c37cafe18ff927bba887e50b31be23055e5b159c761192c1f10295d14bea66e8c2e0e6d310915daa4924d6abfdc90f8c79d35e7dbf83870959b8fbf0560b61be8aac53fe361aa625733a0d7bc5df936841a6ad61b9e0d8b597392cd28c3bc223105ba6b30b8f1aa1ca7250d3295bb6b7b686e7932c9e5c44fbc50d0e64d42b7c7546fa077038bc8459b2176c13cfd7957aa60176163b11e5d2d55ea5775f2742ab225c75c99ad5b0c6ff9242724d7d9027fcd42e9637ea115edcd8f8393c8c4f528d0d255163c1eb438c720340f691fb7fedbff3481bc4a05f944f7a4dae0dd3829ca67bab2952c111d1b26deff883d16de52cdc228352477084dbe2c3979ca4ac22d61e9041598aa46aa5a5a1d7c04e1d3a7ec2275007a0f31321d94c6ed5534ff6550c3c82158a3e0ab73a675601de7ce1feeed45849462dd446f8abbb9938bd855870b1c656ff1b64e4ca19d1177247fce312b34af64fd54eea28a558231c4ef3017a5940e5be21aba8cdd9d4c5c7b603f02a0e60cb30594ef951618d598795bc683ce66e62657b2036c33ab3e5f594101c65208ee0dbabf0bfda7986830917862b28096d7b47a35f39d0de0c259e3722db5467ab7c3405fae56e1294a455f5334554eb6dd80a3fce0fa12dbd53753911521242eceee4783c2862065f97d9c4e432459e77062fa4a8af892bf227cfa009d28b4a469c34b91e06ebf2ec482fbc334b87338b4c2e8a4875c5b7af3d7be1a53094212125f5c301e51b29ef0cd0a3a14c1c8d38963236b94a9cbbfefea266e8b076c7b6d7be9d258f5bad0d816a8930755f9bdec520a5fbf775600e193abef1787c9dbb1fc0becf09ff7b59b5eaeee7ee631bdaf69ed7ba4a2bd6d85d8167648f778bec02e6c0b78cf4a830bd98a89ce700cb6c0b14552ffaf71a6119d36ae43a27c06d67bc1e67209cceac726091e80e528fc6a46415b97c85ba0ceed4afc4f7d518e2130270c031b60c902f35f9dde5d6d3824d36a666ce0eb9d94c5aecdcc661e337b2d3cf4cdc64854929d8bc2318d25b0f7138a69fa83c21ddf5127fd65a4880a06cd8f4f34e26d85334c2f1fc7fac161ff753245b608929607c602c9051e1cf2d9caafb5330bef233ee9ff8feda81f7f30c798235153601cbda8cbe5394842851e8f5d68623983ac9c2714f1d645b902a77e9905f836f4420deef5fa60ca7e2ee2645b571eecb1cfcb2b55d950018cde745b43b5474bbd73ba7c3155dba05c3238bf9b1f983969aac2bad87bc60cbf9a17630e177f1f44aba1f2a7a978bcb6904b238f89c1896a2b3a9c768c364ebee276c732103313a6de61eba6d750ac19d760689a30fd211eddd193dc7b13f4115fea044be299e0b9ad257e549ea07f437aeb29675afc83f9c1360e2175519bcc0459d2e04060017287b4ecde8d89849613beb2d39667a11c2b4e70ca89afe63b5fbf800383ec41c330df16bf5cd40e74792440d4e09b9831dddc671a361e54d4fa727dc68fb046e7c55b927b15b012d7ed6e784b0f0a9330b2e719d9e860f5f9a5289627b21a8aea22c5f3107a73b864b8c408b12ab3d40232f0ca08e3b47967a5a78a46a8e292149e3ed08c6106f9eaae40c4b64517a474e5965b2a30c863f85895e929638333872d160036660c39ef1cc24986afff717aa2e355824f01188a4cbee68b8e14ff2a6fde82b422b02ac9423c10da24be8169c8414de33ed2bb8fa3b6e80a24738cb3d28d560fc3b1e363c487b008230eac35042b307b67096e2a0a5f6dbc6417cda2a3801bb953492deb3aadbd0b5f72b180015aff0d6a5fc242ea189800", 0x1000}}, 0x1006) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r10, 0x5386, &(0x7f0000000940)) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000900)={0x130, 0x0, &(0x7f0000000740)=[@request_death, @increfs_done={0x40106308, 0x40000000003}, @request_death, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/68, 0x44, 0x2, 0x800001d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}, @acquire_done={0x40106309, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/216, 0xd8, 0x1, 0x3b}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/56, 0x38, 0x1, 0x2a}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/70, 0x46, 0x2, 0x35}}, &(0x7f0000000700)={0x0, 0x18, 0x38}}}], 0x61, 0x0, &(0x7f0000000880)="bbe0605faa2d3334e4345873b574cc1e4ef3ff1559ed80aafa9405063f7e1b3ca2d1b81d592ee33de1f7b518dc80fd40490d0650a72de4fc0cd4897cfd30238f9b6299f42f9fd20847181110f13d5c574e6021cdff95cb595fb5a0691c1fc894e4"}) socket$inet6_udp(0xa, 0x2, 0x0) 573.742484ms ago: executing program 4 (id=857): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x74}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x2000000b) r4 = syz_io_uring_setup(0x6c98, &(0x7f00000000c0)={0x0, 0x73b3, 0x4, 0x0, 0x2dc}, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_setup(0x3eec, &(0x7f0000000240)={0x0, 0xe75f, 0x80, 0x0, 0x142, 0x0, r4}, &(0x7f00000001c0), &(0x7f00000002c0)) 530.623437ms ago: executing program 3 (id=858): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300", 0x16}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 509.613919ms ago: executing program 3 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x6000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 472.622931ms ago: executing program 4 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe2(&(0x7f0000000040), 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000480)={0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) unshare(0x20000400) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000400)={0x10, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) close(r0) sendto$l2tp(r2, &(0x7f0000000000)="ccbefc1168aa2746b471422ca348d7d9d1dfb00cbc8c6286a7fbb5286ec80433de29046b6bc2bf1b8daba2a5bb4d", 0x2e, 0x20000000, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) pipe2(&(0x7f0000000040), 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$inet(0x2, 0x3, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_setup(0x16d2, &(0x7f0000000480)={0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) (async) unshare(0x20000400) (async) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) (async) bind$packet(r0, &(0x7f0000000400)={0x10, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) close(r0) (async) sendto$l2tp(r2, &(0x7f0000000000)="ccbefc1168aa2746b471422ca348d7d9d1dfb00cbc8c6286a7fbb5286ec80433de29046b6bc2bf1b8daba2a5bb4d", 0x2e, 0x20000000, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x3}, 0x10) (async) 472.484741ms ago: executing program 3 (id=861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003100)=ANY=[@ANYBLOB="d40100001000130702000000000000007f000001002000000000000000000000fe80000000000000000000000000003100000000000000000200008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000a"], 0x1d4}}, 0x0) 466.630532ms ago: executing program 2 (id=862): r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x36, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x1a}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x200080d1) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x4}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x4008662c) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) r9 = socket(0x200000100000011, 0x803, 0x0) r10 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) socket$inet6_dccp(0xa, 0x6, 0x0) syz_read_part_table(0x5a4, &(0x7f0000000640)="$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") setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r12, 0x107, 0x16, 0x0, 0x0) sendto$packet(r9, &(0x7f0000000100)="4dcdc7d96a76000000060005000000000006", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b00010067656e6576650000300002800600050000040000050008000100000008000b4000000000050009"], 0x60}}, 0x0) 331.978833ms ago: executing program 4 (id=863): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x3, 0x4, 0xff, 0x0, 0x8000000008000, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x10000, 0x30, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd0a2, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 239.871811ms ago: executing program 3 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setfsgid(0xffffffffffffffff) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSETELEM={0xcc0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5fc, 0x3, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "5d18bdea7c3459bfd3f638bba23ca1fa3d564508e9abc204c7be2e5d645d7b1b9ed7665c8651d78ef9faf61a61d0c75317d51bfce2"}, @NFTA_DATA_VALUE={0x54, 0x1, "59717173e9326ecaf3660d0d021d4cd34528ac0023294dce7d4d87d963755eb7a441e942ec68fc28ed1d677604002e451662104e64ed1e47084fc236e60714835ea3b8c0dd8fb6794f8056055eb4a41e"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x468, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x77}, @NFTA_SET_ELEM_KEY={0x308, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "bb68b425a5d4f25d451962c0d21196f0544e64ce93f141def2dfe56ed2da603b8b29bf75bad4f725ae8807d90e865c859e7e542b3a9dbf19e512df8b35798ff86d6d71996c002a96b5e8efe73c9ec3a4035441b45301ef62edcd372263142c3f3a2f6f0460ff2be0a19d9e2f6a1609974576ef53382b4d80c63cd31d5333c1adf1d9b2e5aa546480b582aaee86028c268fdd6c6f71a15c35a6b3b67d420902c196b41b15948c820000000000"}, @NFTA_DATA_VALUE={0x5c, 0x1, "82b631d1783c9a85367c543036f0572bb95864c52bad654b208743a4aead05c779d83fbeb36204735a21c071ed11771903bbc924a30d749ddd53fe856d42496a61b84941963e2f6e651702390f82b2000e3aaf25eef18f6a"}, @NFTA_DATA_VALUE={0x94, 0x1, "607fac19da38e83039905c10e8fd72e7a09f4bf710cba01db9c6538ec840c24f9503d26b0495120a7f1a97f3110cb06e3cf99ea27c7d7430bee2a357eb1ae1dfd77816637707c034d724618f0cb908df9a08f5cce824f1b2fb875be9d69d7d2cb1e16cf675ac4a3e8ac308e3a2adc81eef48c36eaadc0b5f320d5beb9cfe3c41e7192698250dbfbb8c4a894f7064dc47"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xaf}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd51}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x680, 0x3, 0x0, 0x1, [{0x5a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "aeba276bbd2d1b8fdcbd0701c8d46bc4abf1e9906560d2f1cb328bd2ca8a8f1be2ffab56f4cfa08b2ae7cac0271c7ec32b5939ed314a771c0cb1fb91fbf3a7ab99aa505b568bd64c6bf90bb9396d51e5ab4211cc2298247258ab94d1adaaddd20746a1980fdcfe"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x507}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8b}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x59}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc0}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2c1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1c31}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd9}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4c}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2a4, 0xb, 0x0, 0x1, [{0x224, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x214, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "c30eccec673e4ea8767e3dc4958201af516f304b9a9951829fa7054eb574eefd1913348d1f80024fcbc96e4399d56ee7ad1e6d9f0a12a58dd6be23f4605462aa607e"}, @NFTA_MATCH_INFO={0xc6, 0x3, "8b05cfcc823db4ff12d5ee58455a0fb9c64afb760ce52c64201c1ea18fe2de523eb8d81806aa02831cc0264f6f8fc0563adfb2d86e741651f7a5997fa11c7ee107bc3e8696c51d3c9cebc7c66c7b4d97ff4701397814309cf67c014c6bbf6c7350bc99a66f6139c3033f3248bd682bf776cdb7a3cb4504cd5bc8926f7ddaae6ec8aa084b0b9009fe3720329aa2a4e8cf4a788e9ac320004d6b57dffff217b97a522f1a3927ac1edc999b5a793ce7d25d85a05f04a9b9156d0c4c2e2471e1c03ac0b5"}, @NFTA_MATCH_INFO={0xcf, 0x3, "bf2b057df6e440c6630dad69f2f2305a3d00a2a117249caf17e7584661af29f47292b696c9a2bd2186cc2f7a4522a5cf2b2ec9a7104568f8ec0acaaf83320c64623fa75fb3763220fa2ffd6002ed693f2df5c1cd815c3c8aa38523b25e08366b2de890adba4d4846ef90867afb1c8d9661a0e83948a671afd9a3151f7158ad79b529ea6b7e75763939b631ca3f03dcff8448977785caec0cbc29e8ed5a23fadf6ab260a118f1db8b27f66b981521d04e0b80a77b667b932eab4578943cba7960b7232b5bc427eb3ba8e400"}, @NFTA_MATCH_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1003605}, @NFTA_MATCH_NAME={0x6, 0x1, '*\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, '\\\'^-,\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x33}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "0f5ed41f5069043ab4cf40f34bed34476efc97"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa5}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xce8}}, 0x80) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0dea619cf99d561754637946d51b01001754e325374e459fb7d525c19436585c8ed3cc90175d0605000cc7143dafadcf159d1165925e474f98bb436890cf3c3d35558ef98e6dddae39a08014a313e266cc", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf2504000000140002006261746164765f736c6176655f3100000900010073797a32000000001400020067656e6576653100000000000000000005000400020000000500040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40001) socket$kcm(0x22, 0x2, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061113c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0xffffffffffffff6f) (async) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000340)={&(0x7f00000004c0)={0xa, 0x4e25, 0x7, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x9}, 0x4000000) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x1, 0x8e}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'pim6reg1\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4043) 220.937912ms ago: executing program 1 (id=865): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 133.661219ms ago: executing program 3 (id=866): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x1000, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000100001040000ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 128.961659ms ago: executing program 2 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB="36b7c400"], 0x1c}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) mremap(&(0x7f0000d84000/0x2000)=nil, 0x7fffdf4dd000, 0x1002, 0x3, &(0x7f0000b22000/0x1000)=nil) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x8002) fcntl$dupfd(r4, 0x0, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 124.15147ms ago: executing program 3 (id=868): rename(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(&(0x7f0000002100)=[0x0, 0x0], &(0x7f00000001c0)=0x10, 0x0) 29.833878ms ago: executing program 1 (id=869): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300", 0x16}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 29.329317ms ago: executing program 4 (id=870): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1ff}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000a00010000000000ff0100000000000000000000000000010000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003cd4431af3eb97a900000000000001"], 0x190) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 0s ago: executing program 1 (id=871): bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) r0 = epoll_create1(0x0) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x4002410) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$update(0x2, r1, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) (async) epoll_create1(0x0) (async) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) (async) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) (async) keyctl$setperm(0x5, r1, 0x4002410) (async) keyctl$chown(0x4, r1, 0x0, 0x0) (async) keyctl$update(0x2, r1, 0x0, 0x0) (async) epoll_create1(0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)) (async) kernel console output (not intermixed with test