last executing test programs: 35.705047577s ago: executing program 0 (id=1346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="ceaa2adfe7d7522973e833eb8bb013b05d45fae3923285f8c7ea0c72532be4de6ac120ac48dc29331d372aac630a86457e7cfa1f57305e7e1f6a22604a3f911c928614a0e140f41dc505", 0x4a}, {&(0x7f0000000300)="709340feee3d8eaac986e49c9bb6e716a5152f5fbbf9a349e3f6e761bedcdfd77d083c26a7122d7c60d42f38b4a344f4bc6d038f68ce5d4711cb9dc1cf8196462cd09e1d2f316338818dc584f084ea7b39f2214e57642986f7013aed31ae2c675800bf4173e947079fef381f6034b6204306450c094111080366844de759069a159ecb4020d101e19f3fa6a670e7b563e84d20b6967821f7e61928657d9875c1319233e1b3131c0b4072c23a84ce91100a7cd5400450f4e5bf6a8f9cf18b703a47a060214cb7a07a1a1208e3bf3b4aec56a0209f573bd8e4f31b38d2d72dbeb90cf528f1c582b378cff5cf73cb7527e7076f21745efbd1fae6e6b5bec2f3", 0xfe}, {&(0x7f0000000680)="f41b560b88820617aeaa092f169626cd2b81f875b5c0f45382b01e1319168bd601e45a494331859c6a010cac1d849e9d4607629b2350a91258ed48a367be243a6d95f8d0d51f9d72580300001bf0c11ee73a77614b4a550ca623fd861f05255567000000224aa1f6341523e3c558ed435f32ac1591e835292fbd2bf6d9c38d2b0f3ebe15a44b2b0cbcaf34b4e2b23f014819c5f2e64dbf34a9dca4a087e95fdc7c02d2da57d1bd3847e27862ce81229c214f6eaa4947ee0feab5acfeef4763da324ff3f8f95a5707e6a8e800"/215, 0xd7}, {&(0x7f0000000400)="a38dae3d1cdc98cf90eebd6722f57cdfc15cf504fb83b027abaefc11a49561bfe22ca85881b0237ead587b61996719b526ce86a2aff56abcf59a6dea8bf721391b2e68942b3811c2c580ea6f59584122935c1ba147397d89c7f25947f37a4c4a9a2b866d4170b56ba67bf68c0daed087383659818f24e2c5048b9640cf1bd9ac0b859bb8d589ecd590966f39d8081ee0f6be45e6ab0aa1491e939b51ec847bbca0db3c023b650c81069b9a7df819ca2616ca2337afb552b78f4857ac1eff261278306f03fa2c1833b4fa6a03c00051a482c0988e469691037df097e15e3165", 0xdf}], 0x5}, 0x4004880) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="09090000002000000000010000000000000008410000004c0018"], 0x68}}, 0x0) 35.679376198s ago: executing program 0 (id=1349): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) 35.607094268s ago: executing program 0 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000"], 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x1}}, 0x24, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000740000", @ANYRES32=0x0, @ANYBLOB="0000000003120100240012800b0001006272696467650000140002800800010015000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 34.806259573s ago: executing program 0 (id=1377): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000400000000000400"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x225, 0x0, 0x0, 0xc3100, 0x65, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = socket(0x1e, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x202, 0x4) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xd) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = memfd_secret(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='tlb_flush\x00', r6, 0x0, 0x3}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f000065d000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000011) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="6a3ee3689b4339e8186cc5492cfa125e0ffae9b8e8703461ae5b9e45141425955ec2c2b113f989c902e6dd3300ea"], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 34.604000735s ago: executing program 0 (id=1378): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x5d68f0f0}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 34.354969246s ago: executing program 0 (id=1385): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 34.323922047s ago: executing program 32 (id=1385): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 2.151597936s ago: executing program 4 (id=2096): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, &(0x7f0000000f40)=""/4089, 0x0, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) 2.123379136s ago: executing program 4 (id=2100): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pause() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1e, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$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") getresgid(&(0x7f00000001c0), 0x0, &(0x7f0000000240)) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x11c}], 0x2, 0x0, 0x0) 2.020583497s ago: executing program 3 (id=2104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffff5, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0100001900554f2bbd7000fdfffffffe800000000000000000000000000036fc010000000000000000000000000000000000004e23fffa0a0020052e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0xd4, 0xfffffffe, 0x6, 0x400, r2, 0x100, '\x00', 0x0, r3, 0x2, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) ioctl$FICLONE(r2, 0x40049409, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet(r4, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000009000000000000000000000063d5c29b88736d7e8b531be4f77a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r11, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r4}, 0x20) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e24, @empty}, 0x10) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 1.59144924s ago: executing program 1 (id=2109): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{0x0, 0xfffffeee, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}}], 0x1, 0x8890) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x11b, @time={0x0, 0x7}, 0x0, {0xa}, 0x40, 0x2}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 1.349326612s ago: executing program 1 (id=2110): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) (fail_nth: 8) 1.277327592s ago: executing program 4 (id=2112): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f300000081000000"], 0x58) close(0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (fail_nth: 4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 1.029615993s ago: executing program 4 (id=2113): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 1.028382213s ago: executing program 3 (id=2116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="001000000000e2626827ce09d2fb000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x18) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20140000000000976efcf3e9eae72800"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r1, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], 0x0, 0xa2, &(0x7f0000000dc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="e19ae1dbf9c1314957995fccdfa8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="1103020000000000680012800b00010069703667726500005800028006000e000200000014e2070020010000000000000000000000000002080004008900000008000400030000000600180004000000080004000080000006000f006d0000000600180003000000080014000500000008000500", @ANYRES32=0x0, @ANYBLOB="14000300"/20], 0xa4}, 0x1, 0xba01}, 0x810) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000001400)) unshare(0x40000000) accept4$tipc(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 980.051134ms ago: executing program 1 (id=2117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'ipvlan1\x00', {0xfffffffd}, 0x1000}) 977.377644ms ago: executing program 1 (id=2119): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001740), 0x408000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000001780), &(0x7f00000017c0)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4044040) pwritev2(r1, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000040)="8240b070", 0x4}, {&(0x7f0000000140)="a271bfebe36775f26efc41c86243769e8b75d772938e6c8723c6492475ac62cd2ecaa272432c78096095089067e4e7013e96119e7d2601a2da9334160f833af234ed039dc9f430097b1345797acb5fea7eec8f736e8496ede37bc57b9fca7ec46e32e7c6d6a42ebcb0c0252fe89b691b346fe6640a5a18bbbf46a723f864d110bc2f06199ea5c83d746316955db8bb61a963d443d57198e20e8db9ff5e5b530773ee71f25238ce82f844a87bc205a3df0b49db3cc2aac866e63cace2acec8ea648e9ccb1cf122e81c371fa413b364352245bbd1e25616fb896544bfc6df054ab7f0f731d831a", 0xe6}, {&(0x7f0000000240)="e3a80ea66f0e31d017efd7f97d3fbf6f251cd96ec14521f72424ed6d5b31210b3b0f3c26c615d30df6710a58044a6820d8a049d3ffb3cd839c6bd122b0476b5dc8a8", 0x42}, {&(0x7f00000002c0)="7484ae5493eeb476ac548ba3a88f76f66520351adcd0b373a1c7f26fd202ddbcc6a493e4535b673be5bc49b8b0e154e546336ddf4339d3d70d1ba4a5f35253245f7080ebdde5e4c64315cb73cdd0da40070f6c074ae85f6aa36cf46d7cc09c4f148426efe8026f222e", 0x69}, {&(0x7f0000001500)="622aa6fcabe1a1127b4bb8c4b59370879e8e82bf76c701b1474db95e253ea1d4bbfec2f0d9e1595fc29fed0389e22a8505c27792233f9ce16f8a0260ba305466f31ea727247eee0532d4a790aeb00bffdeb01e4f6084d712863e500d57766a95bd42c31364e6f71d967c98c9836006d69f1f4ef4d9be9e71ca14ff664e30a271a08e39a237282ffa6fe24bb1bd20320250bc1bd66d201366f39d93313f6088b94160e4c98c757b69", 0xa8}, {&(0x7f00000015c0)="3a350aafd9b5b36d15b7ccd51c128b84ece1a5493220422e31a2691552d036c3dc2d53b88a811325cb83d2a94452d6c8405f30e1edc969ffb6f18e3a225d21125dcfa3abd30335b5c24245a57ea5c80e600c7e0028848c43d6414972298cb1f79f2baa83ac21dcf605e72ace3085e9d04eb1980f36023d580083e5fae8771ef2e71ad5ffc604a49a2b0c0d5040c4ccfa05be4928d2a8fd2649a2df6ea3fb0e30cb9d2f936bfc50d76389cee1c34907453f72bc3ec5ff3d0c7257d3724904d8761e8f4fbb1311804867f2702fd259592761306a9db2b84c0bdc9a21a76b239a262ee711a29cb3dbc57df55b84ec199444bb6a54757d", 0xf5}], 0x7, 0x0, 0x1, 0x2) 856.268075ms ago: executing program 1 (id=2122): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pause() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1e, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$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") getresgid(&(0x7f00000001c0), 0x0, &(0x7f0000000240)) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x11c}], 0x2, 0x0, 0x0) 843.441195ms ago: executing program 3 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 842.728615ms ago: executing program 2 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 836.279295ms ago: executing program 4 (id=2126): preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 763.870115ms ago: executing program 4 (id=2127): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xc76, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffc01, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0x100}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800}, 0x0, 0x800000000, 0x20000000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3dc38396}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa001c3a00fc020000000000000000000000000000ff0200000000000000000039d51bff759f5800000000018200907800000000fe00"/69], 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=0xd3) 763.344515ms ago: executing program 2 (id=2128): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000100000000000093020000000300000001000013010000000100000003000000da0b0000005f005f"], 0x0, 0x41, 0x0, 0x1, 0xfffffff1, 0x0, @void, @value}, 0x28) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x0, 0x0, 0xfffffef9, 0x0, 0x1, 0x5, 0x200000]}}, 0x5c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x0, 0xa}, {0xfff9, 0x2, 0x1, 0x9}, {0x0, 0x10, 0x9c, 0x8}, {0x1, 0xff, 0x7, 0x310f}, {0x0, 0x9, 0x3, 0x7}, {0x8, 0xb, 0x7, 0x5}, {0x8fe5, 0xff, 0x3, 0x5}, {0x5, 0x7, 0x9, 0xf}, {0xfe00, 0x0, 0x3, 0x5}, {0xe1c, 0x1, 0x6, 0x3}]}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/207, 0xcf}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/250, 0xfa}, {&(0x7f0000000480)=""/58, 0x3a}], 0x4, &(0x7f0000000740)}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)=""/107, 0x6b}, {&(0x7f0000000880)=""/84, 0x54}], 0x2, &(0x7f0000000940)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x10000, &(0x7f0000000a40)={0x0, 0x3938700}) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) 758.390895ms ago: executing program 2 (id=2129): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delchain={0x10c, 0x65, 0x810, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0xfff3}, {0x9, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "3ef0d4b56a591b96e2de9549acf69716"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "6b52189a28c7daca7d77a38fd64dcd41"}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x2}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x77}}, @filter_kind_options=@f_route={{0xa}, {0x64, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xffffffff}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x40000}, @TCA_ROUTE4_ACT={0x50, 0x6, [@m_tunnel_key={0x4c, 0x18, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x104c}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x600400c5}, 0x40001) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x448c4) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 720.760096ms ago: executing program 2 (id=2130): close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mount(0x0, 0x0, &(0x7f0000002000)='devtmpfs\x00', 0x8, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x144}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) 703.752256ms ago: executing program 2 (id=2131): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f00000003c0)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 661.635526ms ago: executing program 3 (id=2132): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100f54e22004d90"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x2040400) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00e5ff06000000010001000900004001000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) write$selinux_access(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 649.080516ms ago: executing program 2 (id=2133): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x13cb8df0c6158b4c, &(0x7f00000000c0)={@loopback, @remote, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@private0, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x9, 0x5, 0x24, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8, 0x1, 0xfffffff7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0xf801, 0x8019, 0x8, 0x7, {{0x9, 0x4, 0x0, 0x21, 0x24, 0x68, 0x0, 0x72, 0x2f, 0x0, @broadcast, @loopback, {[@generic={0x88, 0xd, "26fa015d4f9cef02baf5ec"}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@remote, @remote, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8, 0x8, 0x345, 0x3, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1f, 0xaa, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8217704e73d276f8}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x400c001}, 0x4004000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000700)={0xffffffffffffffff, 0x2, 0xf9, 0xb96d, @vifc_lcl_addr=@remote, @multicast2}, 0x10) getpid() getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000740)={'icmp6\x00'}, &(0x7f0000000780)=0x1e) r10 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x8000, 0x9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'ip6tnl0\x00', r2, 0x29, 0xb, 0x2, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x25}, @local, 0x0, 0x0, 0x6fc4, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xe}, [@ldst={0x1, 0x3, 0x0, 0x7, 0x5, 0x30, 0xfffffffffffffff7}]}, &(0x7f0000000840)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000880)=""/164, 0x41000, 0x1, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000a00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xb, 0x9, 0xfffff1ed}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r0], 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) r13 = openat$cgroup_ro(r0, &(0x7f0000000bc0)='cgroup.stat\x00', 0x0, 0x0) getpid() sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x19c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xb, 0x8, "77cb8e64245c1d"}, @NFTA_OBJ_USERDATA={0x9d, 0x8, "3273ee8aaa577590941e5786c1941bcbc66bcd08feb3c3ef808555d4463f367360504d0913f259dc0add2629881e1fa1e8f4db306c73fb0b81bbf7e72e19f4bc4531006ba27d1c317f30d13cd3599e84fefaff9323db4ce30f22bdb40a54570691ff097e1da49becedf8c703c187402232ed974ad637fa1ed5a950a41fb1e4617b7fa7a4850700a605ebc33eea58ffee698a0453c919313c5e"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb9, 0x8, "fcfbb6227b2b28e775fc434b0da8db4a33f33a1602a3cd14223789ffa64cdeff5ec6093d1714d1bf0be7ff105c61a77e4b896acb994dc1f8df6bae2a007e1414f881a812e636a50c7c808102bd083811be302c284059c0bf58c07c3b5160f62978eb81a4b22311f333de7a04267ee125eb13a884155ce4ad333954e56f71a0d87459351592ab637f9025686a1719c3d64c49d69c80f2dc7ee40f221297a883d5f7ebdfd9c395804c28c8e786a1a8445b269cd24bc8"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20010000}, 0x1c0) recvmsg(r12, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)=""/8, 0x8}, {&(0x7f0000000ec0)=""/135, 0x87}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/236, 0xec}, {&(0x7f0000002080)=""/142, 0x8e}, {&(0x7f0000002140)=""/44, 0x2c}, {&(0x7f0000002180)=""/195, 0xc3}, {&(0x7f0000002280)=""/22, 0x16}, {&(0x7f00000022c0)=""/148, 0x94}], 0x9, &(0x7f0000002440)=""/117, 0x75}, 0x2002) r14 = openat$cgroup_ro(r10, &(0x7f0000002500)='cpuset.effective_mems\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000002580)={0x6, &(0x7f0000002540)=[{0x0, 0x2, 0x5, 0xfffff936}, {0x6, 0x9, 0x5, 0xffffd45a}, {0x3c68, 0x4, 0x1, 0xffffff00}, {0x2, 0x9, 0x2, 0x2}, {0xfff8, 0x9, 0x7, 0xfffffffb}, {0x5, 0x1, 0x9, 0x4}]}) r15 = openat$incfs(r10, &(0x7f00000025c0)='.pending_reads\x00', 0x109900, 0x42) sendmsg$NL80211_CMD_UPDATE_FT_IES(r15, &(0x7f0000002980)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002940)={&(0x7f0000002640)={0x2e4, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x39}}}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x5c, 0x2a, [@preq={0x82, 0x25, {{0x1}, 0xd5, 0x83, 0x2, @device_a, 0x6, @void, 0xaa9f, 0x2, 0x1, [{{}, @broadcast, 0xe}]}}, @ssid={0x0, 0x18, @random="019d8e6b5810b60d5796c149edd1ec792600928b121b00a5"}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x81, 0x20}}, @cf={0x4, 0x6, {0xc, 0x8, 0x3, 0x794a}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x81}, @NL80211_ATTR_IE={0x2b, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x6, 0x60}}, @ibss={0x6, 0x2, 0xdc3}, @rann={0x7e, 0x15, {{0x0, 0x39}, 0x8, 0x5, @device_a, 0xd, 0x80000001, 0xa1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE={0x222, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @supported_rates={0x1, 0x1, [{0xc}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0x8c}, @random_vendor={0xdd, 0xa2, "c7d55b2d873e0e5ffd6aaaf48614e1c6d88cfe6e84834147f6e4d942067527db3e95b93f4419313940ab064657e1aed34b2a5de80fa497d15d2529a63b9426a151123dabe74d336820b42566f5ed2e05c9027af16184967f96576d4a8471e0cbbbd36e97c5c1a94dd35c3da478f5a65efda5d02788470ea8656cf200e4d74d94de6ee096556abd16e28b3fab1fccbd6f53c7efec3b74a922aa9aad42c284111e1dd6"}, @gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0x70, {0x1, 0x1, "564776d1ad20f4f511cefa78f8fcd2b7", "fe0d5721306f807c7ddba9f216d2a8d05fd159de9c34e6866080189b48977566", "8284d31b0ec093e383e6ae79e36c2287180a53441024e129b9e68f480a27496a", [{0x3, 0x1c, "8019f75dc33e447e20e74fbe3f1056916a9c4a9e935f15c200f24f64"}]}}, @cf={0x4, 0x6, {0x4, 0x3, 0x1b, 0x60ae}}, @random_vendor={0xdd, 0xe0, "2a6edc37fdd255708e23ffb6d2e7e0bf7b3cb5cb67c19edd61800cc217cc371db2c5ace0f898f9984b47824112be7c0abf84fd5934af1780b44fe480a1c38d5d2f613cc65cac6b6bd90b678174517cee17c8b7393401f074d34be60255469c03dec245e7cb04dcaea4bb48e9826a8a40a94f9b5d356d49db8b9d48e8ca250ac569c6fb2a99ec5ba28ed3b8ea45d09c21db0a243dfb77250af8029d2b139df070b6c319239d34efa6fafed00c84c201be05a12d06724ad1b205dd4b122346d91b79ddf4ba341995b6a11d3160de0303f70ed30811df64631eb231c69acafd9301"}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x44000000}, 0x8854) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c80)={0x6, 0x12, &(0x7f00000029c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @generic={0x6, 0x8, 0x8, 0x101, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002a80)='syzkaller\x00', 0xa072, 0x4f, &(0x7f0000002ac0)=""/79, 0x100, 0x18, '\x00', r3, 0x25, r0, 0x8, &(0x7f0000002b40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002b80)={0x0, 0xa, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002bc0)=[r13, 0xffffffffffffffff, r0], &(0x7f0000002c00)=[{0x3, 0x1, 0x1, 0x2}, {0x4, 0x3, 0x4, 0x1}, {0x5, 0x3, 0x7, 0x5}, {0x1, 0x5, 0x9, 0xc}, {0x1, 0x4, 0x0, 0xc}], 0x10, 0x3a, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80), 0x290, &(0x7f0000002dc0)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@cache_readahead}, {@version_L}, {@debug={'debug', 0x3d, 0x7edc}}], [{@context={'context', 0x3d, 'user_u'}}, {@appraise}, {@hash}, {@subj_user={'subj_user', 0x3d, 'veth0_to_team\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ':.\'-/'}}, {@hash}, {@subj_type={'subj_type', 0x3d, ','}}, {@subj_user={'subj_user', 0x3d, 'bond0\x00'}}, {@measure}]}}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r16, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 411.998768ms ago: executing program 5 (id=2137): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x5d68f0f0}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x656}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 380.285578ms ago: executing program 5 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 326.428108ms ago: executing program 5 (id=2139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x80000001, 0x8040) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0xff, 0x30}, &(0x7f00000002c0)=0xc) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x4) 325.902478ms ago: executing program 5 (id=2140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)) (async) r3 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) (async) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x25, 0x24, 0xf, 0x10, 0x4, 0x3, 0x1, 0x115}}) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000800)=""/215, 0xd7}]}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r7, &(0x7f0000001540)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x80) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b36ad27c5f880a47d6eef95c55e5fb6f7"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000009c0)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 296.471058ms ago: executing program 5 (id=2141): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) 278.465168ms ago: executing program 5 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000180100002020642500000000002020207b1af8ff00000000bf0200000000000007010000f8ffffffb702000008000000b7030000d1fed92e850000000600000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1b1201ab92a0a1cba721683439bd62c14bcc090dcbab36f811663a3b6063c1b0082b687d609292642831987091f777311650ce6c616864be6eda0bf70399de8efd848bc2d37a5c6a83131ae57dbe741084bd0a5afdde52e08e7cc0b678690572ad56f26057149a156fa3178952872e70a042ce47c1", 0x75, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, 0xee00) keyctl$setperm(0x5, r5, 0x21081c22) keyctl$get_security(0x11, r5, 0x0, 0x0) keyctl$instantiate(0xc, r4, 0x0, 0x0, r5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) eventfd2(0x0, 0x0) 144.706619ms ago: executing program 3 (id=2143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 60.60511ms ago: executing program 3 (id=2144): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 0s ago: executing program 1 (id=2145): close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) mount(0x0, 0x0, &(0x7f0000002000)='devtmpfs\x00', 0x8, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[], 0x144}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) kernel console output (not intermixed with test programs): 111.302660][ T7929] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 111.302678][ T7929] __alloc_skb+0x10b/0x310 [ 111.302693][ T7929] inet_ifmcaddr_notify+0x53/0x330 [ 111.302791][ T7929] ? __igmp_group_dropped+0x123/0x460 [ 111.302814][ T7929] __ip_mc_dec_group+0x1b2/0x3d0 [ 111.302838][ T7929] ip_mc_down+0x140/0x1c0 [ 111.302926][ T7929] inetdev_event+0x1a7/0xc60 [ 111.302944][ T7929] ? ib_netdevice_event+0x212/0x350 [ 111.302965][ T7929] ? __pfx_inetdev_event+0x10/0x10 [ 111.302984][ T7929] raw_notifier_call_chain+0x6f/0x1d0 [ 111.303070][ T7929] call_netdevice_notifiers_info+0xae/0x100 [ 111.303093][ T7929] dev_close_many+0x174/0x240 [ 111.303121][ T7929] unregister_netdevice_many_notify+0x263/0x1280 [ 111.303156][ T7929] ? mif6_delete+0x3a2/0x430 [ 111.303174][ T7929] unregister_netdevice_many+0x19/0x20 [ 111.303192][ T7929] mroute_clean_tables+0x168/0x620 [ 111.303236][ T7929] ? _copy_from_user+0x89/0xa0 [ 111.303251][ T7929] ip6_mroute_setsockopt+0x8cf/0xa60 [ 111.303271][ T7929] do_ipv6_setsockopt+0x34c/0x2250 [ 111.303295][ T7929] ? __rcu_read_unlock+0x4e/0x70 [ 111.303312][ T7929] ? avc_has_perm_noaudit+0x1cc/0x210 [ 111.303371][ T7929] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 111.303394][ T7929] ipv6_setsockopt+0x57/0x130 [ 111.303416][ T7929] rawv6_setsockopt+0x21e/0x410 [ 111.303480][ T7929] sock_common_setsockopt+0x64/0x80 [ 111.303503][ T7929] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 111.303527][ T7929] __sys_setsockopt+0x187/0x200 [ 111.303545][ T7929] __x64_sys_setsockopt+0x66/0x80 [ 111.303568][ T7929] x64_sys_call+0x282e/0x2dc0 [ 111.303607][ T7929] do_syscall_64+0xc9/0x1c0 [ 111.303629][ T7929] ? clear_bhb_loop+0x55/0xb0 [ 111.303649][ T7929] ? clear_bhb_loop+0x55/0xb0 [ 111.303717][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.303786][ T7929] RIP: 0033:0x7f552b12d169 [ 111.303798][ T7929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.303813][ T7929] RSP: 002b:00007f5529797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.303827][ T7929] RAX: ffffffffffffffda RBX: 00007f552b345fa0 RCX: 00007f552b12d169 [ 111.303851][ T7929] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000009 [ 111.303860][ T7929] RBP: 00007f5529797090 R08: 0000000000000004 R09: 0000000000000000 [ 111.303869][ T7929] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 111.303878][ T7929] R13: 0000000000000000 R14: 00007f552b345fa0 R15: 00007ffe83a06498 [ 111.303891][ T7929] [ 111.311590][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.636495][ T7573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.672899][ T7937] loop1: detected capacity change from 0 to 2048 [ 111.686294][ T7941] ALSA: seq fatal error: cannot create timer (-22) [ 111.738716][ T7937] loop1: p1 < > p4 [ 111.745779][ T7949] loop2: detected capacity change from 0 to 1024 [ 111.756966][ T7937] loop1: p4 size 8388608 extends beyond EOD, truncated [ 111.790931][ T7949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.890170][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 111.907268][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.928041][ T7975] loop1: detected capacity change from 0 to 512 [ 111.938060][ T7975] EXT4-fs: Ignoring removed orlov option [ 111.958664][ T7975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.977833][ T7975] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1472: casefold flag without casefold feature [ 111.991192][ T7975] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1472: couldn't read orphan inode 15 (err -117) [ 112.032450][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.119244][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.129147][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.682864][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.780560][ T8013] loop1: detected capacity change from 0 to 512 [ 112.803779][ T8014] loop5: detected capacity change from 0 to 2048 [ 112.806467][ T8013] EXT4-fs: Ignoring removed nobh option [ 112.824968][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 112.837837][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.851126][ T8013] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 112.861439][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 112.861453][ T29] audit: type=1400 audit(1741350349.735:2074): avc: denied { read write } for pid=8018 comm="syz.4.1484" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.875652][ T8014] loop5: p1 < > p4 [ 112.891302][ T29] audit: type=1400 audit(1741350349.735:2075): avc: denied { open } for pid=8018 comm="syz.4.1484" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.918687][ T29] audit: type=1400 audit(1741350349.735:2076): avc: denied { ioctl } for pid=8018 comm="syz.4.1484" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.943810][ T8013] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1481: invalid indirect mapped block 2683928664 (level 1) [ 112.943840][ T29] audit: type=1400 audit(1741350349.735:2077): avc: denied { write } for pid=8018 comm="syz.4.1484" name="udp6" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.987565][ T8014] loop5: p4 size 8388608 extends beyond EOD, truncated [ 113.006736][ T29] audit: type=1326 audit(1741350349.875:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896bc4d169 code=0x7ffc0000 [ 113.006764][ T29] audit: type=1326 audit(1741350349.885:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f896bc4bad0 code=0x7ffc0000 [ 113.006965][ T8013] EXT4-fs (loop1): 1 truncate cleaned up [ 113.035075][ T8013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.059556][ T8033] SELinux: policydb magic number 0xe70002a3 does not match expected magic number 0xf97cff8c [ 113.059787][ T8033] SELinux: failed to load policy [ 113.083200][ C1] sd 0:0:1:0: [sda] tag#3919 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 113.083245][ C1] sd 0:0:1:0: [sda] tag#3919 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 113.086754][ T8013] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #2: block 13: comm syz.1.1481: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 113.096132][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.096711][ T2999] loop5: p1 < > p4 [ 113.097260][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 113.144589][ T8038] loop2: detected capacity change from 0 to 512 [ 113.145069][ T8038] EXT4-fs: Ignoring removed orlov option [ 113.150364][ T8038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.162441][ T8038] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1489: casefold flag without casefold feature [ 113.162513][ T8038] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1489: couldn't read orphan inode 15 (err -117) [ 113.162877][ T8038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.164079][ T29] audit: type=1326 audit(1741350350.035:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896bc4d169 code=0x7ffc0000 [ 113.165054][ T29] audit: type=1326 audit(1741350350.035:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896bc4d169 code=0x7ffc0000 [ 113.165123][ T29] audit: type=1326 audit(1741350350.035:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896bc4d169 code=0x7ffc0000 [ 113.166519][ T29] audit: type=1326 audit(1741350350.045:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f896bc4d169 code=0x7ffc0000 [ 113.219479][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.219532][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.285512][ T8050] Â: renamed from pim6reg1 [ 113.291907][ T8050] ALSA: seq fatal error: cannot create timer (-22) [ 113.375094][ T8053] SELinux: Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped). [ 113.440982][ T8057] loop1: detected capacity change from 0 to 1024 [ 113.822736][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.832747][ T8053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8053 comm=syz.1.1493 [ 113.898094][ T8072] SELinux: policydb magic number 0xe70002a3 does not match expected magic number 0xf97cff8c [ 113.910013][ T8063] loop4: detected capacity change from 0 to 512 [ 113.914348][ T8072] SELinux: failed to load policy [ 113.935680][ T8074] loop5: detected capacity change from 0 to 2048 [ 113.944200][ T8063] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 113.966654][ T8074] loop5: p1 < > p4 [ 113.971190][ T8074] loop5: p4 size 8388608 extends beyond EOD, truncated [ 114.013300][ T2999] loop5: p1 < > p4 [ 114.018693][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 114.077625][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 114.078754][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 114.102707][ T8087] loop5: detected capacity change from 0 to 1024 [ 114.139971][ T8085] loop3: detected capacity change from 0 to 2048 [ 114.190127][ T8095] FAULT_INJECTION: forcing a failure. [ 114.190127][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 114.203048][ T8095] CPU: 1 UID: 0 PID: 8095 Comm: syz.2.1510 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 114.203077][ T8095] Tainted: [W]=WARN [ 114.203084][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.203109][ T8095] Call Trace: [ 114.203114][ T8095] [ 114.203121][ T8095] dump_stack_lvl+0xf2/0x150 [ 114.203153][ T8095] dump_stack+0x15/0x1a [ 114.203173][ T8095] should_fail_ex+0x24a/0x260 [ 114.203207][ T8095] should_failslab+0x8f/0xb0 [ 114.203232][ T8095] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 114.203295][ T8095] ? sidtab_sid2str_get+0xb8/0x140 [ 114.203324][ T8095] kmemdup_noprof+0x2b/0x70 [ 114.203350][ T8095] sidtab_sid2str_get+0xb8/0x140 [ 114.203449][ T8095] security_sid_to_context_core+0x1eb/0x2f0 [ 114.203477][ T8095] security_sid_to_context+0x27/0x30 [ 114.203502][ T8095] avc_audit_post_callback+0x10d/0x530 [ 114.203585][ T8095] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 114.203617][ T8095] common_lsm_audit+0x90e/0x10c0 [ 114.203640][ T8095] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 114.203725][ T8095] slow_avc_audit+0xf9/0x140 [ 114.203757][ T8095] avc_has_perm+0x129/0x160 [ 114.203792][ T8095] selinux_socket_accept+0x18c/0x2c0 [ 114.203818][ T8095] security_socket_accept+0x3d/0x80 [ 114.203839][ T8095] do_accept+0x22a/0x390 [ 114.203862][ T8095] __sys_accept4+0xc3/0x150 [ 114.203881][ T8095] __x64_sys_accept4+0x53/0x60 [ 114.203914][ T8095] x64_sys_call+0x2824/0x2dc0 [ 114.204015][ T8095] do_syscall_64+0xc9/0x1c0 [ 114.204043][ T8095] ? clear_bhb_loop+0x55/0xb0 [ 114.204068][ T8095] ? clear_bhb_loop+0x55/0xb0 [ 114.204151][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.204176][ T8095] RIP: 0033:0x7fc8e658d169 [ 114.204190][ T8095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.204208][ T8095] RSP: 002b:00007fc8e4bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 114.204227][ T8095] RAX: ffffffffffffffda RBX: 00007fc8e67a5fa0 RCX: 00007fc8e658d169 [ 114.204239][ T8095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 114.204250][ T8095] RBP: 00007fc8e4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.204319][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.204331][ T8095] R13: 0000000000000000 R14: 00007fc8e67a5fa0 R15: 00007ffce790e058 [ 114.204348][ T8095] [ 114.206239][ T8087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.347404][ T8085] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1506'. [ 114.470120][ T8085] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1506'. [ 114.479277][ T8085] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1506'. [ 114.496400][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 114.536601][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1507'. [ 114.556411][ T8087] team0 (unregistering): Port device team_slave_0 removed [ 114.571575][ T8087] team0 (unregistering): Port device team_slave_1 removed [ 114.718314][ T8119] loop2: detected capacity change from 0 to 2048 [ 114.765858][ T8119] loop2: p1 < > p4 [ 114.770496][ T8119] loop2: p4 size 8388608 extends beyond EOD, truncated [ 114.836443][ T8132] loop3: detected capacity change from 0 to 2048 [ 114.901818][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 114.913460][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 114.916514][ T8132] loop3: p1 < > p4 [ 114.946963][ T8132] loop3: p4 size 8388608 extends beyond EOD, truncated [ 114.979685][ T2999] loop3: p1 < > p4 [ 114.994461][ T2999] loop3: p4 size 8388608 extends beyond EOD, truncated [ 115.029718][ T8146] ALSA: seq fatal error: cannot create timer (-22) [ 115.033900][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 115.050378][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.061330][ T7573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.090498][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 115.105247][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.248226][ T8164] loop2: detected capacity change from 0 to 128 [ 115.264037][ T8166] loop5: detected capacity change from 0 to 2048 [ 115.296900][ T8166] loop5: p1 < > p4 [ 115.301489][ T8166] loop5: p4 size 8388608 extends beyond EOD, truncated [ 115.314948][ T2999] loop5: p1 < > p4 [ 115.321843][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 115.386861][ T8176] ALSA: seq fatal error: cannot create timer (-22) [ 115.392119][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 115.394807][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 115.433115][ T3290] printk: udevd: 1 output lines suppressed due to ratelimiting [ 115.624195][ T8202] loop4: detected capacity change from 0 to 2048 [ 115.706664][ T8202] loop4: p1 < > p4 [ 115.711130][ T8202] loop4: p4 size 8388608 extends beyond EOD, truncated [ 116.128359][ T8230] loop2: detected capacity change from 0 to 1024 [ 116.149012][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.168229][ T8230] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 116.191127][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.632939][ T8241] loop2: detected capacity change from 0 to 2048 [ 116.679702][ T8243] loop1: detected capacity change from 0 to 2048 [ 116.686938][ T8241] loop2: p1 < > p4 [ 116.697773][ T8241] loop2: p4 size 8388608 extends beyond EOD, truncated [ 116.727270][ T8243] loop1: p1 < > p4 [ 116.734351][ T8243] loop1: p4 size 8388608 extends beyond EOD, truncated [ 116.754133][ T8251] syzkaller1: entered promiscuous mode [ 116.759925][ T8251] syzkaller1: entered allmulticast mode [ 116.816532][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1568'. [ 116.853628][ T8265] loop3: detected capacity change from 0 to 512 [ 116.860359][ T8265] EXT4-fs: Ignoring removed oldalloc option [ 116.896381][ T8265] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1567: Parent and EA inode have the same ino 15 [ 116.919705][ T8265] EXT4-fs (loop3): 1 orphan inode deleted [ 117.015264][ T8276] loop4: detected capacity change from 0 to 2048 [ 117.127469][ T8292] loop1: detected capacity change from 0 to 2048 [ 117.166274][ T8292] loop1: p1 < > p4 [ 117.170483][ T8292] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.215268][ T8297] loop1: detected capacity change from 0 to 2048 [ 117.240477][ T8299] loop2: detected capacity change from 0 to 128 [ 117.247613][ T8297] loop1: p1 < > p4 [ 117.252033][ T8297] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.302242][ T8301] loop1: detected capacity change from 0 to 2048 [ 117.347034][ T8301] loop1: p1 < > p4 [ 117.351423][ T8301] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.390777][ T8305] syzkaller1: entered promiscuous mode [ 117.396292][ T8305] syzkaller1: entered allmulticast mode [ 117.501063][ T8311] loop1: detected capacity change from 0 to 2048 [ 117.557001][ T8311] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1582'. [ 117.567936][ T8311] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1582'. [ 117.577113][ T8311] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1582'. [ 117.620645][ T8313] loop1: detected capacity change from 0 to 2048 [ 117.689124][ T8322] loop3: detected capacity change from 0 to 512 [ 117.695944][ T8322] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 117.703851][ T8313] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1583'. [ 117.704116][ T8313] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1583'. [ 117.722177][ T8313] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1583'. [ 117.747536][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'. [ 117.781264][ T8326] ALSA: seq fatal error: cannot create timer (-22) [ 117.820420][ T8332] syzkaller1: entered promiscuous mode [ 117.826166][ T8332] syzkaller1: entered allmulticast mode [ 117.850318][ T8336] syzkaller1: entered promiscuous mode [ 117.850508][ T8339] loop4: detected capacity change from 0 to 2048 [ 117.855835][ T8336] syzkaller1: entered allmulticast mode [ 117.883581][ T8341] loop5: detected capacity change from 0 to 512 [ 117.890363][ T8341] EXT4-fs: Ignoring removed nobh option [ 117.897572][ T8341] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 117.905794][ T8341] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1595: invalid indirect mapped block 2683928664 (level 1) [ 117.921026][ T8341] EXT4-fs (loop5): 1 truncate cleaned up [ 117.930092][ T8339] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1594'. [ 117.940342][ T8339] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1594'. [ 117.951750][ T8341] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1595: Invalid block bitmap block 3 in block_group 0 [ 118.006235][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 118.006291][ T29] audit: type=1326 audit(1741350354.875:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8349 comm="syz.5.1598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c9840d169 code=0x0 [ 118.150223][ T8367] Â: renamed from pim6reg1 [ 118.160235][ T8367] ALSA: seq fatal error: cannot create timer (-22) [ 118.189008][ T8369] loop3: detected capacity change from 0 to 2048 [ 118.225249][ T8378] syzkaller1: entered promiscuous mode [ 118.230878][ T8378] syzkaller1: entered allmulticast mode [ 118.268695][ T29] audit: type=1326 audit(1741350355.145:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.291799][ T29] audit: type=1326 audit(1741350355.145:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9c421bad0 code=0x7ffc0000 [ 118.315921][ T29] audit: type=1326 audit(1741350355.145:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9c421bad0 code=0x7ffc0000 [ 118.338889][ T29] audit: type=1326 audit(1741350355.145:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.361863][ T29] audit: type=1326 audit(1741350355.145:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.385143][ T29] audit: type=1326 audit(1741350355.145:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.408051][ T29] audit: type=1326 audit(1741350355.145:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.430962][ T29] audit: type=1326 audit(1741350355.145:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.453920][ T29] audit: type=1326 audit(1741350355.145:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ff9c421d169 code=0x7ffc0000 [ 118.534371][ T8389] loop2: detected capacity change from 0 to 512 [ 118.541885][ T8389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.551124][ T8397] FAULT_INJECTION: forcing a failure. [ 118.551124][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.558337][ T8389] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.564256][ T8397] CPU: 1 UID: 0 PID: 8397 Comm: syz.1.1614 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 118.564331][ T8397] Tainted: [W]=WARN [ 118.564338][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.564348][ T8397] Call Trace: [ 118.564355][ T8397] [ 118.564362][ T8397] dump_stack_lvl+0xf2/0x150 [ 118.564388][ T8397] dump_stack+0x15/0x1a [ 118.564406][ T8397] should_fail_ex+0x24a/0x260 [ 118.564444][ T8397] should_fail+0xb/0x10 [ 118.564467][ T8397] should_fail_usercopy+0x1a/0x20 [ 118.564493][ T8397] _copy_to_user+0x20/0xa0 [ 118.564511][ T8397] rng_dev_read+0x3e8/0x700 [ 118.564589][ T8397] vfs_readv+0x3e2/0x660 [ 118.564607][ T8397] ? __pfx_rng_dev_read+0x10/0x10 [ 118.564709][ T8397] __x64_sys_preadv+0xf4/0x1c0 [ 118.564805][ T8397] x64_sys_call+0x2680/0x2dc0 [ 118.564864][ T8397] do_syscall_64+0xc9/0x1c0 [ 118.564890][ T8397] ? clear_bhb_loop+0x55/0xb0 [ 118.564913][ T8397] ? clear_bhb_loop+0x55/0xb0 [ 118.564938][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.564961][ T8397] RIP: 0033:0x7ff9c421d169 [ 118.564976][ T8397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.564992][ T8397] RSP: 002b:00007ff9c2887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 118.565006][ T8397] RAX: ffffffffffffffda RBX: 00007ff9c4435fa0 RCX: 00007ff9c421d169 [ 118.565017][ T8397] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000003 [ 118.565026][ T8397] RBP: 00007ff9c2887090 R08: 0000000000000000 R09: 0000000000000000 [ 118.565069][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.565080][ T8397] R13: 0000000000000000 R14: 00007ff9c4435fa0 R15: 00007fff3197ff88 [ 118.565142][ T8397] [ 118.713534][ T8400] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 118.861081][ T8408] loop5: detected capacity change from 0 to 2048 [ 118.898572][ T8410] Â: renamed from pim6reg1 [ 118.905393][ T8410] ALSA: seq fatal error: cannot create timer (-22) [ 118.908851][ T8408] loop5: p1 < > p4 [ 118.917710][ T8408] loop5: p4 size 8388608 extends beyond EOD, truncated [ 118.964411][ T8412] Â: renamed from pim6reg1 [ 118.971502][ T8412] ALSA: seq fatal error: cannot create timer (-22) [ 118.999603][ T8420] syzkaller1: entered promiscuous mode [ 119.005190][ T8420] syzkaller1: entered allmulticast mode [ 119.040860][ T8426] syzkaller1: entered promiscuous mode [ 119.046415][ T8426] syzkaller1: entered allmulticast mode [ 119.080285][ T8428] loop3: detected capacity change from 0 to 512 [ 119.088710][ T8428] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 119.097672][ T8428] EXT4-fs (loop3): failed to open journal device unknown-block(8,105) -6 [ 119.124164][ T8432] loop3: detected capacity change from 0 to 128 [ 119.235251][ T8436] loop5: detected capacity change from 0 to 2048 [ 119.390432][ T8448] Â: renamed from pim6reg1 [ 119.398197][ T8448] ALSA: seq fatal error: cannot create timer (-22) [ 119.474662][ T8450] loop1: detected capacity change from 0 to 2048 [ 119.506364][ T8450] loop1: p1 < > p4 [ 119.510822][ T8450] loop1: p4 size 8388608 extends beyond EOD, truncated [ 119.572317][ T8460] syzkaller1: entered promiscuous mode [ 119.577953][ T8460] syzkaller1: entered allmulticast mode [ 119.643311][ T8464] loop2: detected capacity change from 0 to 512 [ 119.651022][ T8464] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 119.661266][ T8464] EXT4-fs (loop2): failed to open journal device unknown-block(8,105) -6 [ 119.692556][ T8467] loop3: detected capacity change from 0 to 2048 [ 119.702153][ T8465] loop1: detected capacity change from 0 to 128 [ 119.744500][ T8471] tipc: Can't bind to reserved service type 0 [ 119.761035][ T8467] loop3: p1 < > p4 [ 119.766117][ T8467] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.819660][ T8475] loop1: detected capacity change from 0 to 512 [ 119.838824][ T8475] EXT4-fs: Ignoring removed nobh option [ 119.848847][ T8475] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 119.874518][ T8475] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1645: invalid indirect mapped block 2683928664 (level 1) [ 119.909111][ T8481] Â: renamed from pim6reg1 [ 119.915664][ T8475] EXT4-fs (loop1): 1 truncate cleaned up [ 119.922607][ T8481] ALSA: seq fatal error: cannot create timer (-22) [ 119.939778][ C1] sd 0:0:1:0: [sda] tag#3944 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 119.950236][ C1] sd 0:0:1:0: [sda] tag#3944 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 119.959491][ T8483] loop2: detected capacity change from 0 to 2048 [ 119.966214][ T8475] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #2: block 13: comm syz.1.1645: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 120.007449][ T8483] loop2: p1 < > p4 [ 120.014737][ T8483] loop2: p4 size 8388608 extends beyond EOD, truncated [ 120.028346][ T8489] bond1: entered promiscuous mode [ 120.033414][ T8489] bond1: entered allmulticast mode [ 120.039203][ T8489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.061080][ T8492] FAULT_INJECTION: forcing a failure. [ 120.061080][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 120.073881][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: \ Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 120.073906][ T8492] Tainted: [W]=WARN [ 120.073911][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.073920][ T8492] Call Trace: [ 120.073927][ T8492] [ 120.073933][ T8492] dump_stack_lvl+0xf2/0x150 [ 120.074004][ T8492] dump_stack+0x15/0x1a [ 120.074023][ T8492] should_fail_ex+0x24a/0x260 [ 120.074078][ T8492] should_failslab+0x8f/0xb0 [ 120.074101][ T8492] __kmalloc_noprof+0xab/0x3f0 [ 120.074165][ T8492] ? sock_kmalloc+0x83/0xc0 [ 120.074262][ T8492] sock_kmalloc+0x83/0xc0 [ 120.074282][ T8492] ____sys_sendmsg+0x127/0x4b0 [ 120.074450][ T8492] __sys_sendmsg+0x19d/0x230 [ 120.074496][ T8492] __x64_sys_sendmsg+0x46/0x50 [ 120.074516][ T8492] x64_sys_call+0x2734/0x2dc0 [ 120.074598][ T8492] do_syscall_64+0xc9/0x1c0 [ 120.074624][ T8492] ? clear_bhb_loop+0x55/0xb0 [ 120.074666][ T8492] ? clear_bhb_loop+0x55/0xb0 [ 120.074706][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.074758][ T8492] RIP: 0033:0x7f896bc4d169 [ 120.074771][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.074786][ T8492] RSP: 002b:00007f896a2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.074801][ T8492] RAX: ffffffffffffffda RBX: 00007f896be65fa0 RCX: 00007f896bc4d169 [ 120.074813][ T8492] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005 [ 120.074884][ T8492] RBP: 00007f896a2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.074895][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.074905][ T8492] R13: 0000000000000000 R14: 00007f896be65fa0 R15: 00007fff592b4f18 [ 120.074919][ T8492] [ 120.267115][ T8498] loop3: detected capacity change from 0 to 2048 [ 120.340716][ T8510] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1536) [ 120.350442][ T8510] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 120.411745][ T8520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8520 comm=syz.2.1662 [ 120.452190][ T8522] loop4: detected capacity change from 0 to 2048 [ 120.519146][ T8533] ALSA: seq fatal error: cannot create timer (-22) [ 120.529221][ T8535] loop5: detected capacity change from 0 to 512 [ 120.542419][ T8535] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 120.554301][ T8535] EXT4-fs (loop5): failed to open journal device unknown-block(8,105) -6 [ 120.582102][ T8537] FAULT_INJECTION: forcing a failure. [ 120.582102][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.595318][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.5.1667 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 120.595391][ T8537] Tainted: [W]=WARN [ 120.595398][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.595409][ T8537] Call Trace: [ 120.595415][ T8537] [ 120.595423][ T8537] dump_stack_lvl+0xf2/0x150 [ 120.595514][ T8537] dump_stack+0x15/0x1a [ 120.595533][ T8537] should_fail_ex+0x24a/0x260 [ 120.595558][ T8537] should_fail+0xb/0x10 [ 120.595581][ T8537] should_fail_usercopy+0x1a/0x20 [ 120.595631][ T8537] _copy_to_user+0x20/0xa0 [ 120.595726][ T8537] simple_read_from_buffer+0xa0/0x110 [ 120.595750][ T8537] proc_fail_nth_read+0xf9/0x140 [ 120.595796][ T8537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.595823][ T8537] vfs_read+0x19b/0x6f0 [ 120.595919][ T8537] ? _copy_to_user+0x7c/0xa0 [ 120.595936][ T8537] ? __rcu_read_unlock+0x4e/0x70 [ 120.595957][ T8537] ? __fget_files+0x17c/0x1c0 [ 120.595986][ T8537] ksys_read+0xe8/0x1b0 [ 120.596087][ T8537] __x64_sys_read+0x42/0x50 [ 120.596110][ T8537] x64_sys_call+0x2874/0x2dc0 [ 120.596134][ T8537] do_syscall_64+0xc9/0x1c0 [ 120.596159][ T8537] ? clear_bhb_loop+0x55/0xb0 [ 120.596251][ T8537] ? clear_bhb_loop+0x55/0xb0 [ 120.596273][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.596372][ T8537] RIP: 0033:0x7f5c9840bb7c [ 120.596385][ T8537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.596450][ T8537] RSP: 002b:00007f5c96a77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.596468][ T8537] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5c9840bb7c [ 120.596481][ T8537] RDX: 000000000000000f RSI: 00007f5c96a770a0 RDI: 0000000000000004 [ 120.596492][ T8537] RBP: 00007f5c96a77090 R08: 0000000000000000 R09: 00007f5c96a77090 [ 120.596504][ T8537] R10: 0000000000001e1e R11: 0000000000000246 R12: 0000000000000001 [ 120.596516][ T8537] R13: 0000000000000000 R14: 00007f5c98625fa0 R15: 00007ffefba41058 [ 120.596587][ T8537] [ 120.849974][ T8541] loop5: detected capacity change from 0 to 4096 [ 120.884175][ T8546] ALSA: seq fatal error: cannot create timer (-22) [ 120.896802][ T8541] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.907962][ T8548] FAULT_INJECTION: forcing a failure. [ 120.907962][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 120.914007][ T8541] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1668: corrupted in-inode xattr: e_value size too large [ 120.920695][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: +}[@ Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 120.920726][ T8548] Tainted: [W]=WARN [ 120.920733][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.920744][ T8548] Call Trace: [ 120.920782][ T8548] [ 120.920789][ T8548] dump_stack_lvl+0xf2/0x150 [ 120.920814][ T8548] dump_stack+0x15/0x1a [ 120.920903][ T8548] should_fail_ex+0x24a/0x260 [ 120.920929][ T8548] ? rtnl_newlink+0x5d/0x1250 [ 120.920951][ T8548] should_failslab+0x8f/0xb0 [ 120.920977][ T8548] __kmalloc_cache_noprof+0x4e/0x320 [ 120.921012][ T8548] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.921034][ T8548] rtnl_newlink+0x5d/0x1250 [ 120.921056][ T8548] ? free_frozen_page_commit+0x67/0x270 [ 120.921082][ T8548] ? x86_call_depth_emit_accounting+0xe1/0x2e0 [ 120.921145][ T8548] ? xas_load+0x3ae/0x3d0 [ 120.921170][ T8548] ? xas_load+0x3ae/0x3d0 [ 120.921193][ T8548] ? __rcu_read_unlock+0x4e/0x70 [ 120.921214][ T8548] ? xa_load+0xb9/0xe0 [ 120.921240][ T8548] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 120.921287][ T8548] ? mod_objcg_state+0x2ea/0x4f0 [ 120.921368][ T8548] ? __rcu_read_unlock+0x4e/0x70 [ 120.921388][ T8548] ? avc_has_perm_noaudit+0x1cc/0x210 [ 120.921407][ T8548] ? selinux_capable+0x1f2/0x260 [ 120.921499][ T8548] ? security_capable+0x81/0x90 [ 120.921526][ T8548] ? ns_capable+0x7d/0xb0 [ 120.921548][ T8548] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.921630][ T8548] rtnetlink_rcv_msg+0x651/0x710 [ 120.921658][ T8548] ? ref_tracker_free+0x3a5/0x410 [ 120.921686][ T8548] netlink_rcv_skb+0x12c/0x230 [ 120.921783][ T8548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.921887][ T8548] rtnetlink_rcv+0x1c/0x30 [ 120.921911][ T8548] netlink_unicast+0x599/0x670 [ 120.921937][ T8548] netlink_sendmsg+0x5cc/0x6e0 [ 120.921967][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.921993][ T8548] __sock_sendmsg+0x140/0x180 [ 120.922094][ T8548] ____sys_sendmsg+0x326/0x4b0 [ 120.922119][ T8548] __sys_sendmsg+0x19d/0x230 [ 120.922151][ T8548] __x64_sys_sendmsg+0x46/0x50 [ 120.922252][ T8548] x64_sys_call+0x2734/0x2dc0 [ 120.922275][ T8548] do_syscall_64+0xc9/0x1c0 [ 120.922301][ T8548] ? clear_bhb_loop+0x55/0xb0 [ 120.922324][ T8548] ? clear_bhb_loop+0x55/0xb0 [ 120.922427][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.922450][ T8548] RIP: 0033:0x7ff9c421d169 [ 120.922529][ T8548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.922547][ T8548] RSP: 002b:00007ff9c2887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.922564][ T8548] RAX: ffffffffffffffda RBX: 00007ff9c4435fa0 RCX: 00007ff9c421d169 [ 120.922575][ T8548] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000005 [ 120.922586][ T8548] RBP: 00007ff9c2887090 R08: 0000000000000000 R09: 0000000000000000 [ 120.922605][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.922616][ T8548] R13: 0000000000000000 R14: 00007ff9c4435fa0 R15: 00007fff3197ff88 [ 120.922632][ T8548] [ 121.010126][ T8557] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 121.155308][ T8553] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1668: corrupted in-inode xattr: e_value size too large [ 121.231312][ T8477] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 121.344224][ T8582] Â: renamed from pim6reg1 [ 121.448919][ T8599] 9pnet_fd: Insufficient options for proto=fd [ 121.462612][ T8601] bond0: (slave bond_slave_1): Releasing backup interface [ 121.482445][ T8602] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 121.830449][ T8617] loop4: detected capacity change from 0 to 2048 [ 121.843443][ T8622] __nla_validate_parse: 13 callbacks suppressed [ 121.843458][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1690'. [ 121.883799][ T8627] ALSA: seq fatal error: cannot create timer (-22) [ 121.895567][ T8629] loop3: detected capacity change from 0 to 512 [ 121.918061][ T8629] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 121.929404][ T8629] EXT4-fs (loop3): failed to open journal device unknown-block(8,105) -6 [ 122.006486][ T8653] FAULT_INJECTION: forcing a failure. [ 122.006486][ T8653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.019871][ T8653] CPU: 0 UID: 0 PID: 8653 Comm: syz.5.1694 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 122.019903][ T8653] Tainted: [W]=WARN [ 122.019909][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.019921][ T8653] Call Trace: [ 122.019926][ T8653] [ 122.019932][ T8653] dump_stack_lvl+0xf2/0x150 [ 122.020049][ T8653] dump_stack+0x15/0x1a [ 122.020066][ T8653] should_fail_ex+0x24a/0x260 [ 122.020233][ T8653] should_fail+0xb/0x10 [ 122.020254][ T8653] should_fail_usercopy+0x1a/0x20 [ 122.020278][ T8653] _copy_to_user+0x20/0xa0 [ 122.020296][ T8653] simple_read_from_buffer+0xa0/0x110 [ 122.020322][ T8653] proc_fail_nth_read+0xf9/0x140 [ 122.020385][ T8653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.020411][ T8653] vfs_read+0x19b/0x6f0 [ 122.020433][ T8653] ? __rcu_read_unlock+0x4e/0x70 [ 122.020455][ T8653] ? __fget_files+0x17c/0x1c0 [ 122.020563][ T8653] ksys_read+0xe8/0x1b0 [ 122.020621][ T8653] __x64_sys_read+0x42/0x50 [ 122.020640][ T8653] x64_sys_call+0x2874/0x2dc0 [ 122.020660][ T8653] do_syscall_64+0xc9/0x1c0 [ 122.020685][ T8653] ? clear_bhb_loop+0x55/0xb0 [ 122.020706][ T8653] ? clear_bhb_loop+0x55/0xb0 [ 122.020784][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.020804][ T8653] RIP: 0033:0x7f5c9840bb7c [ 122.020899][ T8653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.020915][ T8653] RSP: 002b:00007f5c96a77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.020930][ T8653] RAX: ffffffffffffffda RBX: 00007f5c98625fa0 RCX: 00007f5c9840bb7c [ 122.020940][ T8653] RDX: 000000000000000f RSI: 00007f5c96a770a0 RDI: 0000000000000008 [ 122.020950][ T8653] RBP: 00007f5c96a77090 R08: 0000000000000000 R09: 0000000000000000 [ 122.020960][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.020971][ T8653] R13: 0000000000000000 R14: 00007f5c98625fa0 R15: 00007ffefba41058 [ 122.020985][ T8653] [ 122.388616][ T8672] loop5: detected capacity change from 0 to 1024 [ 122.408622][ T8675] gretap0: left allmulticast mode [ 122.413763][ T8675] gretap0: left promiscuous mode [ 122.418900][ T8675] bridge0: port 3(gretap0) entered disabled state [ 122.495529][ T8675] bridge_slave_0: left allmulticast mode [ 122.501360][ T8675] bridge_slave_0: left promiscuous mode [ 122.503535][ T8693] loop2: detected capacity change from 0 to 2048 [ 122.507035][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.532507][ T8675] bridge_slave_1: left allmulticast mode [ 122.538218][ T8675] bridge_slave_1: left promiscuous mode [ 122.543879][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.552346][ T8693] loop2: p3 p4 < > [ 122.558290][ T8675] bond0: (slave bond_slave_0): Releasing backup interface [ 122.576296][ T8675] bond0: (slave bond_slave_1): Releasing backup interface [ 122.598094][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.605594][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.617765][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.625307][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.898876][ T8737] loop3: detected capacity change from 0 to 2048 [ 122.954817][ T8737] loop3: p1 < > p4 [ 122.970689][ T8737] loop3: p4 size 8388608 extends beyond EOD, truncated [ 122.993593][ T8720] netlink: 'syz.2.1712': attribute type 4 has an invalid length. [ 123.001777][ T8720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1712'. [ 123.107902][ T8720] : renamed from bond0 [ 123.157748][ T8759] loop3: detected capacity change from 0 to 164 [ 123.166022][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 123.166034][ T29] audit: type=1400 audit(1741350360.045:2445): avc: denied { mount } for pid=8752 comm="syz.3.1715" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 123.228985][ T29] audit: type=1400 audit(1741350360.075:2446): avc: denied { write } for pid=8752 comm="syz.3.