programs): T4678] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 50.007468][ T4678] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 50.027554][ T4678] bond1: (slave ip6gre1): making interface the new active one [ 50.038943][ T4678] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 50.053854][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.081543][ T4685] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 50.102138][ T4693] loop4: detected capacity change from 0 to 512 [ 50.134711][ T4685] team0: Failed to send options change via netlink (err -105) [ 50.142293][ T4685] team0: Port device netdevsim1 added [ 50.150436][ T4693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.164292][ T4693] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.215017][ T11] bridge_slave_1: left allmulticast mode [ 50.220793][ T11] bridge_slave_1: left promiscuous mode [ 50.226650][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.248791][ T11] bridge_slave_0: left allmulticast mode [ 50.254558][ T11] bridge_slave_0: left promiscuous mode [ 50.260384][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.307370][ T11] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 50.319295][ T11] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 50.332546][ T11] bond3 (unregistering): (slave ip6gre3): Releasing backup interface [ 50.366482][ T4704] FAULT_INJECTION: forcing a failure. [ 50.366482][ T4704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.379735][ T4704] CPU: 1 UID: 0 PID: 4704 Comm: syz.1.361 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 50.390511][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.400609][ T4704] Call Trace: [ 50.403891][ T4704] [ 50.406857][ T4704] dump_stack_lvl+0xf2/0x150 [ 50.411477][ T4704] dump_stack+0x15/0x20 [ 50.415745][ T4704] should_fail_ex+0x229/0x230 [ 50.420503][ T4704] should_fail+0xb/0x10 [ 50.424726][ T4704] should_fail_usercopy+0x1a/0x20 [ 50.429846][ T4704] _copy_from_user+0x1e/0xd0 [ 50.434476][ T4704] restore_altstack+0x48/0xd0 [ 50.439216][ T4704] __do_sys_rt_sigreturn+0xd3/0x150 [ 50.444438][ T4704] x64_sys_call+0x28e1/0x2d60 [ 50.449129][ T4704] do_syscall_64+0xc9/0x1c0 [ 50.453647][ T4704] ? clear_bhb_loop+0x55/0xb0 [ 50.458448][ T4704] ? clear_bhb_loop+0x55/0xb0 [ 50.463133][ T4704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.469185][ T4704] RIP: 0033:0x7fb329d89ef7 [ 50.473678][ T4704] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 50.493330][ T4704] RSP: 002b:00007fb328a07038 EFLAGS: 00000246 [ 50.499507][ T4704] RAX: 0000000000000113 RBX: 00007fb329f25f80 RCX: 00007fb329d89ef9 [ 50.507499][ T4704] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.515470][ T4704] RBP: 00007fb328a07090 R08: 0000000000000080 R09: 0000000000000004 [ 50.523478][ T4704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.531460][ T4704] R13: 0000000000000000 R14: 00007fb329f25f80 R15: 00007ffe006bddb8 [ 50.539439][ T4704] [ 50.590572][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.601262][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.611703][ T11] bond0 (unregistering): Released all slaves [ 50.620715][ T11] bond1 (unregistering): Released all slaves [ 50.629863][ T11] bond2 (unregistering): Released all slaves [ 50.638634][ T11] bond3 (unregistering): Released all slaves [ 50.648479][ T4693] bridge0: port 3(vlan2) entered blocking state [ 50.655353][ T4693] bridge0: port 3(vlan2) entered disabled state [ 50.664139][ T4693] vlan2: entered allmulticast mode [ 50.664814][ T4715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.363'. [ 50.678534][ T4693] vlan2: left allmulticast mode [ 50.688336][ T320] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 50.711678][ T4713] loop1: detected capacity change from 0 to 512 [ 50.775994][ T11] hsr_slave_0: left promiscuous mode [ 50.788564][ T11] hsr_slave_1: left promiscuous mode [ 50.799980][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.809219][ T11] macvtap0: left allmulticast mode [ 50.814382][ T11] veth0_macvtap: left allmulticast mode [ 50.820030][ T11] macvtap0: left promiscuous mode [ 50.825275][ T11] veth1_macvtap: left promiscuous mode [ 50.830778][ T11] veth0_macvtap: left promiscuous mode [ 50.836343][ T11] veth1_vlan: left promiscuous mode [ 50.841683][ T11] veth0_vlan: left allmulticast mode [ 50.847067][ T11] veth0_vlan: left promiscuous mode [ 50.986992][ T4742] netlink: 'syz.0.368': attribute type 32 has an invalid length. [ 50.999062][ T11] team0 (unregistering): Port device vlan0 removed [ 51.032129][ T11] team0 (unregistering): Port device team_slave_1 removed [ 51.042711][ T11] team0 (unregistering): Port device team_slave_0 removed [ 51.081207][ T4744] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 51.100017][ T4745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.369'. [ 51.133649][ T4744] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 51.143987][ T4744] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 51.155293][ T4744] bond1: (slave ip6gre1): making interface the new active one [ 51.163737][ T4744] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 51.214773][ T4762] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 51.226325][ T4761] loop0: detected capacity change from 0 to 512 [ 51.241996][ T4671] chnl_net:caif_netlink_parms(): no params data found [ 51.250670][ T4761] EXT4-fs: Ignoring removed bh option [ 51.261787][ T4761] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 51.271290][ T4762] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 51.278048][ T4761] EXT4-fs (loop0): invalid journal inode [ 51.281712][ T4762] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 51.287331][ T4761] EXT4-fs (loop0): can't get journal size [ 51.300641][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 51.304801][ T4762] bond3: (slave ip6gre3): making interface the new active one [ 51.319529][ T4762] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 51.329578][ T4761] EXT4-fs (loop0): 1 truncate cleaned up [ 51.335686][ T4761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.381957][ T4761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.375: bg 0: block 255: padding at end of block bitmap is not set [ 51.454248][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.461464][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.469916][ T4671] bridge_slave_0: entered allmulticast mode [ 51.476420][ T4671] bridge_slave_0: entered promiscuous mode [ 51.483752][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.484021][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.499841][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.507110][ T4671] bridge_slave_1: entered allmulticast mode [ 51.513621][ T4671] bridge_slave_1: entered promiscuous mode [ 51.537024][ T4671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.559837][ T4671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.589684][ T4797] loop0: detected capacity change from 0 to 256 [ 51.621351][ T4671] team0: Port device team_slave_0 added [ 51.630039][ T4671] team0: Port device team_slave_1 added [ 51.690540][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.697602][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.723647][ T4671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.737691][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.744689][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.770719][ T4671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.786889][ T4807] loop1: detected capacity change from 0 to 512 [ 51.838831][ T4671] hsr_slave_0: entered promiscuous mode [ 51.844962][ T4671] hsr_slave_1: entered promiscuous mode [ 51.891578][ T4828] loop1: detected capacity change from 0 to 512 [ 51.900732][ T4828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.913992][ T4828] EXT4-fs (loop1): 1 truncate cleaned up [ 51.921588][ T4828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.257773][ T4671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.266474][ T4671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.275366][ T4671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.284598][ T4671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.334874][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.337431][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.357940][ T4671] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.381668][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.388885][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.426787][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.433916][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.451006][ T4882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=4882 comm=syz.1.390 [ 52.498631][ T4882] FAULT_INJECTION: forcing a failure. [ 52.498631][ T4882] name failslab, interval 1, probability 0, space 0, times 0 [ 52.511504][ T4882] CPU: 1 UID: 0 PID: 4882 Comm: syz.1.390 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 52.522198][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.532439][ T4882] Call Trace: [ 52.535720][ T4882] [ 52.538689][ T4882] dump_stack_lvl+0xf2/0x150 [ 52.543311][ T4882] dump_stack+0x15/0x20 [ 52.547548][ T4882] should_fail_ex+0x229/0x230 [ 52.552277][ T4882] ? skb_clone+0x154/0x1f0 [ 52.556763][ T4882] should_failslab+0x8f/0xb0 [ 52.561459][ T4882] kmem_cache_alloc_noprof+0x4c/0x290 [ 52.566848][ T4882] skb_clone+0x154/0x1f0 [ 52.571104][ T4882] __netlink_deliver_tap+0x2bd/0x4c0 [ 52.576469][ T4882] netlink_sendskb+0x126/0x150 [ 52.581310][ T4882] netlink_unicast+0x291/0x670 [ 52.586077][ T4882] netlink_ack+0x4c4/0x4f0 [ 52.590574][ T4882] netlink_rcv_skb+0x19c/0x230 [ 52.595343][ T4882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.600507][ T4882] genl_rcv+0x28/0x40 [ 52.604504][ T4882] netlink_unicast+0x599/0x670 [ 52.609318][ T4882] netlink_sendmsg+0x5cc/0x6e0 [ 52.614179][ T4882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.619529][ T4882] __sock_sendmsg+0x140/0x180 [ 52.624228][ T4882] ____sys_sendmsg+0x312/0x410 [ 52.629005][ T4882] __sys_sendmsg+0x1e9/0x280 [ 52.633614][ T4882] __x64_sys_sendmsg+0x46/0x50 [ 52.638535][ T4882] x64_sys_call+0x2689/0x2d60 [ 52.643230][ T4882] do_syscall_64+0xc9/0x1c0 [ 52.647748][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 52.652510][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 52.657200][ T4882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.663188][ T4882] RIP: 0033:0x7fb329d89ef9 [ 52.667617][ T4882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.687246][ T4882] RSP: 002b:00007fb3289e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.695748][ T4882] RAX: ffffffffffffffda RBX: 00007fb329f26058 RCX: 00007fb329d89ef9 [ 52.703726][ T4882] RDX: 0000000000000000 RSI: 0000000020002540 RDI: 000000000000000d [ 52.711701][ T4882] RBP: 00007fb3289e6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.719699][ T4882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.727736][ T4882] R13: 0000000000000000 R14: 00007fb329f26058 R15: 00007ffe006bddb8 [ 52.735802][ T4882] [ 52.792436][ T4887] program syz.4.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.843107][ T4907] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 52.897632][ T4671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.934149][ T4907] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 52.944573][ T4907] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 52.967587][ T4907] bond2: (slave ip6gre2): making interface the new active one [ 52.976626][ T4907] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 53.012185][ T4928] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 53.022741][ T4928] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 53.042243][ T4928] bond2: (slave ip6gre2): making interface the new active one [ 53.055683][ T4928] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 53.128544][ T4947] loop0: detected capacity change from 0 to 512 [ 53.154419][ T4671] veth0_vlan: entered promiscuous mode [ 53.166656][ T4671] veth1_vlan: entered promiscuous mode [ 53.174237][ T4952] loop4: detected capacity change from 0 to 1764 [ 53.189855][ T4947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.205035][ T4947] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.231601][ T4671] veth0_macvtap: entered promiscuous mode [ 53.242647][ T4671] veth1_macvtap: entered promiscuous mode [ 53.242917][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 53.242931][ T29] audit: type=1400 audit(1724875871.571:585): avc: denied { link } for pid=4946 comm="syz.0.402" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.269835][ T4947] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 53.280764][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.297808][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.307672][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.318263][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.328138][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.338614][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.358327][ T29] audit: type=1400 audit(1724875871.681:586): avc: denied { ioctl } for pid=4946 comm="syz.0.402" path="socket:[8313]" dev="sockfs" ino=8313 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.360290][ T4947] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 53.384354][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.409676][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.420186][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.430054][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.440586][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.440613][ T4947] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.402: Failed to acquire dquot type 0 [ 53.450395][ T4671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.450413][ T4671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.482581][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.494388][ T4671] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.503254][ T4671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.512069][ T4671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.520904][ T4671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.532231][ T4966] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 53.555664][ T4966] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 53.578187][ T4966] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.402: Failed to acquire dquot type 0 [ 53.603390][ T4968] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 53.611070][ T4970] loop4: detected capacity change from 0 to 4096 [ 53.616539][ T4968] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 53.642335][ T4970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.657921][ T4968] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.402: Failed to acquire dquot type 0 [ 53.692039][ T4978] loop2: detected capacity change from 0 to 256 [ 53.699366][ T4970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.701756][ T4969] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 53.721417][ T4969] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 53.732761][ T4969] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.402: Failed to acquire dquot type 0 [ 53.824317][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.832623][ T4970] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 53.849495][ T4990] __nla_validate_parse: 6 callbacks suppressed [ 53.849515][ T4990] netlink: 92 bytes leftover after parsing attributes in process `syz.2.410'. [ 53.951755][ T4999] netlink: 228 bytes leftover after parsing attributes in process `syz.0.413'. [ 53.980474][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 53.989453][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 54.002421][ T5001] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 54.013250][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.022476][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.112421][ T5004] validate_nla: 1 callbacks suppressed [ 54.112436][ T5004] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 54.132733][ T5004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.415'. [ 54.144355][ T5004] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 54.154871][ T5004] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 54.165853][ T5004] bond3: (slave ip6gre3): making interface the new active one [ 54.174004][ T5004] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 54.244967][ T5009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5009 comm=syz.4.417 [ 54.260952][ T5009] geneve2: entered promiscuous mode [ 54.266208][ T5009] geneve2: entered allmulticast mode [ 54.347661][ T5013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.419'. [ 54.389175][ T5018] loop4: detected capacity change from 0 to 1024 [ 54.396243][ T5018] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 54.407393][ T5018] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 54.417287][ T5018] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.427633][ T5018] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 54.436457][ T5018] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 54.451663][ T5018] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 54.461791][ T5018] team0: Failed to send options change via netlink (err -105) [ 54.469500][ T5018] team0: Port device netdevsim1 added [ 54.479910][ T5018] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 54.488461][ T5018] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 54.499669][ T5018] team0: Failed to send options change via netlink (err -105) [ 54.507152][ T5018] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 54.516695][ T5018] team0: Port device netdevsim1 removed [ 54.524149][ T5018] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 54.601404][ T5020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.668656][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.677360][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.687250][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.690026][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 54.704670][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 54.713683][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.850526][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 54.853807][ T5041] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 54.873699][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 54.885251][ T5041] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 54.895684][ T5041] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 54.901600][ T5026] loop3: detected capacity change from 0 to 512 [ 54.908818][ T5041] bond3: (slave ip6gre3): making interface the new active one [ 54.922530][ T5041] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 54.972339][ T5045] vlan3: entered promiscuous mode [ 54.977438][ T5045] macvtap0: entered promiscuous mode [ 54.977597][ T5045] vlan3: entered allmulticast mode [ 54.977613][ T5045] macvtap0: entered allmulticast mode [ 54.977628][ T5045] veth0_macvtap: entered allmulticast mode [ 55.031213][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.051780][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.065836][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.078404][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.091322][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.105405][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.118933][ T5054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5054 comm=syz.2.432 [ 55.163129][ T5066] loop0: detected capacity change from 0 to 1024 [ 55.181786][ T5066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.201391][ T5068] IPVS: Error connecting to the multicast addr [ 55.234345][ T5078] loop3: detected capacity change from 0 to 512 [ 55.246124][ T5080] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 55.282970][ T5080] bond4: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 55.293332][ T5080] bond4: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 55.313325][ T5080] bond4: (slave ip6gre4): making interface the new active one [ 55.322736][ T5080] bond4: (slave ip6gre4): Enslaving as an active interface with an up link [ 55.380077][ T5089] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 55.465108][ T5083] loop2: detected capacity change from 0 to 512 [ 55.523064][ T5078] xt_ecn: cannot match TCP bits for non-tcp packets [ 55.536952][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.580974][ T5101] loop2: detected capacity change from 0 to 764 [ 55.589093][ T5101] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 55.600839][ T5101] Symlink component flag not implemented [ 55.606521][ T5101] Symlink component flag not implemented [ 55.612583][ T5101] Symlink component flag not implemented (128) [ 55.618846][ T5101] Symlink component flag not implemented (122) [ 55.674807][ T5110] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (3) [ 55.709521][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.723696][ T5114] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 55.737067][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.940032][ T5124] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 56.136786][ T5141] loop3: detected capacity change from 0 to 512 [ 56.145372][ T5141] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 56.161769][ T5141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 56.170936][ T5141] System zones: 1-12 [ 56.175078][ T5141] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.181617][ T5141] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.462: Inode bitmap for bg 0 marked uninitialized [ 56.196464][ T5141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.214591][ T5141] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 56.226500][ T5141] netlink: 'syz.3.462': attribute type 4 has an invalid length. [ 56.290013][ T5147] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 56.308390][ T5147] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 56.318887][ T5147] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 56.330238][ T5147] bond4: (slave ip6gre1): making interface the new active one [ 56.338763][ T5147] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 56.505779][ T5168] loop3: detected capacity change from 0 to 512 [ 56.526402][ T5169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.535296][ T5169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.544124][ T5169] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.552984][ T5169] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.578811][ T5169] vxlan0: entered promiscuous mode [ 56.646353][ T5182] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 56.663559][ T5182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.711643][ T5189] loop3: detected capacity change from 0 to 128 [ 56.728324][ T5189] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.733286][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.767461][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.854325][ T5216] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 56.891161][ T5215] bond4: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 56.901535][ T5215] bond4: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 56.908399][ T5224] xt_hashlimit: max too large, truncated to 1048576 [ 56.922960][ T5215] bond4: (slave ip6gre4): making interface the new active one [ 56.935618][ T5215] bond4: (slave ip6gre4): Enslaving as an active interface with an up link [ 56.951430][ T5225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 57.059169][ T5244] loop0: detected capacity change from 0 to 1024 [ 57.066609][ T5244] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.084909][ T5244] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.103444][ T5244] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.119947][ T5244] EXT4-fs error (device loop0): __ext4_get_inode_loc:4436: comm syz.0.501: Invalid inode table block 0 in block_group 0 [ 57.142271][ T5244] EXT4-fs (loop0): Remounting filesystem read-only [ 57.149162][ T5244] EXT4-fs (loop0): 1 truncate cleaned up [ 57.155405][ T5244] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 57.170397][ T5247] loop3: detected capacity change from 0 to 512 [ 57.200860][ T5247] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.249374][ T5266] geneve2: entered promiscuous mode [ 57.254642][ T5266] geneve2: entered allmulticast mode [ 57.329108][ T5268] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 57.337706][ T5268] team0: Device ipvlan2 is already an upper device of the team interface [ 57.351496][ T5270] loop4: detected capacity change from 0 to 1024 [ 57.458897][ T5282] loop4: detected capacity change from 0 to 256 [ 57.474694][ T5282] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.541677][ T5291] loop4: detected capacity change from 0 to 512 [ 57.551740][ T5291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.572989][ T5286] loop3: detected capacity change from 0 to 1024 [ 57.582593][ T5291] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 57.590417][ T5286] EXT4-fs: Ignoring removed orlov option [ 57.596455][ T5286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.597922][ T5291] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 57.611572][ T5291] EXT4-fs (loop4): 1 truncate cleaned up [ 57.698420][ T5285] loop3: detected capacity change from 1024 to 11 [ 57.725213][ T4671] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 57.735527][ T4671] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 57.764849][ T5293] kmmpd-loop3: attempt to access beyond end of device [ 57.764849][ T5293] loop3: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 57.778428][ T5293] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 58.454353][ T5311] loop0: detected capacity change from 0 to 512 [ 58.469933][ T5311] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.484226][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 58.484242][ T29] audit: type=1400 audit(1724875876.811:605): avc: denied { connect } for pid=5310 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.524191][ T29] audit: type=1400 audit(1724875876.841:606): avc: denied { name_connect } for pid=5310 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 58.676717][ T5323] loop0: detected capacity change from 0 to 512 [ 58.688457][ T5323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.709121][ T5323] EXT4-fs (loop0): 1 truncate cleaned up [ 58.944129][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.033268][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.096157][ T5333] loop0: detected capacity change from 0 to 512 [ 59.106337][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.117181][ T5333] EXT4-fs: Ignoring removed i_version option [ 59.136082][ T5333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 59.145331][ T5333] System zones: 1-12 [ 59.154713][ T5333] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.534: bg 0: block 131: padding at end of block bitmap is not set [ 59.177739][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.189427][ T5333] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 59.201109][ T5333] EXT4-fs (loop0): 1 truncate cleaned up [ 59.211160][ T29] audit: type=1400 audit(1724875877.541:607): avc: denied { ioctl } for pid=5331 comm="syz.0.534" path="socket:[10106]" dev="sockfs" ino=10106 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.310275][ T50] bridge_slave_1: left allmulticast mode [ 59.315981][ T50] bridge_slave_1: left promiscuous mode [ 59.321688][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.349972][ T5341] loop0: detected capacity change from 0 to 512 [ 59.359113][ T50] bridge_slave_0: left allmulticast mode [ 59.364791][ T50] bridge_slave_0: left promiscuous mode [ 59.370665][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.380620][ T5341] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.387088][ T5341] EXT4-fs: Ignoring removed i_version option [ 59.432408][ T5341] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 1: comm syz.0.535: invalid block [ 59.458387][ T5341] EXT4-fs (loop0): Remounting filesystem read-only [ 59.465352][ T5341] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 59.531154][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.542482][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.560023][ T50] bond0 (unregistering): Released all slaves [ 59.579982][ T50] bond1 (unregistering): Released all slaves [ 59.681389][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 59.689230][ T50] IPVS: stopping backup sync thread 5216 ... [ 59.712159][ T50] hsr_slave_0: left promiscuous mode [ 59.728616][ T50] hsr_slave_1: left promiscuous mode [ 