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.248431][ T29] audit: type=1400 audit(1741350360.075:2447): avc: denied { ioctl } for pid=8752 comm="syz.3.1715" path="socket:[20316]" dev="sockfs" ino=20316 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.299578][ T8765] loop2: detected capacity change from 0 to 512 [ 123.313834][ T8765] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 123.327422][ T29] audit: type=1400 audit(1741350360.195:2448): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 123.328911][ T8765] EXT4-fs (loop2): failed to open journal device unknown-block(8,105) -6 [ 123.357312][ T8769] FAULT_INJECTION: forcing a failure. [ 123.357312][ T8769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.370520][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.3.1718 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 123.370544][ T8769] Tainted: [W]=WARN [ 123.370549][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.370558][ T8769] Call Trace: [ 123.370564][ T8769] [ 123.370570][ T8769] dump_stack_lvl+0xf2/0x150 [ 123.370597][ T8769] dump_stack+0x15/0x1a [ 123.370656][ T8769] should_fail_ex+0x24a/0x260 [ 123.370745][ T8769] should_fail+0xb/0x10 [ 123.370766][ T8769] should_fail_usercopy+0x1a/0x20 [ 123.370790][ T8769] _copy_from_user+0x1c/0xa0 [ 123.370855][ T8769] bpf_test_init+0xe4/0x140 [ 123.370878][ T8769] bpf_prog_test_run_xdp+0x321/0x8b0 [ 123.370923][ T8769] ? __rcu_read_unlock+0x4e/0x70 [ 123.371001][ T8769] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.371029][ T8769] bpf_prog_test_run+0x20f/0x3a0 [ 123.371057][ T8769] __sys_bpf+0x400/0x7a0 [ 123.371115][ T8769] __x64_sys_bpf+0x43/0x50 [ 123.371138][ T8769] x64_sys_call+0x2914/0x2dc0 [ 123.371162][ T8769] do_syscall_64+0xc9/0x1c0 [ 123.371248][ T8769] ? clear_bhb_loop+0x55/0xb0 [ 123.371272][ T8769] ? clear_bhb_loop+0x55/0xb0 [ 123.371297][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.371330][ T8769] RIP: 0033:0x7f552b12d169 [ 123.371344][ T8769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.371362][ T8769] RSP: 002b:00007f5529797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.371381][ T8769] RAX: ffffffffffffffda RBX: 00007f552b345fa0 RCX: 00007f552b12d169 [ 123.371393][ T8769] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 123.371420][ T8769] RBP: 00007f5529797090 R08: 0000000000000000 R09: 0000000000000000 [ 123.371429][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.371439][ T8769] R13: 0000000000000000 R14: 00007f552b345fa0 R15: 00007ffe83a06498 [ 123.371453][ T8769] [ 123.579428][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 123.588603][ T8775] loop5: detected capacity change from 0 to 2048 [ 123.664204][ T29] audit: type=1400 audit(1741350360.535:2449): avc: denied { read } for pid=8782 comm="syz.3.1721" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.693957][ T29] audit: type=1400 audit(1741350360.565:2450): avc: denied { open } for pid=8782 comm="syz.3.1721" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.829244][ T8800] loop3: detected capacity change from 0 to 512 [ 123.855355][ T8815] loop2: detected capacity change from 0 to 1024 [ 123.877675][ T8817] loop4: detected capacity change from 0 to 2048 [ 123.879323][ T8800] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.934136][ T29] audit: type=1400 audit(1741350360.805:2451): avc: denied { append } for pid=8799 comm="syz.3.1724" path="/338/file1/hugetlb.1GB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.017717][ T29] audit: type=1326 audit(1741350360.895:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 124.041225][ T29] audit: type=1326 audit(1741350360.895:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 124.064585][ T29] audit: type=1326 audit(1741350360.895:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 124.098239][ T8817] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1727'. [ 124.111809][ T8817] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1727'. [ 124.120954][ T8817] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1727'. [ 124.133682][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1727'. [ 124.187377][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 124.214825][ T8844] FAULT_INJECTION: forcing a failure. [ 124.214825][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 124.227540][ T8844] CPU: 1 UID: 0 PID: 8844 Comm: syz.4.1732 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 124.227569][ T8844] Tainted: [W]=WARN [ 124.227575][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.227587][ T8844] Call Trace: [ 124.227595][ T8844] [ 124.227603][ T8844] dump_stack_lvl+0xf2/0x150 [ 124.227630][ T8844] dump_stack+0x15/0x1a [ 124.227708][ T8844] should_fail_ex+0x24a/0x260 [ 124.227734][ T8844] should_failslab+0x8f/0xb0 [ 124.227760][ T8844] __kmalloc_node_noprof+0xad/0x410 [ 124.227780][ T8844] ? vmemdup_user+0x42/0x1b0 [ 124.227882][ T8844] vmemdup_user+0x42/0x1b0 [ 124.227902][ T8844] path_setxattrat+0x1c9/0x310 [ 124.227926][ T8844] __x64_sys_fsetxattr+0x6d/0x80 [ 124.228031][ T8844] x64_sys_call+0x29d2/0x2dc0 [ 124.228053][ T8844] do_syscall_64+0xc9/0x1c0 [ 124.228076][ T8844] ? clear_bhb_loop+0x55/0xb0 [ 124.228096][ T8844] ? clear_bhb_loop+0x55/0xb0 [ 124.228167][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.228243][ T8844] RIP: 0033:0x7f896bc4d169 [ 124.228256][ T8844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.228333][ T8844] RSP: 002b:00007f896a2b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 124.228349][ T8844] RAX: ffffffffffffffda RBX: 00007f896be65fa0 RCX: 00007f896bc4d169 [ 124.228359][ T8844] RDX: 00004000000004c0 RSI: 0000400000000500 RDI: 0000000000000006 [ 124.228370][ T8844] RBP: 00007f896a2b7090 R08: 0000000000000001 R09: 0000000000000000 [ 124.228383][ T8844] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 124.228394][ T8844] R13: 0000000000000000 R14: 00007f896be65fa0 R15: 00007fff592b4f18 [ 124.228409][ T8844] [ 124.420825][ T8849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1730'. [ 124.455383][ T8854] loop4: detected capacity change from 0 to 1024 [ 124.467428][ T8852] Â: renamed from pim6reg1 [ 124.474058][ T8854] EXT4-fs: Ignoring removed nobh option [ 124.479707][ T8854] EXT4-fs: Ignoring removed bh option [ 124.508890][ T8852] ALSA: seq fatal error: cannot create timer (-22) [ 124.558638][ T8864] loop1: detected capacity change from 0 to 512 [ 124.570594][ T8854] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 124.624071][ T8872] FAULT_INJECTION: forcing a failure. [ 124.624071][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 124.636849][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.4.1739 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 124.636874][ T8872] Tainted: [W]=WARN [ 124.636879][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.636889][ T8872] Call Trace: [ 124.636895][ T8872] [ 124.636911][ T8872] dump_stack_lvl+0xf2/0x150 [ 124.636934][ T8872] dump_stack+0x15/0x1a [ 124.636950][ T8872] should_fail_ex+0x24a/0x260 [ 124.637038][ T8872] should_failslab+0x8f/0xb0 [ 124.637064][ T8872] kmem_cache_alloc_node_noprof+0x59/0x320 [ 124.637172][ T8872] ? __alloc_skb+0x10b/0x310 [ 124.637192][ T8872] __alloc_skb+0x10b/0x310 [ 124.637228][ T8872] alloc_skb_with_frags+0x80/0x450 [ 124.637249][ T8872] ? page_counter_charge+0x21a/0x240 [ 124.637276][ T8872] ? should_fail_ex+0xd7/0x260 [ 124.637300][ T8872] sock_alloc_send_pskb+0x435/0x4f0 [ 124.637328][ T8872] packet_sendmsg+0x2452/0x3690 [ 124.637386][ T8872] ? avc_has_perm+0xd4/0x160 [ 124.637405][ T8872] ? selinux_socket_sendmsg+0x185/0x1c0 [ 124.637431][ T8872] ? __pfx_packet_sendmsg+0x10/0x10 [ 124.637457][ T8872] __sock_sendmsg+0x140/0x180 [ 124.637543][ T8872] ____sys_sendmsg+0x326/0x4b0 [ 124.637572][ T8872] __sys_sendmsg+0x19d/0x230 [ 124.637601][ T8872] __x64_sys_sendmsg+0x46/0x50 [ 124.637623][ T8872] x64_sys_call+0x2734/0x2dc0 [ 124.637674][ T8872] do_syscall_64+0xc9/0x1c0 [ 124.637698][ T8872] ? clear_bhb_loop+0x55/0xb0 [ 124.637720][ T8872] ? clear_bhb_loop+0x55/0xb0 [ 124.637741][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.637873][ T8872] RIP: 0033:0x7f896bc4d169 [ 124.637947][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.637964][ T8872] RSP: 002b:00007f896a2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.637982][ T8872] RAX: ffffffffffffffda RBX: 00007f896be65fa0 RCX: 00007f896bc4d169 [ 124.638054][ T8872] RDX: 0000000000000000 RSI: 0000400000002ac0 RDI: 0000000000000006 [ 124.638066][ T8872] RBP: 00007f896a2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.638077][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.638086][ T8872] R13: 0000000000000000 R14: 00007f896be65fa0 R15: 00007fff592b4f18 [ 124.638101][ T8872] [ 124.929866][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 124.968241][ T8886] syzkaller1: entered promiscuous mode [ 124.973749][ T8886] syzkaller1: entered allmulticast mode [ 125.016206][ T8888] loop1: detected capacity change from 0 to 2048 [ 125.043476][ T8895] FAULT_INJECTION: forcing a failure. [ 125.043476][ T8895] name failslab, interval 1, probability 0, space 0, times 0 [ 125.056251][ T8895] CPU: 1 UID: 0 PID: 8895 Comm: syz.5.1747 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 125.056325][ T8895] Tainted: [W]=WARN [ 125.056374][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.056386][ T8895] Call Trace: [ 125.056393][ T8895] [ 125.056401][ T8895] dump_stack_lvl+0xf2/0x150 [ 125.056499][ T8895] dump_stack+0x15/0x1a [ 125.056518][ T8895] should_fail_ex+0x24a/0x260 [ 125.056544][ T8895] should_failslab+0x8f/0xb0 [ 125.056641][ T8895] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 125.056662][ T8895] ? shmem_alloc_inode+0x34/0x50 [ 125.056690][ T8895] shmem_alloc_inode+0x34/0x50 [ 125.056709][ T8895] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 125.056811][ T8895] alloc_inode+0x3c/0x160 [ 125.056917][ T8895] new_inode+0x1e/0x100 [ 125.056944][ T8895] shmem_get_inode+0x24e/0x730 [ 125.056966][ T8895] __shmem_file_setup+0x127/0x1f0 [ 125.057073][ T8895] shmem_file_setup+0x3b/0x50 [ 125.057090][ T8895] __se_sys_memfd_create+0x2e1/0x5a0 [ 125.057230][ T8895] __x64_sys_memfd_create+0x31/0x40 [ 125.057252][ T8895] x64_sys_call+0x2d4c/0x2dc0 [ 125.057314][ T8895] do_syscall_64+0xc9/0x1c0 [ 125.057412][ T8895] ? clear_bhb_loop+0x55/0xb0 [ 125.057437][ T8895] ? clear_bhb_loop+0x55/0xb0 [ 125.057460][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.057535][ T8895] RIP: 0033:0x7f5c9840d169 [ 125.057550][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.057585][ T8895] RSP: 002b:00007f5c96a76d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 125.057604][ T8895] RAX: ffffffffffffffda RBX: 00000000000005e9 RCX: 00007f5c9840d169 [ 125.057616][ T8895] RDX: 00007f5c96a76dec RSI: 0000000000000000 RDI: 00007f5c9848ec3c [ 125.057628][ T8895] RBP: 0000400000000600 R08: 00007f5c96a76b07 R09: 00007f5c96a7701f [ 125.057640][ T8895] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 125.057682][ T8895] R13: 00007f5c96a76dec R14: 00007f5c96a76df0 R15: 00007ffefba41058 [ 125.057699][ T8895] [ 125.357606][ T8898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=549 sclass=netlink_route_socket pid=8898 comm=syz.4.1750 [ 125.441023][ T8911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8911 comm=syz.2.1754 [ 125.493776][ T8926] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 125.524222][ T8932] ALSA: seq fatal error: cannot create timer (-22) [ 125.529664][ T8931] loop3: detected capacity change from 0 to 2048 [ 125.583569][ T8938] FAULT_INJECTION: forcing a failure. [ 125.583569][ T8938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.596723][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.2.1765 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 125.596748][ T8938] Tainted: [W]=WARN [ 125.596753][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.596764][ T8938] Call Trace: [ 125.596770][ T8938] [ 125.596781][ T8938] dump_stack_lvl+0xf2/0x150 [ 125.596806][ T8938] dump_stack+0x15/0x1a [ 125.596823][ T8938] should_fail_ex+0x24a/0x260 [ 125.596923][ T8938] should_fail+0xb/0x10 [ 125.596943][ T8938] should_fail_usercopy+0x1a/0x20 [ 125.597079][ T8938] _copy_from_user+0x1c/0xa0 [ 125.597097][ T8938] vmemdup_user+0x12e/0x1b0 [ 125.597122][ T8938] map_lookup_elem+0x1f5/0x560 [ 125.597150][ T8938] __sys_bpf+0x398/0x7a0 [ 125.597235][ T8938] __x64_sys_bpf+0x43/0x50 [ 125.597273][ T8938] x64_sys_call+0x2914/0x2dc0 [ 125.597297][ T8938] do_syscall_64+0xc9/0x1c0 [ 125.597323][ T8938] ? clear_bhb_loop+0x55/0xb0 [ 125.597344][ T8938] ? clear_bhb_loop+0x55/0xb0 [ 125.597367][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.597398][ T8938] RIP: 0033:0x7fc8e658d169 [ 125.597412][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.597429][ T8938] RSP: 002b:00007fc8e4bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.597447][ T8938] RAX: ffffffffffffffda RBX: 00007fc8e67a5fa0 RCX: 00007fc8e658d169 [ 125.597504][ T8938] RDX: 0000000000000020 RSI: 0000400000000500 RDI: 0000000000000001 [ 125.597516][ T8938] RBP: 00007fc8e4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.597563][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.597574][ T8938] R13: 0000000000000000 R14: 00007fc8e67a5fa0 R15: 00007ffce790e058 [ 125.597589][ T8938] [ 125.789441][ T8942] loop3: p1 < > p4 [ 125.793776][ T8942] loop3: p4 size 8388608 extends beyond EOD, truncated [ 125.831122][ T8931] loop3: p1 < > p4 [ 125.838711][ T8931] loop3: p4 size 8388608 extends beyond EOD, truncated [ 125.847458][ T8948] FAULT_INJECTION: forcing a failure. [ 125.847458][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.860575][ T8948] CPU: 0 UID: 0 PID: 8948 Comm: syz.2.1768 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 125.860600][ T8948] Tainted: [W]=WARN [ 125.860605][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.860666][ T8948] Call Trace: [ 125.860670][ T8948] [ 125.860677][ T8948] dump_stack_lvl+0xf2/0x150 [ 125.860702][ T8948] dump_stack+0x15/0x1a [ 125.860722][ T8948] should_fail_ex+0x24a/0x260 [ 125.860756][ T8948] should_fail+0xb/0x10 [ 125.860807][ T8948] should_fail_usercopy+0x1a/0x20 [ 125.860831][ T8948] _copy_from_user+0x1c/0xa0 [ 125.860850][ T8948] copy_msghdr_from_user+0x54/0x2a0 [ 125.860944][ T8948] ? __fget_files+0x17c/0x1c0 [ 125.861015][ T8948] __sys_sendmsg+0x13e/0x230 [ 125.861152][ T8948] __x64_sys_sendmsg+0x46/0x50 [ 125.861174][ T8948] x64_sys_call+0x2734/0x2dc0 [ 125.861195][ T8948] do_syscall_64+0xc9/0x1c0 [ 125.861221][ T8948] ? clear_bhb_loop+0x55/0xb0 [ 125.861309][ T8948] ? clear_bhb_loop+0x55/0xb0 [ 125.861330][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.861351][ T8948] RIP: 0033:0x7fc8e658d169 [ 125.861365][ T8948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.861434][ T8948] RSP: 002b:00007fc8e4bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.861450][ T8948] RAX: ffffffffffffffda RBX: 00007fc8e67a5fa0 RCX: 00007fc8e658d169 [ 125.861460][ T8948] RDX: 0000000000004886 RSI: 0000400000000240 RDI: 0000000000000005 [ 125.861471][ T8948] RBP: 00007fc8e4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.861484][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.861494][ T8948] R13: 0000000000000000 R14: 00007fc8e67a5fa0 R15: 00007ffce790e058 [ 125.861510][ T8948] [ 125.886845][ T8946] loop5: detected capacity change from 0 to 2048 [ 126.111075][ T8946] loop5: p2 p3 p7 [ 126.159560][ T8972] loop5: detected capacity change from 0 to 512 [ 126.188454][ T8972] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 126.199782][ T8972] EXT4-fs (loop5): failed to open journal device unknown-block(8,105) -6 [ 126.211832][ T8978] ALSA: seq fatal error: cannot