59.734395][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.742055][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.774409][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.781961][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.792618][ T50] veth1_macvtap: left promiscuous mode [ 59.798217][ T50] veth0_macvtap: left promiscuous mode [ 59.803913][ T50] veth1_vlan: left promiscuous mode [ 59.809177][ T50] veth0_vlan: left promiscuous mode [ 59.923167][ T50] team0 (unregistering): Port device team_slave_1 removed [ 59.934132][ T50] team0 (unregistering): Port device team_slave_0 removed [ 59.987531][ T5352] team0: entered promiscuous mode [ 59.992654][ T5352] team_slave_0: entered promiscuous mode [ 59.998469][ T5352] team_slave_1: entered promiscuous mode [ 60.004154][ T5352] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 60.013331][ T5352] team0: left promiscuous mode [ 60.018142][ T5352] team_slave_0: left promiscuous mode [ 60.023721][ T5352] team_slave_1: left promiscuous mode [ 60.029258][ T5352] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 60.068959][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.076071][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.083307][ T5327] bridge_slave_0: entered allmulticast mode [ 60.090404][ T5327] bridge_slave_0: entered promiscuous mode [ 60.107959][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.115082][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.118162][ T5357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.122489][ T5327] bridge_slave_1: entered allmulticast mode [ 60.137533][ T5327] bridge_slave_1: entered promiscuous mode [ 60.148989][ T5357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.168378][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.181506][ T5357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.209561][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.225191][ T5357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.239692][ T5361] __nla_validate_parse: 61 callbacks suppressed [ 60.239710][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 60.265976][ T5327] team0: Port device team_slave_0 added [ 60.273080][ T5327] team0: Port device team_slave_1 added [ 60.299326][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.306311][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.332353][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.344354][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.351369][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.377378][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.389295][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 60.398298][ T5363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 60.408605][ T5363] FAULT_INJECTION: forcing a failure. [ 60.408605][ T5363] name failslab, interval 1, probability 0, space 0, times 0 [ 60.421290][ T5363] CPU: 1 UID: 0 PID: 5363 Comm: syz.2.540 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 60.431933][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 60.442015][ T5363] Call Trace: [ 60.445298][ T5363] [ 60.448431][ T5363] dump_stack_lvl+0xf2/0x150 [ 60.453075][ T5363] dump_stack+0x15/0x20 [ 60.457307][ T5363] should_fail_ex+0x229/0x230 [ 60.462060][ T5363] ? alloc_netdev_mqs+0x7a5/0x8d0 [ 60.467102][ T5363] should_failslab+0x8f/0xb0 [ 60.471735][ T5363] __kmalloc_cache_noprof+0x4b/0x2a0 [ 60.477049][ T5363] alloc_netdev_mqs+0x7a5/0x8d0 [ 60.481948][ T5363] rtnl_create_link+0x233/0x680 [ 60.486866][ T5363] rtnl_newlink+0xe12/0x1690 [ 60.491499][ T5363] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 60.497788][ T5363] ? _raw_spin_unlock+0x26/0x50 [ 60.502685][ T5363] ? __mutex_lock+0x221/0x8e0 [ 60.507486][ T5363] ? __pfx_rtnl_newlink+0x10/0x10 [ 60.512530][ T5363] rtnetlink_rcv_msg+0x6aa/0x710 [ 60.517496][ T5363] ? ref_tracker_free+0x3a5/0x410 [ 60.522624][ T5363] ? __dev_queue_xmit+0x161/0x1fe0 [ 60.527960][ T5363] netlink_rcv_skb+0x12c/0x230 [ 60.532742][ T5363] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.538225][ T5363] rtnetlink_rcv+0x1c/0x30 [ 60.542658][ T5363] netlink_unicast+0x599/0x670 [ 60.547446][ T5363] netlink_sendmsg+0x5cc/0x6e0 [ 60.552239][ T5363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.557614][ T5363] __sock_sendmsg+0x140/0x180 [ 60.562331][ T5363] ____sys_sendmsg+0x312/0x410 [ 60.567152][ T5363] __sys_sendmsg+0x1e9/0x280 [ 60.571913][ T5363] __x64_sys_sendmsg+0x46/0x50 [ 60.576795][ T5363] x64_sys_call+0x2689/0x2d60 [ 60.581572][ T5363] do_syscall_64+0xc9/0x1c0 [ 60.586240][ T5363] ? clear_bhb_loop+0x55/0xb0 [ 60.591011][ T5363] ? clear_bhb_loop+0x55/0xb0 [ 60.595720][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.601665][ T5363] RIP: 0033:0x7facde689ef9 [ 60.606211][ T5363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.626104][ T5363] RSP: 002b:00007facdd307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.634555][ T5363] RAX: ffffffffffffffda RBX: 00007facde825f80 RCX: 00007facde689ef9 [ 60.642580][ T5363] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 60.650569][ T5363] RBP: 00007facdd307090 R08: 0000000000000000 R09: 0000000000000000 [ 60.658551][ T5363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.666650][ T5363] R13: 0000000000000000 R14: 00007facde825f80 R15: 00007ffc60a2c668 [ 60.674637][ T5363] [ 60.710737][ T5327] hsr_slave_0: entered promiscuous mode [ 60.721757][ T5327] hsr_slave_1: entered promiscuous mode [ 60.797574][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 60.806480][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 60.819280][ T5368] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 60.829568][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.839233][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.049008][ T5368] Cannot find set identified by id 0 to match [ 61.078787][ T5327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.081787][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 61.096252][ T5327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.118767][ T5327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.128075][ T5327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.155486][ T5374] validate_nla: 5 callbacks suppressed [ 61.155506][ T5374] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 61.168806][ T5374] netlink: 204 bytes leftover after parsing attributes in process `syz.0.545'. [ 61.189351][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 61.198241][ T5374] netlink: 52 bytes leftover after parsing attributes in process `syz.0.545'. [ 61.227488][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.241846][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.278825][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.285930][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.295036][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.302174][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.343666][ T5376] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 61.364142][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'. [ 61.374781][ T5376] 8021q: adding VLAN 0 to HW filter on device bond5 [ 61.419765][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.563890][ T5327] veth0_vlan: entered promiscuous mode [ 61.575295][ T5327] veth1_vlan: entered promiscuous mode [ 61.627672][ T5327] veth0_macvtap: entered promiscuous mode [ 61.643586][ T5327] veth1_macvtap: entered promiscuous mode [ 61.662304][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.672833][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.682658][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.693180][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.703353][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.713888][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.726755][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.744944][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.755444][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.766273][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.777114][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.787052][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.797551][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.816027][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.848935][ T5327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.857770][ T5327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.866572][ T5327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.875457][ T5327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.981937][ T5398] loop0: detected capacity change from 0 to 512 [ 62.127598][ T5415] loop3: detected capacity change from 0 to 512 [ 62.144006][ T5415] EXT4-fs: Ignoring removed bh option [ 62.151957][ T5415] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 62.162211][ T5415] EXT4-fs (loop3): invalid journal inode [ 62.164977][ T5411] loop0: detected capacity change from 0 to 512 [ 62.172661][ T5415] EXT4-fs (loop3): can't get journal size [ 62.182352][ T5415] EXT4-fs (loop3): 1 truncate cleaned up [ 62.212974][ T5415] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.553: bg 0: block 255: padding at end of block bitmap is not set [ 62.250663][ T29] audit: type=1400 audit(1724875880.581:608): avc: denied { listen } for pid=5420 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.333462][ T5429] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 62.350466][ T5429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 62.383148][ T5432] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 62.455593][ T5434] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 62.477671][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.513597][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.605183][ T5441] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 62.623992][ T5441] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 62.634455][ T5441] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 62.645711][ T5441] bond6: (slave ip6gre2): making interface the new active one [ 62.655749][ T5441] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 62.665354][ T5444] loop0: detected capacity change from 0 to 512 [ 62.736512][ T5434] Cannot find set identified by id 0 to match [ 62.772060][ T5454] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 62.811078][ T5454] 8021q: adding VLAN 0 to HW filter on device bond7 [ 63.228302][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 63.303724][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.311042][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.329544][ T5468] bridge_slave_0: entered allmulticast mode [ 63.343144][ T5468] bridge_slave_0: entered promiscuous mode [ 63.356516][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.363759][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.377737][ T5468] bridge_slave_1: entered allmulticast mode [ 63.384595][ T5468] bridge_slave_1: entered promiscuous mode [ 63.433197][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.449263][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.464004][ T29] audit: type=1326 audit(1724875881.791:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.487367][ T29] audit: type=1326 audit(1724875881.791:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.510663][ T29] audit: type=1326 audit(1724875881.791:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.534029][ T29] audit: type=1326 audit(1724875881.791:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9309208890 code=0x7ffc0000 [ 63.557290][ T29] audit: type=1326 audit(1724875881.791:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.580531][ T29] audit: type=1326 audit(1724875881.791:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.603887][ T29] audit: type=1326 audit(1724875881.791:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.627109][ T29] audit: type=1326 audit(1724875881.791:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.652483][ T29] audit: type=1326 audit(1724875881.861:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.675792][ T29] audit: type=1326 audit(1724875881.981:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.700373][ T29] audit: type=1326 audit(1724875881.981:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.724343][ T29] audit: type=1326 audit(1724875881.981:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309209ef9 code=0x7ffc0000 [ 63.821338][ T5468] team0: Port device team_slave_0 added [ 63.824609][ T5497] FAULT_INJECTION: forcing a failure. [ 63.824609][ T5497] name failslab, interval 1, probability 0, space 0, times 0 [ 63.832324][ T5468] team0: Port device team_slave_1 added [ 63.839575][ T5497] CPU: 1 UID: 0 PID: 5497 Comm: syz.2.578 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 63.839607][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.839619][ T5497] Call Trace: [ 63.839626][ T5497] [ 63.839635][ T5497] dump_stack_lvl+0xf2/0x150 [ 63.876900][ T5497] dump_stack+0x15/0x20 [ 63.881163][ T5497] should_fail_ex+0x229/0x230 [ 63.885877][ T5497] ? sidtab_sid2str_get+0xb8/0x140 [ 63.891083][ T5497] should_failslab+0x8f/0xb0 [ 63.895732][ T5497] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 63.902182][ T5497] kmemdup_noprof+0x2a/0x60 [ 63.906699][ T5497] sidtab_sid2str_get+0xb8/0x140 [ 63.911714][ T5497] security_sid_to_context_core+0x1eb/0x2f0 [ 63.917655][ T5497] security_sid_to_context+0x27/0x30 [ 63.923026][ T5497] selinux_secid_to_secctx+0x22/0x30 [ 63.928407][ T5497] security_secid_to_secctx+0x4a/0x80 [ 63.933805][ T5497] audit_log_task_context+0x8c/0x1b0 [ 63.939119][ T5497] audit_log_task+0xfb/0x180 [ 63.943822][ T5497] audit_seccomp+0x68/0x130 [ 63.948373][ T5497] __seccomp_filter+0x6fa/0x1180 [ 63.953447][ T5497] ? __perf_event_task_sched_out+0x111/0xfe0 [ 63.959485][ T5497] __secure_computing+0x9f/0x1c0 [ 63.964506][ T5497] syscall_trace_enter+0xd1/0x1f0 [ 63.969568][ T5497] do_syscall_64+0xaa/0x1c0 [ 63.974106][ T5497] ? clear_bhb_loop+0x55/0xb0 [ 63.978813][ T5497] ? clear_bhb_loop+0x55/0xb0 [ 63.983521][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.989493][ T5497] RIP: 0033:0x7facde68893c [ 63.993928][ T5497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 64.013580][ T5497] RSP: 002b:00007facdd307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.022080][ T5497] RAX: ffffffffffffffda RBX: 00007facde825f80 RCX: 00007facde68893c [ 64.030154][ T5497] RDX: 