create timer (-22) [ 126.239871][ T8982] loop1: detected capacity change from 0 to 128 [ 126.274587][ T8984] Y­4`Ò˜: renamed from lo (while UP) [ 126.291816][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.300606][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.308577][ T8984] loop5: detected capacity change from 0 to 2048 [ 126.309199][ T8990] IPv6: Can't replace route, no match found [ 126.322330][ T8992] loop2: detected capacity change from 0 to 1024 [ 126.361431][ T8984] loop5: unable to read partition table [ 126.367229][ T8984] loop5: partition table beyond EOD, truncated [ 126.373447][ T8984] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 126.430786][ T9002] loop5: detected capacity change from 0 to 2048 [ 126.441166][ T9006] loop4: detected capacity change from 0 to 512 [ 126.447913][ T9006] EXT4-fs: Ignoring removed orlov option [ 126.453891][ T9006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.464318][ T9006] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1789: casefold flag without casefold feature [ 126.477296][ T9006] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1789: couldn't read orphan inode 15 (err -117) [ 126.531940][ T9002] loop5: unable to read partition table [ 126.537749][ T9002] loop5: partition table beyond EOD, truncated [ 126.544047][ T9002] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 126.552916][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.564382][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.600539][ T9011] IPv6: Can't replace route, no match found [ 126.874853][ T9033] loop3: detected capacity change from 0 to 2048 [ 126.926563][ T9033] loop3: p1 < > p4 [ 126.930876][ T9033] loop3: p4 size 8388608 extends beyond EOD, truncated [ 127.063960][ T9043] loop3: detected capacity change from 0 to 2048 [ 127.138892][ T9043] EXT4-fs mount: 20 callbacks suppressed [ 127.138909][ T9043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.160475][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.203486][ T9043] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 127.226981][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.442115][ T9061] loop4: detected capacity change from 0 to 1024 [ 127.449452][ T9061] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.460620][ T9061] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 127.480936][ T9060] loop3: detected capacity change from 0 to 2048 [ 127.486555][ T9061] JBD2: no valid journal superblock found [ 127.493088][ T9061] EXT4-fs (loop4): Could not load journal inode [ 127.501430][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.512926][ T9060] loop3: p1 < > p4 [ 127.521787][ T9060] loop3: p4 size 8388608 extends beyond EOD, truncated [ 127.559451][ T9067] loop2: detected capacity change from 0 to 512 [ 127.566877][ T9067] EXT4-fs: Ignoring removed orlov option [ 127.573959][ T9067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.588305][ T9067] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1812: casefold flag without casefold feature [ 127.604705][ T9067] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1812: couldn't read orphan inode 15 (err -117) [ 127.631887][ T9067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.671715][ T9079] __nla_validate_parse: 2 callbacks suppressed [ 127.671731][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 127.703201][ T9072] ALSA: seq fatal error: cannot create timer (-22) [ 127.742972][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.752363][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.785974][ T9087] loop4: detected capacity change from 0 to 2048 [ 127.976337][ T9101] FAULT_INJECTION: forcing a failure. [ 127.976337][ T9101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.989625][ T9101] CPU: 0 UID: 0 PID: 9101 Comm: syz.5.1823 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 127.989737][ T9101] Tainted: [W]=WARN [ 127.989744][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.989754][ T9101] Call Trace: [ 127.989761][ T9101] [ 127.989768][ T9101] dump_stack_lvl+0xf2/0x150 [ 127.989839][ T9101] dump_stack+0x15/0x1a [ 127.989857][ T9101] should_fail_ex+0x24a/0x260 [ 127.989983][ T9101] should_fail_alloc_page+0xfd/0x110 [ 127.990009][ T9101] __alloc_frozen_pages_noprof+0x109/0x340 [ 127.990036][ T9101] alloc_pages_mpol+0xb4/0x260 [ 127.990101][ T9101] vma_alloc_folio_noprof+0x1a0/0x310 [ 127.990130][ T9101] do_wp_page+0x64b/0x2340 [ 127.990156][ T9101] ? probe_sched_wakeup+0x81/0xa0 [ 127.990180][ T9101] ? __rcu_read_lock+0x36/0x50 [ 127.990235][ T9101] handle_mm_fault+0xc63/0x2ac0 [ 127.990259][ T9101] exc_page_fault+0x3b9/0x650 [ 127.990283][ T9101] asm_exc_page_fault+0x26/0x30 [ 127.990305][ T9101] RIP: 0033:0x7f5c982cfbe3 [ 127.990320][ T9101] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 127.990392][ T9101] RSP: 002b:00007f5c96a763f0 EFLAGS: 00010202 [ 127.990406][ T9101] RAX: 00000000000ffe00 RBX: 00007f5c96a76490 RCX: 00007f5c8e657000 [ 127.990416][ T9101] RDX: 00007f5c96a76630 RSI: 0000000000000003 RDI: 00007f5c96a76530 [ 127.990503][ T9101] RBP: 00000000000000ff R08: 0000000000000008 R09: 00000000000000ac [ 127.990514][ T9101] R10: 00000000000000c0 R11: 00007f5c96a76490 R12: 0000000000000001 [ 127.990524][ T9101] R13: 00007f5c984a93e0 R14: 0000000000000045 R15: 00007f5c96a76530 [ 127.990540][ T9101] [ 127.990549][ T9101] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 128.178969][ T9101] loop5: detected capacity change from 0 to 2048 [ 128.196247][ T9101] loop5: p1 < > p4 [ 128.200568][ T9101] loop5: p4 size 8388608 extends beyond EOD, truncated [ 128.237143][ T9108] loop1: detected capacity change from 0 to 512 [ 128.244151][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.254731][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.264396][ T9108] loop1: detected capacity change from 0 to 512 [ 128.273053][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.283650][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.295699][ T9108] loop1: detected capacity change from 0 to 512 [ 128.302670][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.313242][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.332308][ T9108] loop1: detected capacity change from 0 to 512 [ 128.341220][ T9113] xt_hashlimit: max too large, truncated to 1048576 [ 128.349954][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.350081][ T9113] Cannot find set identified by id 0 to match [ 128.360155][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.375989][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.389869][ T9108] loop1: detected capacity change from 0 to 512 [ 128.400173][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.410760][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.430846][ T9108] loop1: detected capacity change from 0 to 512 [ 128.446639][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.457217][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.473585][ T9108] loop1: detected capacity change from 0 to 512 [ 128.490556][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.501244][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.540466][ T9108] loop1: detected capacity change from 0 to 512 [ 128.547454][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.558320][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.569073][ T9108] loop1: detected capacity change from 0 to 512 [ 128.589282][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.599866][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.640267][ T9108] loop1: detected capacity change from 0 to 512 [ 128.649650][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.660298][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.671522][ T9131] loop2: detected capacity change from 0 to 2048 [ 128.698933][ T9108] loop1: detected capacity change from 0 to 512 [ 128.716465][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.724928][ T9135] netlink: 'syz.3.1838': attribute type 13 has an invalid length. [ 128.727042][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.741742][ T9131] loop2: p1 < > p4 [ 128.748905][ T9131] loop2: p4 size 8388608 extends beyond EOD, truncated [ 128.758648][ T9135] gretap0: refused to change device tx_queue_len [ 128.764999][ T9135] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.792502][ T9108] loop1: detected capacity change from 0 to 512 [ 128.804182][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.814773][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.831967][ T9108] loop1: detected capacity change from 0 to 512 [ 128.839128][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.849744][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.859299][ T9141] bond_slave_0: mtu less than device minimum [ 128.865437][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 128.865450][ T29] audit: type=1400 audit(1741350365.735:2578): avc: denied { ioctl } for pid=9140 comm="syz.2.1839" path="socket:[21886]" dev="sockfs" ino=21886 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.921421][ T9108] loop1: detected capacity change from 0 to 512 [ 128.934283][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 128.944967][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 128.953084][ T29] audit: type=1400 audit(1741350365.825:2579): avc: denied { append } for pid=9144 comm="syz.3.1841" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.978009][ T9145] FAULT_INJECTION: forcing a failure. [ 128.978009][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.991154][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.3.1841 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 128.991235][ T9145] Tainted: [W]=WARN [ 128.991241][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.991252][ T9145] Call Trace: [ 128.991259][ T9145] [ 128.991266][ T9145] dump_stack_lvl+0xf2/0x150 [ 128.991357][ T9145] dump_stack+0x15/0x1a [ 128.991377][ T9145] should_fail_ex+0x24a/0x260 [ 128.991451][ T9145] should_fail+0xb/0x10 [ 128.991474][ T9145] should_fail_usercopy+0x1a/0x20 [ 128.991580][ T9145] _copy_from_user+0x1c/0xa0 [ 128.991599][ T9145] proc_do_submiturb+0x865/0x1de0 [ 128.991629][ T9145] ? path_openat+0x19a0/0x1fc0 [ 128.991666][ T9145] ? avc_has_extended_perms+0x6e9/0x8e0 [ 128.991741][ T9145] ? should_fail_ex+0xd7/0x260 [ 128.991793][ T9145] usbdev_ioctl+0x1ddb/0x3f20 [ 128.991828][ T9145] ? do_vfs_ioctl+0x98b/0x1590 [ 128.991849][ T9145] ? selinux_file_ioctl+0x2f7/0x380 [ 128.991877][ T9145] ? __fget_files+0x17c/0x1c0 [ 128.991906][ T9145] ? __pfx_usbdev_ioctl+0x10/0x10 [ 128.992002][ T9145] __se_sys_ioctl+0xc9/0x140 [ 128.992026][ T9145] __x64_sys_ioctl+0x43/0x50 [ 128.992056][ T9145] x64_sys_call+0x1690/0x2dc0 [ 128.992081][ T9145] do_syscall_64+0xc9/0x1c0 [ 128.992128][ T9145] ? clear_bhb_loop+0x55/0xb0 [ 128.992154][ T9145] ? clear_bhb_loop+0x55/0xb0 [ 128.992179][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.992204][ T9145] RIP: 0033:0x7f552b12d169 [ 128.992284][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.992349][ T9145] RSP: 002b:00007f5529797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.992367][ T9145] RAX: ffffffffffffffda RBX: 00007f552b345fa0 RCX: 00007f552b12d169 [ 128.992379][ T9145] RDX: 0000400000000000 RSI: 000000008038550a RDI: 0000000000000006 [ 128.992391][ T9145] RBP: 00007f5529797090 R08: 0000000000000000 R09: 0000000000000000 [ 128.992403][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.992415][ T9145] R13: 0000000000000000 R14: 00007f552b345fa0 R15: 00007ffe83a06498 [ 128.992433][ T9145] [ 128.994950][ T9138] loop5: detected capacity change from 0 to 1024 [ 129.010880][ T9108] loop1: detected capacity change from 0 to 512 [ 129.016447][ T9138] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.031944][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.046071][ T9150] SELinux: policydb magic number 0xe70002a3 does not match expected magic number 0xf97cff8c [ 129.049992][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.054547][ T9150] SELinux: failed to load policy [ 129.091069][ T9138] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #11: comm syz.5.1835: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 129.108542][ T9108] loop1: detected capacity change from 0 to 512 [ 129.127264][ T9138] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1835: couldn't read orphan inode 11 (err -117) [ 129.134728][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.139068][ T9138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.157319][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.166494][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 129.210071][ T9108] loop1: detected capacity change from 0 to 512 [ 129.334192][ T9161] loop4: detected capacity change from 0 to 2048 [ 129.343838][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.366414][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.373432][ T7573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.376345][ T9108] loop1: detected capacity change from 0 to 512 [ 129.389451][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.400035][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.413363][ T9108] loop1: detected capacity change from 0 to 512 [ 129.421477][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.423612][ T9167] ALSA: seq fatal error: cannot create timer (-22) [ 129.432282][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.462729][ T9108] loop1: detected capacity change from 0 to 512 [ 129.476353][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.486941][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.507944][ T9108] loop1: detected capacity change from 0 to 512 [ 129.514799][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.525479][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.541499][ T9108] loop1: detected capacity change from 0 to 512 [ 129.558862][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.569440][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.581684][ T9108] loop1: detected capacity change from 0 to 512 [ 129.588676][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.599281][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.613918][ T9108] loop1: detected capacity change from 0 to 512 [ 129.622240][ T9183] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 129.630090][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 129.631491][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.649765][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.653566][ T29] audit: type=1326 audit(1741350366.525:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.679450][ T29] audit: type=1326 audit(1741350366.525:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.708302][ T9108] loop1: detected capacity change from 0 to 512 [ 129.717992][ T29] audit: type=1326 audit(1741350366.555:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.741523][ T29] audit: type=1326 audit(1741350366.555:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.742738][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.764912][ T29] audit: type=1326 audit(1741350366.555:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.775410][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.798791][ T29] audit: type=1326 audit(1741350366.555:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.828531][ T29] audit: type=1326 audit(1741350366.555:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.852030][ T29] audit: type=1326 audit(1741350366.575:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.2.