000000000000000f RSI: 00007facdd3070a0 RDI: 0000000000000003 [ 64.038140][ T5497] RBP: 00007facdd307090 R08: 0000000000000000 R09: 0000000000000000 [ 64.046122][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.054119][ T5497] R13: 0000000000000000 R14: 00007facde825f80 R15: 00007ffc60a2c668 [ 64.062125][ T5497] [ 64.067113][ T5500] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 64.086185][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.093208][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.119254][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.163354][ T5502] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (3) [ 64.178772][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.185749][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.212283][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.284861][ T5508] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 64.298800][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.312249][ T5468] hsr_slave_0: entered promiscuous mode [ 64.320152][ T5468] hsr_slave_1: entered promiscuous mode [ 64.326322][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.334297][ T5468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.342045][ T5468] Cannot create hsr debugfs directory [ 64.349473][ T5513] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 64.379292][ T5513] bond7: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 64.389632][ T5513] bond7: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 64.413227][ T5513] bond7: (slave ip6gre3): making interface the new active one [ 64.421503][ T5513] bond7: (slave ip6gre3): Enslaving as an active interface with an up link [ 64.476310][ T5518] loop2: detected capacity change from 0 to 512 [ 64.499348][ T5468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.511454][ T5518] EXT4-fs: Ignoring removed bh option [ 64.522595][ T5518] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 64.536734][ T5518] EXT4-fs (loop2): invalid journal inode [ 64.542539][ T5518] EXT4-fs (loop2): can't get journal size [ 64.550612][ T5518] EXT4-fs (loop2): 1 truncate cleaned up [ 64.560564][ T5518] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.586: bg 0: block 255: padding at end of block bitmap is not set [ 64.576115][ T5508] Cannot find set identified by id 0 to match [ 64.600570][ T5468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.659540][ T5468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.739138][ T5468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.789879][ T5529] loop2: detected capacity change from 0 to 512 [ 64.796937][ T5529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.813344][ T5529] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.829042][ T5529] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.845102][ T5529] EXT4-fs (loop2): 1 truncate cleaned up [ 64.858851][ T5468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.868104][ T5529] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.589: path /134/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 64.870615][ T5468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.901983][ T5468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.919920][ T5468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.969845][ T5533] loop2: detected capacity change from 0 to 256 [ 64.986815][ T5533] vfat: Bad value for 'fmask' [ 65.015322][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.018959][ T5533] loop2: detected capacity change from 0 to 128 [ 65.034233][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.052769][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.059888][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.074680][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.081816][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.111545][ T5468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.112627][ T5533] syz.2.590: attempt to access beyond end of device [ 65.112627][ T5533] loop2: rw=0, sector=121, nr_sectors = 112 limit=128 [ 65.122153][ T5468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.196799][ T5540] loop3: detected capacity change from 0 to 512 [ 65.277367][ T5550] loop3: detected capacity change from 0 to 128 [ 65.310444][ T5550] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.332232][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.349162][ T5553] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 65.396220][ T5553] FAULT_INJECTION: forcing a failure. [ 65.396220][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 65.409035][ T5553] CPU: 0 UID: 0 PID: 5553 Comm: syz.2.595 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 65.419709][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.429791][ T5553] Call Trace: [ 65.433145][ T5553] [ 65.436091][ T5553] dump_stack_lvl+0xf2/0x150 [ 65.440805][ T5553] dump_stack+0x15/0x20 [ 65.445114][ T5553] should_fail_ex+0x229/0x230 [ 65.449829][ T5553] ? __hw_addr_add_ex+0x13d/0x360 [ 65.454973][ T5553] should_failslab+0x8f/0xb0 [ 65.459616][ T5553] __kmalloc_cache_noprof+0x4b/0x2a0 [ 65.464975][ T5553] ? __memcg_slab_post_alloc_hook+0x508/0x650 [ 65.471086][ T5553] __hw_addr_add_ex+0x13d/0x360 [ 65.475971][ T5553] dev_addr_init+0xb2/0x120 [ 65.480574][ T5553] alloc_netdev_mqs+0x1c5/0x8d0 [ 65.485461][ T5553] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 65.491119][ T5553] rtnl_create_link+0x233/0x680 [ 65.496116][ T5553] rtnl_newlink+0xe12/0x1690 [ 65.500736][ T5553] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 65.506992][ T5553] ? _raw_spin_unlock+0x26/0x50 [ 65.511875][ T5553] ? __mutex_lock+0x221/0x8e0 [ 65.516578][ T5553] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.521621][ T5553] rtnetlink_rcv_msg+0x6aa/0x710 [ 65.526659][ T5553] ? ref_tracker_free+0x3a5/0x410 [ 65.531717][ T5553] ? __dev_queue_xmit+0x161/0x1fe0 [ 65.536999][ T5553] netlink_rcv_skb+0x12c/0x230 [ 65.541787][ T5553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.547309][ T5553] rtnetlink_rcv+0x1c/0x30 [ 65.551807][ T5553] netlink_unicast+0x599/0x670 [ 65.556592][ T5553] netlink_sendmsg+0x5cc/0x6e0 [ 65.561534][ T5553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.566933][ T5553] __sock_sendmsg+0x140/0x180 [ 65.571758][ T5553] ____sys_sendmsg+0x312/0x410 [ 65.576656][ T5553] __sys_sendmsg+0x1e9/0x280 [ 65.581351][ T5553] __x64_sys_sendmsg+0x46/0x50 [ 65.586150][ T5553] x64_sys_call+0x2689/0x2d60 [ 65.590892][ T5553] do_syscall_64+0xc9/0x1c0 [ 65.595478][ T5553] ? clear_bhb_loop+0x55/0xb0 [ 65.600204][ T5553] ? clear_bhb_loop+0x55/0xb0 [ 65.604916][ T5553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.610883][ T5553] RIP: 0033:0x7facde689ef9 [ 65.615314][ T5553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.635366][ T5553] RSP: 002b:00007facdd307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.643825][ T5553] RAX: ffffffffffffffda RBX: 00007facde825f80 RCX: 00007facde689ef9 [ 65.651818][ T5553] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 65.659802][ T5553] RBP: 00007facdd307090 R08: 0000000000000000 R09: 0000000000000000 [ 65.667793][ T5553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.675779][ T5553] R13: 0000000000000000 R14: 00007facde825f80 R15: 00007ffc60a2c668 [ 65.683962][ T5553] [ 65.779849][ T5565] sctp: [Deprecated]: syz.2.599 (pid 5565) Use of int in maxseg socket option. [ 65.779849][ T5565] Use struct sctp_assoc_value instead [ 65.845811][ T5468] veth0_vlan: entered promiscuous mode [ 65.867118][ T5468] veth1_vlan: entered promiscuous mode [ 65.902816][ T5468] veth0_macvtap: entered promiscuous mode [ 65.912615][ T5468] veth1_macvtap: entered promiscuous mode [ 65.926662][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.937282][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.947191][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.957713][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.967725][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.978327][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.988239][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.998724][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013850][ T5580] loop3: detected capacity change from 0 to 128 [ 66.020632][ T5580] vfat: Unknown parameter '·vðÏ<±(±2ºUþäL½/݇ ã_œŽtt­9¥lwìÁ£ Øh“ŒÃ¥(’Õ´5IîI%ùúM•ö¤`Œó¥4' [ 66.060094][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.067562][ T5577] __nla_validate_parse: 18 callbacks suppressed [ 66.067577][ T5577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.602'. [ 66.132171][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.133700][ T5584] loop0: detected capacity change from 0 to 512 [ 66.142750][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.158887][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.169484][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.179350][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.189816][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.199657][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.210120][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.225084][ T5584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.244623][ T5584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 66.245763][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.260144][ T5584] System zones: 1-12 [ 66.262852][ T5468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.272840][ T5468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.281644][ T5468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.282482][ T5584] EXT4-fs (loop0): 1 truncate cleaned up [ 66.290578][ T5468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.307000][ T5586] netlink: 'syz.3.604': attribute type 5 has an invalid length. [ 66.314714][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 66.377444][ T5588] loop2: detected capacity change from 0 to 512 [ 66.495629][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 66.506762][ T5605] loop3: detected capacity change from 0 to 128 [ 66.531990][ T5605] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.547794][ T5599] vlan2: entered promiscuous mode [ 66.552929][ T5599] vlan2: entered allmulticast mode [ 66.567939][ T5604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.607'. [ 66.569894][ T5605] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.586067][ T5607] netlink: 188 bytes leftover after parsing attributes in process `syz.2.610'. [ 66.608869][ T5609] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 66.780327][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 66.815107][ T5625] loop2: detected capacity change from 0 to 1764 [ 66.931411][ T5636] loop1: detected capacity change from 0 to 256 [ 66.970812][ T5637] loop3: detected capacity change from 0 to 1764 [ 66.980123][ T5639] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 67.091497][ T5642] team0: entered promiscuous mode [ 67.096588][ T5642] team_slave_0: entered promiscuous mode [ 67.102556][ T5642] team_slave_1: entered promiscuous mode [ 67.138538][ T5642] team0: left promiscuous mode [ 67.143528][ T5642] team_slave_0: left promiscuous mode [ 67.149016][ T5642] team_slave_1: left promiscuous mode [ 67.163951][ T5645] loop2: detected capacity change from 0 to 2048 [ 67.192704][ T5645] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.627: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 67.212431][ T5645] EXT4-fs (loop2): Remounting filesystem read-only [ 67.223511][ T5650] netlink: 188 bytes leftover after parsing attributes in process `syz.0.628'. [ 67.306759][ T5654] loop0: detected capacity change from 0 to 512 [ 67.329441][ T5654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.377355][ T5654] EXT4-fs (loop0): 1 truncate cleaned up [ 67.393855][ T5654] EXT4-fs mount: 32 callbacks suppressed [ 67.393872][ T5654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.610302][ T5666] loop1: detected capacity change from 0 to 1024 [ 67.619254][ T5666] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 67.630274][ T5666] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 67.642784][ T5666] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.653015][ T5666] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 67.661834][ T5666] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 67.688225][ T5666] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 67.699657][ T5666] team0: Failed to send options change via netlink (err -105) [ 67.707157][ T5666] team0: Port device netdevsim1 added [ 67.729177][ T5666] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 67.746647][ T5666] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 67.761030][ T5666] team0: Failed to send options change via netlink (err -105) [ 67.768585][ T5666] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 67.778379][ T5666] team0: Port device netdevsim1 removed [ 67.786969][ T5666] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 67.933948][ T5678] loop3: detected capacity change from 0 to 512 [ 67.933948][ T5676] loop1: detected capacity change from 0 to 512 [ 67.944903][ T5678] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 67.957156][ T5676] EXT4-fs: Ignoring removed bh option [ 67.968033][ T5676] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 67.993445][ T5676] EXT4-fs (loop1): invalid journal inode [ 67.999664][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.017505][ T5676] EXT4-fs (loop1): can't get journal size [ 68.034017][ T5676] EXT4-fs (loop1): 1 truncate cleaned up [ 68.042869][ T5676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.060799][ T5676] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.638: bg 0: block 255: padding at end of block bitmap is not set [ 68.133133][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.143173][ T5687] netlink: 188 bytes leftover after parsing attributes in process `syz.2.640'. [ 68.169379][ T5468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.249521][ T5678] loop3: detected capacity change from 0 to 128 [ 68.331255][ T5672] chnl_net:caif_netlink_parms(): no params data found [ 68.358341][ T5695] xt_CT: No such helper "snmp_trap" [ 68.453523][ T5703] loop3: detected capacity change from 0 to 4096 [ 68.487310][ T5703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.504596][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.511878][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.520233][ T5672] bridge_slave_0: entered allmulticast mode [ 68.526803][ T5672] bridge_slave_0: entered promiscuous mode [ 68.534381][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.541560][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.548838][ T5672] bridge_slave_1: entered allmulticast mode [ 68.557225][ T5672] bridge_slave_1: entered promiscuous mode [ 68.579278][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 68.589851][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.614979][ T5703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.646645][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.687431][ T5717] vlan3: entered promiscuous mode [ 68.692640][ T5717] macvtap0: entered promiscuous mode [ 68.698166][ T5717] vlan3: entered allmulticast mode [ 68.703307][ T5717] macvtap0: entered allmulticast mode [ 68.708718][ T5717] veth0_macvtap: entered allmulticast mode [ 68.731626][ T5703] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.645: corrupted inode contents [ 68.744020][ T5719] loop2: detected capacity change from 0 to 512 [ 68.758202][ T5719] EXT4-fs: Ignoring removed bh option [ 68.777869][ T5703] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.645: mark_inode_dirty error [ 68.789448][ T5719] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 68.797821][ T5719] EXT4-fs (loop2): invalid journal inode [ 68.820284][ T5703] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.645: corrupted inode contents [ 68.827780][ T5719] EXT4-fs (loop2): can't get journal size [ 68.840909][ T5703] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.645: mark_inode_dirty error [ 68.856882][ T5672] team0: Port device team_slave_0 added [ 68.874602][ T5672] team0: Port device team_slave_1 added [ 68.879873][ T5703] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.645: corrupted inode contents [ 68.899480][ T5719] EXT4-fs (loop2): 1 truncate cleaned up [ 68.910327][ T5723] loop1: detected capacity change from 0 to 1024 [ 68.927075][ T5703] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.645: mark_inode_dirty error [ 68.938583][ T5719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.956551][ T5723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.971261][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.978433][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.004422][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.016863][ T5703] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.645: corrupted inode contents [ 69.038674][ T5703] EXT4-fs error (device loop3): ext4_truncate:4241: inode #15: comm syz.3.645: mark_inode_dirty error [ 69.062456][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.067256][ T5719] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.651: bg 0: block 255: padding at end of block bitmap is not set [ 69.069503][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.109742][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.121946][ T5703] EXT4-fs error (device loop3) in ext4_setattr:5553: Corrupt filesystem [ 69.157327][ T5672] hsr_slave_0: entered promiscuous mode [ 69.165033][ T5672] hsr_slave_1: entered promiscuous mode [ 69.176650][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.186349][ T5672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.193993][ T5672] Cannot create hsr debugfs directory [ 69.239655][ T5327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.252159][ T5468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.329954][ T5744] loop3: detected capacity change from 0 to 256 [ 69.355024][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 69.355040][ T29] audit: type=1326 audit(1724875887.681:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b689ef9 code=0x7ffc0000 [ 69.401509][ T29] audit: type=1326 audit(1724875887.681:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b689ef9 code=0x7ffc0000 [ 69.424899][ T29] audit: type=1326 audit(1724875887.681:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe7b689ef9 code=0x7ffc0000 [ 69.448178][ T29] audit: type=1326 audit(1724875887.681:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b689ef9 code=0x7ffc0000 [ 69.472160][ T29] audit: type=1326 audit(1724875887.681:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe7b68be17 code=0x7ffc0000 [ 69.495345][ T29] audit: type=1326 audit(1724875887.681:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbe7b68bd8c code=0x7ffc0000 [ 69.518536][ T29] audit: type=1326 audit(1724875887.681:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbe7b68bcc4 code=0x7ffc0000 [ 69.541832][ T29] audit: type=1326 audit(1724875887.681:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbe7b68bcc4 code=0x7ffc0000 [ 69.565092][ T29] audit: type=1326 audit(1724875887.681:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbe7b688b8a code=0x7ffc0000 [ 69.588203][ T29] audit: type=1326 audit(1724875887.681:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b689ef9 code=0x7ffc0000 [ 69.652434][ T5672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.662874][ T5672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.741230][ T5762] FAULT_INJECTION: forcing a failure. [ 69.741230][ T5762] name failslab, interval 1, probability 0, space 0, times 0 [ 69.753935][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.2.664 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 69.764782][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.774861][ T5762] Call Trace: [ 69.778157][ T5762] [ 69.781097][ T5762] dump_stack_lvl+0xf2/0x150 [ 69.785756][ T5762] dump_stack+0x15/0x20 [ 69.789956][ T5762] should_fail_ex+0x229/0x230 [ 69.794664][ T5762] ? sidtab_sid2str_get+0xb8/0x140 [ 69.799818][ T5762] should_failslab+0x8f/0xb0 [ 69.804464][ T5762] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 69.810830][ T5762] kmemdup_noprof+0x2a/0x60 [ 69.815353][ T5762] sidtab_sid2str_get+0xb8/0x140 [ 69.820463][ T5762] security_sid_to_context_core+0x1eb/0x2f0 [ 69.826394][ T5762] security_sid_to_context+0x27/0x30 [ 69.831717][ T5762] avc_audit_post_callback+0x10d/0x530 [ 69.837208][ T5762] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 69.843235][ T5762] common_lsm_audit+0x7d3/0xfc0 [ 69.848172][ T5762] ? avc_denied+0xf1/0x110 [ 69.852612][ T5762] slow_avc_audit+0xf9/0x140 [ 69.857265][ T5762] avc_has_perm+0x129/0x160 [ 69.861788][ T5762] selinux_mount+0x298/0x2e0 [ 69.866408][ T5762] security_sb_mount+0x5c/0xa0 [ 69.871259][ T5762] path_mount+0xa5/0xb30 [ 69.875573][ T5762] __se_sys_mount+0x27c/0x2d0 [ 69.880329][ T5762] __x64_sys_mount+0x67/0x80 [ 69.884949][ T5762] x64_sys_call+0x203e/0x2d60 [ 69.889703][ T5762] do_syscall_64+0xc9/0x1c0 [ 69.894422][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 69.899126][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 69.903897][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.909930][ T5762] RIP: 0033:0x7facde689ef9 [ 69.914355][ T5762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.933995][ T5762] RSP: 002b:00007facdd307038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.942502][ T5762] RAX: ffffffffffffffda RBX: 00007facde825f80 RCX: 00007facde689ef9 [ 69.950528][ T5762] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 69.958695][ T5762] RBP: 00007facdd307090 R08: 0000000020000440 R09: 0000000000000000 [ 69.966707][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.974691][ T5762] R13: 0000000000000000 R14: 00007facde825f80 R15: 00007ffc60a2c668 [ 69.982768][ T5762] [ 70.002872][ T5764] loop1: detected capacity change from 0 to 1024 [ 70.010725][ T5672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.021090][ T5672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.043405][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 70.055282][ T5764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.057729][ T5768] loop2: detected capacity change from 0 to 512 [ 70.080712][ T5768] EXT4-fs: Ignoring removed bh option [ 70.098169][ T5768] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.114916][ T5672] bond0: (slave netdevsim1): Releasing backup interface [ 70.132641][ T5672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.132652][ T5768] EXT4-fs (loop2): invalid journal inode [ 70.132680][ T5768] EXT4-fs (loop2): can't get journal size [ 70.134558][ T5768] EXT4-fs (loop2): 1 truncate cleaned up [ 70.143009][ T5672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.188082][ T5773] loop0: detected capacity change from 0 to 1024 [ 70.195598][ T5768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.222610][ T5773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.255365][ T5672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.265766][ T5672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.285713][ T5768] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.666: bg 0: block 255: padding at end of block bitmap is not set [ 70.312152][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.338052][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.360657][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.375222][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.386441][ T5468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.419553][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.428434][ T5672] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.460555][ T5672] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.478809][ T5672] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.497453][ T5672] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.533671][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.582628][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.595734][ T5789] loop0: detected capacity change from 0 to 512 [ 70.603718][ T5789] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.615955][ T5789] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.673: iget: special inode unallocated [ 70.634744][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.657658][ T5789] EXT4-fs (loop0): Remounting filesystem read-only [ 70.664543][ T5789] EXT4-fs (loop0): get root inode failed [ 70.670252][ T5789] EXT4-fs (loop0): mount failed [ 70.696291][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.703425][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.730025][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.737286][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.770611][ T5795] netlink: 'syz.0.674': attribute type 5 has an invalid length. [ 70.895964][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.938710][ T5806] loop0: detected capacity change from 0 to 1024 [ 70.948903][ T5809] xt_hashlimit: max too large, truncated to 1048576 [ 70.960997][ T5806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.984208][ T5806] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.002517][ T5806] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.009741][ T5806] EXT4-fs error (device loop0): __ext4_get_inode_loc:4436: comm syz.0.676: Invalid inode table block 0 in block_group 0 [ 71.046680][ T5806] EXT4-fs (loop0): Remounting filesystem read-only [ 71.046736][ T5806] EXT4-fs (loop0): 1 truncate cleaned up [ 71.047261][ T5806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.047329][ T5806] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 71.047696][ T5806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.173542][ T5672] veth0_vlan: entered promiscuous mode [ 71.196644][ T5672] veth1_vlan: entered promiscuous mode [ 71.223646][ T5826] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000 [ 71.232345][ T5672] veth0_macvtap: entered promiscuous mode [ 71.242334][ T5672] veth1_macvtap: entered promiscuous mode [ 71.264617][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.275340][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.285480][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.295942][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.305829][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.316354][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.326293][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.336837][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.346799][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.357263][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.370238][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.378746][ T5834] loop3: detected capacity change from 0 to 1024 [ 71.379348][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.395548][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.405838][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.416863][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.426883][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.437425][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.447525][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.458095][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.467934][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.478394][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.490484][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.490977][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.539665][ T5672] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.548685][ T5672] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.557444][ T5672] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.566485][ T5672] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.652863][ T5327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.729784][ T5844] loop0: detected capacity change from 0 to 2048 [ 71.764121][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.818215][ T5848] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 71.846545][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.895518][ T5848] syz.3.685 (5848) used greatest stack depth: 9320 bytes left [ 71.948221][ T5856] netlink: 'syz.0.686': attribute type 32 has an invalid length. [ 72.051798][ T5867] loop3: detected capacity change from 0 to 1024 [ 72.064946][ T5863] __nla_validate_parse: 1 callbacks suppressed [ 72.064963][ T5863] netlink: 64 bytes leftover after parsing attributes in process `syz.0.690'. [ 72.110477][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.286159][ T5327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.310287][ T5879] loop0: detected capacity change from 0 to 512 [ 72.328555][ T5879] EXT4-fs: Ignoring removed bh option [ 72.344887][ T5881] loop3: detected capacity change from 0 to 1024 [ 72.347951][ T5879] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 72.363851][ T5881] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.368826][ T5879] EXT4-fs (loop0): invalid journal inode [ 72.384659][ T5879] EXT4-fs (loop0): can't get journal size [ 72.391998][ T5879] EXT4-fs (loop0): 1 truncate cleaned up [ 72.392140][ T5881] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.404288][ T5879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.424058][ T5879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.694: bg 0: block 255: padding at end of block bitmap is not set [ 72.427992][ T5881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.462733][ T5881] EXT4-fs error (device loop3): __ext4_get_inode_loc:4436: comm syz.3.695: Invalid inode table block 0 in block_group 0 [ 72.464248][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.485868][ T5881] EXT4-fs (loop3): Remounting filesystem read-only [ 72.495700][ T5881] EXT4-fs (loop3): 1 truncate cleaned up [ 72.502507][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.516982][ T5881] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 72.524115][ T5881] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.524775][ T5885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 72.577091][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 72.586061][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 72.600104][ T5887] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 72.613075][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.621844][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.643961][ T5881] netlink: 5 bytes leftover after parsing attributes in process `syz.3.695'. [ 72.652873][ T5881] netlink: 5 bytes leftover after parsing attributes in process `syz.3.695'. [ 72.697016][ T5891] FAULT_INJECTION: forcing a failure. [ 72.697016][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.710142][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: syz.3.698 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 72.720815][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.730902][ T5891] Call Trace: [ 72.734187][ T5891] [ 72.737118][ T5891] dump_stack_lvl+0xf2/0x150 [ 72.741929][ T5891] dump_stack+0x15/0x20 [ 72.746375][ T5891] should_fail_ex+0x229/0x230 [ 72.751169][ T5891] should_fail+0xb/0x10 [ 72.755415][ T5891] should_fail_usercopy+0x1a/0x20 [ 72.760511][ T5891] _copy_from_user+0x1e/0xd0 [ 72.765120][ T5891] copy_msghdr_from_user+0x54/0x2a0 [ 72.770401][ T5891] __sys_sendmsg+0x17d/0x280 [ 72.775109][ T5891] __x64_sys_sendmsg+0x46/0x50 [ 72.779885][ T5891] x64_sys_call+0x2689/0x2d60 [ 72.784620][ T5891] do_syscall_64+0xc9/0x1c0 [ 72.789246][ T5891] ? clear_bhb_loop+0x55/0xb0 [ 72.793993][ T5891] ? clear_bhb_loop+0x55/0xb0 [ 72.798690][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.804630][ T5891] RIP: 0033:0x7f9309209ef9 [ 72.809130][ T5891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.828836][ T5891] RSP: 002b:00007f9307e81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.837259][ T5891] RAX: ffffffffffffffda RBX: 00007f93093a5f80 RCX: 00007f9309209ef9 [ 72.845232][ T5891] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 72.853203][ T5891] RBP: 00007f9307e81090 R08: 0000000000000000 R09: 0000000000000000 [ 72.861175][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.869152][ T5891] R13: 0000000000000000 R14: 00007f93093a5f80 R15: 00007ffd6987dd18 [ 72.877129][ T5891] [ 72.883077][ T5887] Cannot find del_set index 2 as target [ 72.899174][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.905992][ T5893] netlink: 'syz.4.699': attribute type 5 has an invalid length. [ 72.915344][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 72.924432][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.094372][ T5898] FAULT_INJECTION: forcing a failure. [ 73.094372][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.107898][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.4.701 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 73.118505][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 73.128662][ T5898] Call Trace: [ 73.132050][ T5898] [ 73.135073][ T5898] dump_stack_lvl+0xf2/0x150 [ 73.139706][ T5898] dump_stack+0x15/0x20 [ 73.143900][ T5898] should_fail_ex+0x229/0x230 [ 73.148610][ T5898] should_fail+0xb/0x10 [ 73.152857][ T5898] should_fail_usercopy+0x1a/0x20 [ 73.157918][ T5898] _copy_from_user+0x1e/0xd0 [ 73.162661][ T5898] restore_sigcontext+0x64/0x220 [ 73.167638][ T5898] __do_sys_rt_sigreturn+0xc5/0x150 [ 73.172935][ T5898] x64_sys_call+0x28e1/0x2d60 [ 73.177685][ T5898] do_syscall_64+0xc9/0x1c0 [ 73.182344][ T5898] ? clear_bhb_loop+0x55/0xb0 [ 73.187073][ T5898] ? clear_bhb_loop+0x55/0xb0 [ 73.191786][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.197799][ T5898] RIP: 0033:0x7f2ea6fb5849 [ 73.202243][ T5898] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 73.221989][ T5898] RSP: 002b:00007f2ea5c96a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 73.230502][ T5898] RAX: ffffffffffffffda RBX: 00007f2ea71b5f80 RCX: 00007f2ea6fb5849 [ 73.238614][ T5898] RDX: 00007f2ea5c96a80 RSI: 00007f2ea5c96bb0 RDI: 0000000000000021 [ 73.246752][ T5898] RBP: 00007f2ea5c97090 R08: 0000000000000080 R09: 0000000000000004 [ 73.254748][ T5898] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 73.262746][ T5898] R13: 0000000000000000 R14: 00007f2ea71b5f80 R15: 00007ffdcc915ea8 [ 73.270769][ T5898] [ 73.275387][ T5891] Cannot find set identified by id 0 to match [ 73.568993][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 73.606544][ T5918] loop1: detected capacity change from 0 to 128 [ 73.613589][ T5918] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.628247][ T5918] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.665837][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.709'. [ 73.680626][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 73.770888][ T5930] loop2: detected capacity change from 0 to 256 [ 73.786612][ T5929] loop1: detected capacity change from 0 to 1024 [ 73.821061][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.921149][ T5939] loop2: detected capacity change from 0 to 1024 [ 73.958074][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.010975][ T5468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.234668][ T5954] team0: entered promiscuous mode [ 74.240086][ T5954] team_slave_0: entered promiscuous mode [ 74.246021][ T5954] team_slave_1: entered promiscuous mode [ 74.284580][ T5954] team0: left promiscuous mode [ 74.289561][ T5954] team_slave_0: left promiscuous mode [ 74.295134][ T5954] team_slave_1: left promiscuous mode [ 74.382197][ T5970] loop1: detected capacity change from 0 to 128 [ 74.398122][ T5970] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.415004][ T5970] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.675897][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.688577][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.863391][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.005041][ T5992] loop3: detected capacity change from 0 to 2048 [ 75.046531][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.456094][ T6011] macsec1: entered promiscuous mode [ 75.461591][ T6011] macvlan0: entered promiscuous mode [ 75.467008][ T6011] macsec1: entered allmulticast mode [ 75.475001][ T6009] loop1: detected capacity change from 0 to 1024 [ 75.483853][ T6009] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 75.494908][ T6009] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 75.506505][ T6008] loop4: detected capacity change from 0 to 512 [ 75.507970][ T6009] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 75.522966][ T6009] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 75.531762][ T6009] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 75.555809][ T6008] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.567674][ T6008] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 75.577907][ T6008] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.741: Corrupt directory, running e2fsck is recommended [ 75.583320][ T6009] netlink: 'syz.1.743': attribute type 10 has an invalid length. [ 75.664987][ T6009] bond0: (slave netdevsim1): Releasing backup interface [ 75.673904][ T6008] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 75.684896][ T6009] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 75.692960][ T6008] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.741: corrupted in-inode xattr: invalid ea_ino [ 75.694511][ T6009] team0: Failed to send options change via netlink (err -105) [ 75.714802][ T6009] team0: Port device netdevsim1 added [ 75.721072][ T6018] netlink: 'syz.1.743': attribute type 10 has an invalid length. [ 75.727674][ T5327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.758181][ T6018] team0: Failed to send options change via netlink (err -105) [ 75.766384][ T6008] EXT4-fs (loop4): Remounting filesystem read-only [ 75.770746][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 75.770810][ T29] audit: type=1400 audit(1724875894.101:748): avc: denied { bind } for pid=6019 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.786469][ T6008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.802239][ T6020] IPv4: Oversized IP packet from 172.20.20.24 [ 75.817751][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 75.817793][ T6018] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 75.823939][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 75.833898][ T29] audit: type=1400 audit(1724875894.131:749): avc: denied { connect } for pid=6019 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.860137][ T29] audit: type=1400 audit(1724875894.131:750): avc: denied { write } for pid=6019 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.881391][ T6018] team0: Port device netdevsim1 removed [ 75.892940][ T6023] loop0: detected capacity change from 0 to 1024 [ 75.893326][ T6018] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 75.913005][ T6008] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 75.920684][ T6008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.950511][ T6023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.008816][ T6031] loop1: detected capacity change from 0 to 512 [ 76.017327][ T6031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.040526][ T6031] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.750: bg 0: block 248: padding at end of block bitmap is not set [ 76.059857][ T6031] Quota error (device loop1): write_blk: dquota write failed [ 76.067350][ T6031] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 76.077298][ T6031] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.750: Failed to acquire dquot type 1 [ 76.105002][ T6035] xt_CT: No such helper "snmp_trap" [ 76.146390][ T6031] EXT4-fs (loop1): 1 truncate cleaned up [ 76.153947][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.205131][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.221556][ T6031] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.255254][ T6053] Unknown options in mask 5 [ 76.256325][ T6050] loop0: detected capacity change from 0 to 1024 [ 76.271328][ T6047] loop2: detected capacity change from 0 to 128 [ 76.290339][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.293377][ T6047] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.321020][ T6031] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz.1.750: deleted inode referenced: 12 [ 76.344224][ T6047] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.356924][ T6031] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz.1.750: deleted inode referenced: 12 [ 76.414622][ T6047] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 76.451658][ T5468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.464277][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.552211][ T3265] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.661988][ T6075] loop0: detected capacity change from 0 to 1024 [ 76.687719][ T6078] loop2: detected capacity change from 0 to 512 [ 76.697532][ T6078] journal_path: Lookup failure for './file1' [ 76.702196][ T6075] vlan4: entered allmulticast mode [ 76.703599][ T6078] EXT4-fs: error: could not find journal device path [ 76.724842][ T6082] loop3: detected capacity change from 0 to 512 [ 76.754551][ T6079] netlink: 'syz.1.769': attribute type 2 has an invalid length. [ 76.790281][ T6086] loop2: detected capacity change from 0 to 1024 [ 76.841236][ T6086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.864785][ T29] audit: type=1326 audit(1724875895.181:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90885b9ef9 code=0x7ffc0000 [ 76.888340][ T29] audit: type=1326 audit(1724875895.181:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f90885b9ef9 code=0x7ffc0000 [ 76.911606][ T29] audit: type=1326 audit(1724875895.181:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90885b9ef9 code=0x7ffc0000 [ 76.934931][ T29] audit: type=1326 audit(1724875895.191:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f90885b9ef9 code=0x7ffc0000 [ 76.958149][ T29] audit: type=1326 audit(1724875895.191:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90885b9ef9 code=0x7ffc0000 [ 77.090397][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.204965][ T6128] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 77.215118][ T6128] __nla_validate_parse: 7 callbacks suppressed [ 77.215135][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.783'. [ 77.250732][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 77.335514][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 77.344469][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 77.361028][ T6137] loop2: detected capacity change from 0 to 512 [ 77.380791][ T6137] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.416372][ T6146] FAULT_INJECTION: forcing a failure. [ 77.416372][ T6146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.417605][ T6137] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.789: bg 0: block 64: padding at end of block bitmap is not set [ 77.429541][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.4.791 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 77.450243][ T6137] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.789: Failed to acquire dquot type 0 [ 77.454146][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.465807][ T6137] EXT4-fs (loop2): 1 truncate cleaned up [ 77.475465][ T6146] Call Trace: [ 77.475477][ T6146] [ 77.475486][ T6146] dump_stack_lvl+0xf2/0x150 [ 77.481584][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.484495][ T6146] dump_stack+0x15/0x20 [ 77.509234][ T6146] should_fail_ex+0x229/0x230 [ 77.513958][ T6146] should_fail+0xb/0x10 [ 77.518144][ T6146] should_fail_usercopy+0x1a/0x20 [ 77.523233][ T6146] _copy_to_user+0x1e/0xa0 [ 77.527695][ T6146] simple_read_from_buffer+0xa0/0x110 [ 77.533088][ T6146] proc_fail_nth_read+0xff/0x140 [ 77.538047][ T6146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.543624][ T6146] vfs_read+0x1a2/0x6e0 [ 77.547836][ T6146] ? __rcu_read_unlock+0x4e/0x70 [ 77.552850][ T6146] ? __cond_resched+0x28/0x50 [ 77.557705][ T6146] ksys_read+0xeb/0x1b0 [ 77.561953][ T6146] __x64_sys_read+0x42/0x50 [ 77.566483][ T6146] x64_sys_call+0x27d3/0x2d60 [ 77.571187][ T6146] do_syscall_64+0xc9/0x1c0 [ 77.575827][ T6146] ? clear_bhb_loop+0x55/0xb0 [ 77.580535][ T6146] ? clear_bhb_loop+0x55/0xb0 [ 77.585286][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.591201][ T6146] RIP: 0033:0x7f2ea701893c [ 77.595632][ T6146] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 77.615318][ T6146] RSP: 002b:00007f2ea5c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.623751][ T6146] RAX: ffffffffffffffda RBX: 00007f2ea71b5f80 RCX: 00007f2ea701893c [ 77.631789][ T6146] RDX: 000000000000000f RSI: 00007f2ea5c970a0 RDI: 0000000000000003 [ 77.640315][ T6146] RBP: 00007f2ea5c97090 R08: 0000000000000000 R09: 0000000000000000 [ 77.648312][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.656317][ T6146] R13: 0000000000000000 R14: 00007f2ea71b5f80 R15: 00007ffdcc915ea8 [ 77.664311][ T6146] [ 77.737320][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.747693][ T6152] loop4: detected capacity change from 0 to 1764 [ 77.788656][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 77.797510][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 77.839417][ T6161] netlink: 160 bytes leftover after parsing attributes in process `syz.4.799'. [ 77.843758][ T6150] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.857260][ T6150] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.866201][ T6150] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.873611][ T6161] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 77.874960][ T6150] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.908097][ T6150] vxlan0: entered allmulticast mode [ 77.934155][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'. [ 77.943159][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'. [ 78.025137][ T6170] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (3) [ 78.035747][ T6166] loop3: detected capacity change from 0 to 1024 [ 78.057992][ T6166] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 78.102068][ T6166] loop3: detected capacity change from 0 to 512 [ 78.142097][ T6166] EXT4-fs: Mount option(s) incompatible with ext3 [ 78.228529][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 78.286188][ T6190] loop3: detected capacity change from 0 to 1024 [ 78.309370][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.481321][ T6186] loop4: detected capacity change from 0 to 8192 [ 78.511350][ T5327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.634725][ T6203] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 78.658110][ T6204] loop2: detected capacity change from 0 to 512 [ 78.665064][ T6204] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.682329][ T6204] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 78.697756][ T6204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 78.722671][ T6204] System zones: 1-12 [ 78.739734][ T6204] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.813: corrupted in-inode xattr: e_value size too large [ 78.769487][ T6204] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.813: couldn't read orphan inode 15 (err -117) [ 78.806998][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.820190][ T6214] loop0: detected capacity change from 0 to 512 [ 78.829365][ T6214] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.856063][ T6214] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.817: iget: special inode unallocated [ 78.873909][ T6217] xt_hashlimit: max too large, truncated to 1048576 [ 78.881287][ T6214] EXT4-fs (loop0): Remounting filesystem read-only [ 78.883036][ T6219] loop3: detected capacity change from 0 to 512 [ 78.887826][ T6214] EXT4-fs (loop0): get root inode failed [ 78.900024][ T6214] EXT4-fs (loop0): mount failed [ 78.934169][ T6219] loop3: detected capacity change from 0 to 1024 [ 78.945741][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.979398][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.998210][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.039330][ T6228] loop2: detected capacity change from 0 to 1024 [ 79.080217][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.167279][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.260947][ T6249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6249 comm=syz.2.832 [ 79.269487][ T6250] loop4: detected capacity change from 0 to 128 [ 79.279660][ T6248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6248 comm=syz.2.832 [ 79.296818][ T6252] netlink: 'syz.3.833': attribute type 4 has an invalid length. [ 79.308055][ T6250] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.322043][ T6250] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.360097][ T6248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.383092][ T6254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.450065][ T5672] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.491891][ T6260] loop3: detected capacity change from 0 to 1024 [ 79.511324][ T6262] loop4: detected capacity change from 0 to 1024 [ 79.520529][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.552358][ T6266] netlink: 'syz.0.838': attribute type 32 has an invalid length. [ 79.584048][ T6262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.669152][ T5327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.748950][ T5672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.767250][ T6277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=6277 comm=syz.0.842 [ 79.814039][ T6280] loop3: detected capacity change from 0 to 256 [ 79.835933][ T6280] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.846099][ T6284] loop0: detected capacity change from 0 to 1024 [ 79.856126][ T6284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.884359][ T6284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.917297][ T6290] loop4: detected capacity change from 0 to 1024 [ 79.925132][ T6290] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.936802][ T6284] 9pnet_fd: Insufficient options for proto=fd [ 79.946753][ T6284] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 1: comm syz.0.845: lblock 0 mapped to illegal pblock 1 (length 1) [ 79.953146][ T6290] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.969613][ T6290] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.977741][ T6290] EXT4-fs error (device loop4): __ext4_get_inode_loc:4436: comm syz.4.847: Invalid inode table block 0 in block_group 0 [ 79.993914][ T6290] EXT4-fs (loop4): Remounting filesystem read-only [ 80.000639][ T6292] wireguard0: entered promiscuous mode [ 80.006131][ T6292] wireguard0: entered allmulticast mode [ 80.013190][ T6290] EXT4-fs (loop4): 1 truncate cleaned up [ 80.039139][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.049636][ T6290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.063220][ T6290] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 80.125506][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.146150][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.164198][ T6306] FAULT_INJECTION: forcing a failure. [ 80.164198][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.177748][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.4.851 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 80.188447][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.198522][ T6306] Call Trace: [ 80.201819][ T6306] [ 80.204802][ T6306] dump_stack_lvl+0xf2/0x150 [ 80.209481][ T6306] dump_stack+0x15/0x20 [ 80.213780][ T6306] should_fail_ex+0x229/0x230 [ 80.218626][ T6306] should_fail+0xb/0x10 [ 80.222811][ T6306] should_fail_usercopy+0x1a/0x20 [ 80.227951][ T6306] _copy_to_user+0x1e/0xa0 [ 80.232630][ T6306] simple_read_from_buffer+0xa0/0x110 [ 80.238046][ T6306] proc_fail_nth_read+0xff/0x140 [ 80.243057][ T6306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.248689][ T6306] vfs_read+0x1a2/0x6e0 [ 80.253026][ T6306] ? __rcu_read_unlock+0x4e/0x70 [ 80.258089][ T6306] ? __fget_files+0x1da/0x210 [ 80.263034][ T6306] ksys_read+0xeb/0x1b0 [ 80.267242][ T6306] __x64_sys_read+0x42/0x50 [ 80.271799][ T6306] x64_sys_call+0x27d3/0x2d60 [ 80.276580][ T6306] do_syscall_64+0xc9/0x1c0 [ 80.281204][ T6306] ? clear_bhb_loop+0x55/0xb0 [ 80.285979][ T6306] ? clear_bhb_loop+0x55/0xb0 [ 80.290729][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.296749][ T6306] RIP: 0033:0x7f2ea701893c [ 80.301195][ T6306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 80.320995][ T6306] RSP: 002b:00007f2ea5c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.329892][ T6306] RAX: ffffffffffffffda RBX: 00007f2ea71b5f80 RCX: 00007f2ea701893c [ 80.337905][ T6306] RDX: 000000000000000f RSI: 00007f2ea5c970a0 RDI: 0000000000000006 [ 80.345896][ T6306] RBP: 00007f2ea5c97090 R08: 0000000000000000 R09: 0000000000000000 [ 80.353889][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.361969][ T6306] R13: 0000000000000000 R14: 00007f2ea71b5f80 R15: 00007ffdcc915ea8 [ 80.370019][ T6306] [ 80.398486][ T6309] loop0: detected capacity change from 0 to 512 [ 80.406498][ T6309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.416144][ T6309] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 80.426811][ T6309] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 80.439029][ T6309] EXT4-fs (loop0): 1 truncate cleaned up [ 80.514957][ T6313] loop4: detected capacity change from 0 to 1024 [ 80.613263][ T6321] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 80.621065][ T6321] netlink: 'syz.4.856': attribute type 4 has an invalid length. [ 80.800292][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 80.800311][ T29] audit: type=1400 audit(1724875899.131:936): avc: denied { create } for pid=6328 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.826158][ T6332] netlink: 'syz.2.862': attribute type 4 has an invalid length. [ 80.835419][ T29] audit: type=1400 audit(1724875899.131:937): avc: denied { bind } for pid=6328 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.855868][ T29] audit: type=1400 audit(1724875899.131:938): avc: denied { create } for pid=6328 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.869009][ T6332] loop2: detected capacity change from 0 to 512 [ 80.875522][ T29] audit: type=1400 audit(1724875899.131:939): avc: denied { create } for pid=6328 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.901372][ T29] audit: type=1400 audit(1724875899.131:940): avc: denied { open } for pid=6331 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.920591][ T29] audit: type=1400 audit(1724875899.131:941): avc: denied { perfmon } for pid=6331 comm="syz.2.862" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.931444][ T6339] loop4: detected capacity change from 0 to 512 [ 80.941647][ T29] audit: type=1400 audit(1724875899.131:942): avc: denied { kernel } for pid=6331 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.967281][ T6339] EXT4-fs: Ignoring removed bh option [ 80.972884][ T29] audit: type=1400 audit(1724875899.131:943): avc: denied { setopt } for pid=6328 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.992412][ T29] audit: type=1400 audit(1724875899.131:944): avc: denied { create } for pid=6331 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.012999][ T29] audit: type=1400 audit(1724875899.131:945): avc: denied { write } for pid=6331 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.049309][ T6339] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 81.066877][ T6339] EXT4-fs (loop4): invalid journal inode [ 81.069591][ T6332] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.072675][ T6339] EXT4-fs (loop4): can't get journal size [ 81.090750][ T6344] delete_channel: no stack [ 81.096119][ T6348] loop1: detected capacity change from 0 to 1024 [ 81.123430][ T6339] EXT4-fs (loop4): 1 truncate cleaned up [ 81.181509][ T6339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.863: bg 0: block 255: padding at end of block bitmap is not set [ 81.215953][ T6357] loop2: detected capacity change from 0 to 1024 [ 81.305327][ T6368] ================================================================== [ 81.313477][ T6368] BUG: KCSAN: data-race in mas_wr_modify / mtree_range_walk [ 81.320807][ T6368] [ 81.323150][ T6368] write to 0xffff8881040eef68 of 8 bytes by task 6363 on cpu 1: [ 81.330802][ T6368] mas_wr_modify+0x155c/0x3c90 [ 81.335613][ T6368] mas_wr_store_entry+0x250/0x390 [ 81.340661][ T6368] mas_store_prealloc+0x151/0x2b0 [ 81.345808][ T6368] vma_expand+0x57f/0x660 [ 81.350166][ T6368] mmap_region+0x80c/0x1620 [ 81.354687][ T6368] do_mmap+0x72a/0xb70 [ 81.358790][ T6368] vm_mmap_pgoff+0x133/0x290 [ 81.363752][ T6368] ksys_mmap_pgoff+0xd0/0x340 [ 81.368475][ T6368] x64_sys_call+0x1884/0x2d60 [ 81.373183][ T6368] do_syscall_64+0xc9/0x1c0 [ 81.377721][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.383655][ T6368] [ 81.385995][ T6368] read to 0xffff8881040eef68 of 8 bytes by task 6368 on cpu 0: [ 81.393559][ T6368] mtree_range_walk+0x1b4/0x460 [ 81.398455][ T6368] mas_walk+0x16e/0x320 [ 81.402615][ T6368] lock_vma_under_rcu+0x84/0x260 [ 81.407588][ T6368] exc_page_fault+0x150/0x650 [ 81.412512][ T6368] asm_exc_page_fault+0x26/0x30 [ 81.417394][ T6368] [ 81.419730][ T6368] value changed: 0x00007fbe7a2a4fff -> 0x00007fbe7a283fff [ 81.426849][ T6368] [ 81.429176][ T6368] Reported by Kernel Concurrency Sanitizer on: [ 81.435330][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.1.871 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 81.445926][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.456082][ T6368] ==================================================================