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8e658d169 code=0x7ffc0000 [ 129.879976][ T9108] loop1: detected capacity change from 0 to 512 [ 129.897222][ T9191] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.904835][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.915582][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.923367][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1855'. [ 129.943100][ T9108] loop1: detected capacity change from 0 to 512 [ 129.955597][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 129.966267][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 129.997582][ T9108] loop1: detected capacity change from 0 to 512 [ 130.003976][ T9201] loop4: detected capacity change from 0 to 2048 [ 130.010930][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 130.021685][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 130.034226][ T9204] loop3: detected capacity change from 0 to 512 [ 130.041229][ T9204] EXT4-fs: Ignoring removed nobh option [ 130.053756][ T9108] loop1: detected capacity change from 0 to 512 [ 130.060602][ T9209] FAULT_INJECTION: forcing a failure. [ 130.060602][ T9209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.073889][ T9209] CPU: 0 UID: 0 PID: 9209 Comm: syz.2.1864 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 130.073913][ T9209] Tainted: [W]=WARN [ 130.073919][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.074004][ T9209] Call Trace: [ 130.074009][ T9209] [ 130.074016][ T9209] dump_stack_lvl+0xf2/0x150 [ 130.074038][ T9209] dump_stack+0x15/0x1a [ 130.074053][ T9209] should_fail_ex+0x24a/0x260 [ 130.074083][ T9209] should_fail+0xb/0x10 [ 130.074101][ T9209] should_fail_usercopy+0x1a/0x20 [ 130.074122][ T9209] _copy_from_user+0x1c/0xa0 [ 130.074136][ T9209] bpf_prog_test_run_xdp+0x813/0x8b0 [ 130.074221][ T9209] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.074243][ T9209] bpf_prog_test_run+0x20f/0x3a0 [ 130.074317][ T9209] __sys_bpf+0x400/0x7a0 [ 130.074341][ T9209] __x64_sys_bpf+0x43/0x50 [ 130.074375][ T9209] x64_sys_call+0x2914/0x2dc0 [ 130.074393][ T9209] do_syscall_64+0xc9/0x1c0 [ 130.074415][ T9209] ? clear_bhb_loop+0x55/0xb0 [ 130.074435][ T9209] ? clear_bhb_loop+0x55/0xb0 [ 130.074532][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.074551][ T9209] RIP: 0033:0x7fc8e658d169 [ 130.074563][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.074577][ T9209] RSP: 002b:00007fc8e4bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.074592][ T9209] RAX: ffffffffffffffda RBX: 00007fc8e67a5fa0 RCX: 00007fc8e658d169 [ 130.074646][ T9209] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 130.074655][ T9209] RBP: 00007fc8e4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.074664][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.074673][ T9209] R13: 0000000000000000 R14: 00007fc8e67a5fa0 R15: 00007ffce790e058 [ 130.074686][ T9209] [ 130.075102][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 130.143784][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 130.146062][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 130.154836][ T9201] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1860'. [ 130.163469][ T9204] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 130.164631][ T9201] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1860'. [ 130.170120][ T9204] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1861: invalid indirect mapped block 2683928664 (level 1) [ 130.173692][ T9201] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1860'. [ 130.176971][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'. [ 130.178999][ T9212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.215462][ T9204] EXT4-fs (loop3): 1 truncate cleaned up [ 130.221545][ T9212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.250376][ T9204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.264688][ T9108] loop1: detected capacity change from 0 to 512 [ 130.283062][ C1] sd 0:0:1:0: [sda] tag#3963 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 130.285248][ T9212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.290232][ C1] sd 0:0:1:0: [sda] tag#3963 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 130.299222][ T9212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.320764][ T9204] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #2: block 13: comm syz.3.1861: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 130.332658][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 130.451660][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 130.458911][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.471980][ T9108] loop1: detected capacity change from 0 to 512 [ 130.488729][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 130.499465][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 130.515233][ T9108] loop1: detected capacity change from 0 to 512 [ 130.524506][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 130.535197][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 130.559108][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 130.568249][ T9108] loop1: detected capacity change from 0 to 512 [ 130.574998][ T9108] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 131091)! [ 130.585733][ T9108] EXT4-fs (loop1): group descriptors corrupted! [ 130.640108][ T9237] loop4: detected capacity change from 0 to 2048 [ 130.650897][ T9241] loop2: detected capacity change from 0 to 2048 [ 130.658115][ T9247] loop1: detected capacity change from 0 to 512 [ 130.665107][ T9247] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 130.674140][ T9247] EXT4-fs (loop1): failed to open journal device unknown-block(8,105) -6 [ 130.700948][ T9241] loop2: p2 p3 p7 [ 130.802390][ T9270] loop1: detected capacity change from 0 to 164 [ 130.810315][ T9270] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 130.913595][ T9278] syzkaller1: entered promiscuous mode [ 130.919168][ T9278] syzkaller1: entered allmulticast mode [ 130.946630][ T9282] FAULT_INJECTION: forcing a failure. [ 130.946630][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 130.959296][ T9282] CPU: 0 UID: 0 PID: 9282 Comm: syz.1.1891 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 130.959325][ T9282] Tainted: [W]=WARN [ 130.959332][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.959404][ T9282] Call Trace: [ 130.959411][ T9282] [ 130.959418][ T9282] dump_stack_lvl+0xf2/0x150 [ 130.959445][ T9282] dump_stack+0x15/0x1a [ 130.959465][ T9282] should_fail_ex+0x24a/0x260 [ 130.959562][ T9282] ? audit_log_d_path+0x8e/0x150 [ 130.959589][ T9282] should_failslab+0x8f/0xb0 [ 130.959629][ T9282] __kmalloc_cache_noprof+0x4e/0x320 [ 130.959655][ T9282] audit_log_d_path+0x8e/0x150 [ 130.959684][ T9282] audit_log_d_path_exe+0x42/0x70 [ 130.959712][ T9282] audit_log_task+0x1ec/0x250 [ 130.959742][ T9282] audit_seccomp+0x68/0x130 [ 130.959827][ T9282] __seccomp_filter+0x6fa/0x1180 [ 130.959850][ T9282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.959875][ T9282] ? vfs_write+0x644/0x920 [ 130.959899][ T9282] __secure_computing+0x9f/0x1c0 [ 130.959932][ T9282] syscall_trace_enter+0xd1/0x1f0 [ 130.959959][ T9282] do_syscall_64+0xaa/0x1c0 [ 130.960022][ T9282] ? clear_bhb_loop+0x55/0xb0 [ 130.960045][ T9282] ? clear_bhb_loop+0x55/0xb0 [ 130.960128][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.960150][ T9282] RIP: 0033:0x7ff9c421d169 [ 130.960163][ T9282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.960177][ T9282] RSP: 002b:00007ff9c2887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 130.960299][ T9282] RAX: ffffffffffffffda RBX: 00007ff9c4435fa0 RCX: 00007ff9c421d169 [ 130.960309][ T9282] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffffffffffffff [ 130.960319][ T9282] RBP: 00007ff9c2887090 R08: 0000000000000000 R09: 0000000000000000 [ 130.960328][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.960338][ T9282] R13: 0000000000000000 R14: 00007ff9c4435fa0 R15: 00007fff3197ff88 [ 130.960351][ T9282] [ 131.187963][ T9284] loop1: detected capacity change from 0 to 2048 [ 131.237136][ T9286] loop2: detected capacity change from 0 to 512 [ 131.243884][ T9286] journal_path: Non-blockdev passed as './bus' [ 131.250210][ T9286] EXT4-fs: error: could not find journal device path [ 131.261411][ T9284] loop1: p2 p3 p7 [ 131.271261][ T9286] bond0: entered promiscuous mode [ 131.276457][ T9286] bond0: entered allmulticast mode [ 131.283220][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.314266][ T9286] bond0 (unregistering): Released all slaves [ 131.467635][ T9317] loop4: detected capacity change from 0 to 512 [ 131.475391][ T9313] syzkaller1: entered promiscuous mode [ 131.480934][ T9313] syzkaller1: entered allmulticast mode [ 131.489634][ T9317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.515192][ T9317] EXT4-fs (loop4): 1 truncate cleaned up [ 131.522987][ T9317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.571520][ T9321] SELinux: policydb magic number 0xe70002a3 does not match expected magic number 0xf97cff8c [ 131.614752][ T9321] SELinux: failed to load policy [ 131.620858][ T9324] loop3: detected capacity change from 0 to 512 [ 131.651764][ T9324] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 131.680815][ T9324] EXT4-fs (loop3): failed to open journal device unknown-block(8,105) -6 [ 131.775202][ T9344] loop1: detected capacity change from 0 to 2048 [ 131.787800][ T9349] syzkaller1: entered promiscuous mode [ 131.793486][ T9349] syzkaller1: entered allmulticast mode [ 131.802084][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.819994][ T9351] loop4: detected capacity change from 0 to 512 [ 131.826691][ T9351] EXT4-fs: dax option not supported [ 131.850324][ T9354] loop2: detected capacity change from 0 to 512 [ 131.856841][ T9354] EXT4-fs: dax option not supported [ 131.955737][ T9368] SELinux: policydb magic number 0xe70002a3 does not match expected magic number 0xf97cff8c [ 131.967153][ T9368] SELinux: failed to load policy [ 132.043994][ T9380] syzkaller1: entered promiscuous mode [ 132.049585][ T9380] syzkaller1: entered allmulticast mode [ 132.122982][ T9386] loop2: detected capacity change from 0 to 2048 [ 132.166000][ T9388] loop4: detected capacity change from 0 to 2048 [ 132.177137][ T9386] loop2: p2 p3 p7 [ 132.201389][ T9390] syzkaller1: entered promiscuous mode [ 132.202245][ T9392] FAULT_INJECTION: forcing a failure. [ 132.202245][ T9392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.206902][ T9390] syzkaller1: entered allmulticast mode [ 132.224127][ T9388] loop4: p2 p3 p7 [ 132.225509][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.2.1933 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 132.225536][ T9392] Tainted: [W]=WARN [ 132.225617][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.225629][ T9392] Call Trace: [ 132.225660][ T9392] [ 132.225667][ T9392] dump_stack_lvl+0xf2/0x150 [ 132.225693][ T9392] dump_stack+0x15/0x1a [ 132.225711][ T9392] should_fail_ex+0x24a/0x260 [ 132.225738][ T9392] should_fail+0xb/0x10 [ 132.225819][ T9392] should_fail_usercopy+0x1a/0x20 [ 132.225845][ T9392] _copy_to_user+0x20/0xa0 [ 132.225919][ T9392] simple_read_from_buffer+0xa0/0x110 [ 132.225960][ T9392] proc_fail_nth_read+0xf9/0x140 [ 132.226124][ T9392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.226149][ T9392] vfs_read+0x19b/0x6f0 [ 132.226170][ T9392] ? __rcu_read_unlock+0x4e/0x70 [ 132.226197][ T9392] ? __fget_files+0x17c/0x1c0 [ 132.226225][ T9392] ksys_read+0xe8/0x1b0 [ 132.226258][ T9392] __x64_sys_read+0x42/0x50 [ 132.226281][ T9392] x64_sys_call+0x2874/0x2dc0 [ 132.226334][ T9392] do_syscall_64+0xc9/0x1c0 [ 132.226415][ T9392] ? clear_bhb_loop+0x55/0xb0 [ 132.226486][ T9392] ? clear_bhb_loop+0x55/0xb0 [ 132.226510][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.226533][ T9392] RIP: 0033:0x7fc8e658bb7c [ 132.226548][ T9392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.226565][ T9392] RSP: 002b:00007fc8e4bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.226597][ T9392] RAX: ffffffffffffffda RBX: 00007fc8e67a5fa0 RCX: 00007fc8e658bb7c [ 132.226669][ T9392] RDX: 000000000000000f RSI: 00007fc8e4bf70a0 RDI: 0000000000000004 [ 132.226680][ T9392] RBP: 00007fc8e4bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.226691][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.226715][ T9392] R13: 0000000000000000 R14: 00007fc8e67a5fa0 R15: 00007ffce790e058 [ 132.226731][ T9392] [ 132.410729][ T9401] SELinux: policydb magic number 0xe70002a3 does not match expected magic number 0xf97cff8c [ 132.459917][ T9401] SELinux: failed to load policy [ 132.505073][ C1] sd 0:0:1:0: [sda] tag#3904 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 132.515577][ C1] sd 0:0:1:0: [sda] tag#3904 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 132.542052][ T9405] loop4: detected capacity change from 0 to 512 [ 132.573358][ T9409] loop5: detected capacity change from 0 to 256 [ 132.584958][ T9413] netlink: 'syz.4.1945': attribute type 30 has an invalid length. [ 132.606453][ T9415] syzkaller1: entered promiscuous mode [ 132.611959][ T9415] syzkaller1: entered allmulticast mode [ 132.705421][ T9426] FAULT_INJECTION: forcing a failure. [ 132.705421][ T9426] name failslab, interval 1, probability 0, space 0, times 0 [ 132.718241][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.4.1948 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 132.718323][ T9426] Tainted: [W]=WARN [ 132.718397][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.718409][ T9426] Call Trace: [ 132.718414][ T9426] [ 132.718421][ T9426] dump_stack_lvl+0xf2/0x150 [ 132.718447][ T9426] dump_stack+0x15/0x1a [ 132.718467][ T9426] should_fail_ex+0x24a/0x260 [ 132.718580][ T9426] should_failslab+0x8f/0xb0 [ 132.718637][ T9426] kmem_cache_alloc_noprof+0x52/0x320 [ 132.718718][ T9426] ? skb_clone+0x154/0x1f0 [ 132.718743][ T9426] skb_clone+0x154/0x1f0 [ 132.718765][ T9426] __netlink_deliver_tap+0x2bd/0x4f0 [ 132.718795][ T9426] __netlink_sendskb+0xda/0xe0 [ 132.718861][ T9426] netlink_dump+0x687/0x7e0 [ 132.718962][ T9426] __netlink_dump_start+0x433/0x520 [ 132.718990][ T9426] genl_rcv_msg+0x4ea/0x6d0 [ 132.719011][ T9426] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 132.719041][ T9426] ? __pfx_genl_start+0x10/0x10 [ 132.719132][ T9426] ? __pfx_genl_dumpit+0x10/0x10 [ 132.719152][ T9426] ? __pfx_genl_done+0x10/0x10 [ 132.719176][ T9426] netlink_rcv_skb+0x12c/0x230 [ 132.719206][ T9426] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.719298][ T9426] genl_rcv+0x28/0x40 [ 132.719315][ T9426] netlink_unicast+0x599/0x670 [ 132.719342][ T9426] netlink_sendmsg+0x5cc/0x6e0 [ 132.719402][ T9426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.719493][ T9426] __sock_sendmsg+0x140/0x180 [ 132.719521][ T9426] ____sys_sendmsg+0x326/0x4b0 [ 132.719538][ T9418] loop3: detected capacity change from 0 to 512 [ 132.719546][ T9426] __sys_sendmsg+0x19d/0x230 [ 132.719593][ T9426] __x64_sys_sendmsg+0x46/0x50 [ 132.719692][ T9426] x64_sys_call+0x2734/0x2dc0 [ 132.719715][ T9426] do_syscall_64+0xc9/0x1c0 [ 132.719742][ T9426] ? clear_bhb_loop+0x55/0xb0 [ 132.719791][ T9426] ? clear_bhb_loop+0x55/0xb0 [ 132.719813][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.719836][ T9426] RIP: 0033:0x7f896bc4d169 [ 132.719852][ T9426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.719925][ T9426] RSP: 002b:00007f896a2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.719942][ T9426] RAX: ffffffffffffffda RBX: 00007f896be65fa0 RCX: 00007f896bc4d169 [ 132.719954][ T9426] RDX: 0000000000000000 RSI: 0000400000000340 RDI: 0000000000000004 [ 132.719964][ T9426] RBP: 00007f896a2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.719975][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.719992][ T9426] R13: 0000000000000000 R14: 00007f896be65fa0 R15: 00007fff592b4f18 [ 132.720009][ T9426] [ 132.811776][ T9434] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 132.831013][ T9418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.833697][ T9434] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 133.045028][ T9440] syzkaller1: entered promiscuous mode [ 133.050826][ T9440] syzkaller1: entered allmulticast mode [ 133.093495][ T9418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.115123][ T9444] __nla_validate_parse: 11 callbacks suppressed [ 133.115178][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 133.136798][ T9418] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.161470][ C1] sd 0:0:1:0: [sda] tag#3905 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 133.171886][ C1] sd 0:0:1:0: [sda] tag#3905 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 133.201190][ T9449] loop2: detected capacity change from 0 to 512 [ 133.221342][ T9418] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1946'. [ 133.248849][ T9444] loop5: detected capacity change from 0 to 2048 [ 133.329600][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.377215][ T9469] loop3: detected capacity change from 0 to 1024 [ 133.390670][ T9469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.452327][ T9475] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1962'. [ 133.528262][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 133.543260][ T9475] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.568777][ T9481] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 133.581839][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 133.591106][ T9481] 8021q: VLANs not supported on vxcan0 [ 133.607187][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'. [ 133.617275][ T9475] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.687314][ T9475] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.797161][ T9475] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.851850][ T9475] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.864638][ T9475] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.895030][ T9475] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.914457][ T9475] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.277598][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.378170][ T9527] loop3: detected capacity change from 0 to 2048 [ 134.470727][ T9536] loop4: detected capacity change from 0 to 512 [ 134.505469][ T9536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.519198][ T9536] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.537175][ T9536] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.559441][ T9536] syzkaller0: entered promiscuous mode [ 134.565288][ T9536] syzkaller0: entered allmulticast mode [ 134.675274][ T9543] loop2: detected capacity change from 0 to 1024 [ 134.682144][ T9543] EXT4-fs: dax option not supported [ 134.733230][ T9549] loop2: detected capacity change from 0 to 2048 [ 134.776298][ T9549] loop2: p1 < > p4 [ 134.780714][ T9549] loop2: p4 size 8388608 extends beyond EOD, truncated [ 134.802383][ C1] sd 0:0:1:0: [sda] tag#3935 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 134.812808][ C1] sd 0:0:1:0: [sda] tag#3935 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 134.825411][ T9551] loop5: detected capacity change from 0 to 512 [ 134.870330][ T9557] loop5: detected capacity change from 0 to 128 [ 134.877121][ T9557] vfat: Bad value for 'gid' [ 134.881669][ T9557] vfat: Bad value for 'gid' [ 134.912215][ T9563] loop2: detected capacity change from 0 to 2048 [ 134.956057][ T9563] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1995'. [ 134.965454][ T9563] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1995'. [ 134.974582][ T9563] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1995'. [ 134.986234][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1995'. [ 135.175650][ C1] sd 0:0:1:0: [sda] tag#3937 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.186051][ C1] sd 0:0:1:0: [sda] tag#3937 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 135.198095][ T9576] loop3: detected capacity change from 0 to 512 [ 135.267056][ T9582] loop3: detected capacity change from 0 to 2048 [ 135.310402][ T9582] loop3: p2 p3 p7 [ 135.379494][ T9586] loop3: detected capacity change from 0 to 2048 [ 135.469446][ T9594] loop3: detected capacity change from 0 to 2048 [ 135.482231][ T9590] loop5: detected capacity change from 0 to 2048 [ 135.516977][ T9594] loop3: p1 < > p4 [ 135.521260][ T9594] loop3: p4 size 8388608 extends beyond EOD, truncated [ 135.539601][ T9590] loop5: p2 p3 p7 [ 135.616839][ T9603] loop3: detected capacity change from 0 to 2048 [ 135.891318][ C1] sd 0:0:1:0: [sda] tag#3941 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.901661][ C1] sd 0:0:1:0: [sda] tag#3941 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 135.913696][ T9610] loop2: detected capacity change from 0 to 512 [ 135.964219][ T9616] loop2: detected capacity change from 0 to 1024 [ 135.973006][ T9616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.367662][ T9625] loop1: detected capacity change from 0 to 2048 [ 136.518990][ T9630] loop1: detected capacity change from 0 to 2048 [ 136.551751][ T9630] loop1: p1 < > p4 [ 136.559644][ T9630] loop1: p4 size 8388608 extends beyond EOD, truncated [ 136.656997][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 136.657010][ T29] audit: type=1326 audit(1741350373.535:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.689012][ C1] sd 0:0:1:0: [sda] tag#3942 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 136.699403][ C1] sd 0:0:1:0: [sda] tag#3942 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 136.709779][ T29] audit: type=1326 audit(1741350373.565:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.733203][ T29] audit: type=1326 audit(1741350373.565:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.756633][ T29] audit: type=1326 audit(1741350373.565:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.780078][ T29] audit: type=1326 audit(1741350373.565:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.790178][ T9644] loop5: detected capacity change from 0 to 512 [ 136.803503][ T29] audit: type=1326 audit(1741350373.565:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.833217][ T29] audit: type=1326 audit(1741350373.585:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.856616][ T29] audit: type=1326 audit(1741350373.585:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.880104][ T29] audit: type=1326 audit(1741350373.585:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9640 comm="syz.3.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552b12d169 code=0x7ffc0000 [ 136.917353][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.943990][ T9653] loop5: detected capacity change from 0 to 2048 [ 136.998126][ T9655] loop1: detected capacity change from 0 to 2048 [ 137.007154][ T9653] loop5: p1 < > p4 [ 137.011476][ T9653] loop5: p4 size 8388608 extends beyond EOD, truncated [ 137.030776][ T9655] loop1: p2 p3 p7 [ 137.069062][ T9662] loop3: detected capacity change from 0 to 2048 [ 137.077386][ T9669] loop1: detected capacity change from 0 to 512 [ 137.083696][ C1] sd 0:0:1:0: [sda] tag#3943 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 137.083738][ C1] sd 0:0:1:0: [sda] tag#3943 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 137.087675][ T9670] loop5: detected capacity change from 0 to 512 [ 137.094971][ T9669] EXT4-fs: Ignoring removed orlov option [ 137.119534][ T9669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.119876][ T9662] loop3: p2 p3 p7 [ 137.158159][ T9669] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.2036: casefold flag without casefold feature [ 137.172521][ T9669] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2036: couldn't read orphan inode 15 (err -117) [ 137.196098][ T9669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.217847][ T29] audit: type=1400 audit(1741350887.100:2651): avc: denied { read } for pid=9679 comm="syz.3.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.238803][ T9682] FAULT_INJECTION: forcing a failure. [ 137.238803][ T9682] name failslab, interval 1, probability 0, space 0, times 0 [ 137.252700][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.3.2040 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 137.252785][ T9682] Tainted: [W]=WARN [ 137.252791][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.252801][ T9682] Call Trace: [ 137.252806][ T9682] [ 137.252814][ T9682] dump_stack_lvl+0xf2/0x150 [ 137.252838][ T9682] dump_stack+0x15/0x1a [ 137.252913][ T9682] should_fail_ex+0x24a/0x260 [ 137.252936][ T9682] ? find_get_pmu_context+0x54/0x570 [ 137.252955][ T9682] should_failslab+0x8f/0xb0 [ 137.252981][ T9682] __kmalloc_cache_noprof+0x4e/0x320 [ 137.253004][ T9682] find_get_pmu_context+0x54/0x570 [ 137.253058][ T9682] ? find_get_context+0x4bb/0x540 [ 137.253075][ T9682] __se_sys_perf_event_open+0xc65/0x2230 [ 137.253098][ T9682] ? lapic_next_event+0x11/0x20 [ 137.253127][ T9682] ? clockevents_program_event+0x196/0x1f0 [ 137.253167][ T9682] __x64_sys_perf_event_open+0x67/0x80 [ 137.253188][ T9682] x64_sys_call+0x1deb/0x2dc0 [ 137.253209][ T9682] do_syscall_64+0xc9/0x1c0 [ 137.253269][ T9682] ? clear_bhb_loop+0x55/0xb0 [ 137.253295][ T9682] ? clear_bhb_loop+0x55/0xb0 [ 137.253368][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.253392][ T9682] RIP: 0033:0x7f552b12d169 [ 137.253407][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.253423][ T9682] RSP: 002b:00007f5529797038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 137.253439][ T9682] RAX: ffffffffffffffda RBX: 00007f552b345fa0 RCX: 00007f552b12d169 [ 137.253448][ T9682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000040 [ 137.253522][ T9682] RBP: 00007f5529797090 R08: 000000000000000a R09: 0000000000000000 [ 137.253533][ T9682] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 137.253543][ T9682] R13: 0000000000000000 R14: 00007f552b345fa0 R15: 00007ffe83a06498 [ 137.253560][ T9682] [ 137.279795][ T9683] loop5: detected capacity change from 0 to 512 [ 137.292953][ T9687] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 137.369277][ T9695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.376384][ T9683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.379882][ T9695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.399442][ T9683] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.495227][ T9703] loop2: detected capacity change from 0 to 512 [ 137.511245][ T9703] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 137.519996][ T9703] EXT4-fs (loop2): failed to open journal device unknown-block(8,105) -6 [ 137.556251][ T7573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.602580][ T9715] loop5: detected capacity change from 0 to 2048 [ 137.613877][ T9717] loop3: detected capacity change from 0 to 512 [ 137.621744][ T9717] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 137.630795][ T9717] EXT4-fs (loop3): failed to open journal device unknown-block(8,105) -6 [ 137.646705][ T9715] loop5: p1 < > p4 [ 137.651251][ T9715] loop5: p4 size 8388608 extends beyond EOD, truncated [ 137.727743][ T9726] loop2: detected capacity change from 0 to 2048 [ 137.741170][ T9737] syzkaller1: entered promiscuous mode [ 137.746881][ T9737] syzkaller1: entered allmulticast mode [ 137.757155][ C1] sd 0:0:1:0: [sda] tag#3944 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 137.767578][ C1] sd 0:0:1:0: [sda] tag#3944 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 137.779343][ T9741] loop5: detected capacity change from 0 to 512 [ 137.924727][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.942465][ T9756] ALSA: seq fatal error: cannot create timer (-22) [ 137.974674][ T9760] loop4: detected capacity change from 0 to 2048 [ 137.987793][ T9762] loop3: detected capacity change from 0 to 1019 [ 138.020365][ T9769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.026651][ T9760] Alternate GPT is invalid, using primary GPT. [ 138.034043][ T9760] loop4: p1 p2 p3 [ 138.039684][ T9769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.077637][ C1] sd 0:0:1:0: [sda] tag#3945 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 138.088063][ C1] sd 0:0:1:0: [sda] tag#3945 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 138.099823][ T9773] loop4: detected capacity change from 0 to 512 [ 138.108956][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.124408][ T9775] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 138.132234][ T9775] __nla_validate_parse: 8 callbacks suppressed [ 138.132246][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2076'. [ 138.149777][ T9775] Illegal XDP return value 695026527 on prog (id 1457) dev N/A, expect packet loss! [ 138.161126][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2075'. [ 138.214056][ T9785] ALSA: seq fatal error: cannot create timer (-22) [ 138.249013][ T9793] netlink: 'syz.4.2084': attribute type 27 has an invalid length. [ 138.285592][ T9799] loop3: detected capacity change from 0 to 128 [ 138.313914][ T9801] loop4: detected capacity change from 0 to 512 [ 138.321289][ T9799] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.333921][ T9799] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.348090][ T9793] batman_adv: batadv0: Interface deactivated: dummy0 [ 138.394445][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.395624][ T9804] loop1: detected capacity change from 0 to 2048 [ 138.410711][ T9793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.420450][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.446626][ T9804] loop1: p1 < > p4 [ 138.451145][ T9804] loop1: p4 size 8388608 extends beyond EOD, truncated [ 138.461581][ T9793] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.470187][ T9793] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.478577][ T9793] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.486946][ T9793] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.521054][ T9809] loop2: detected capacity change from 0 to 128 [ 138.549225][ T9817] ALSA: seq fatal error: cannot create timer (-22) [ 138.614931][ T9829] loop3: detected capacity change from 0 to 2048 [ 138.634805][ T9833] loop1: detected capacity change from 0 to 2048 [ 138.646591][ T9829] loop3: p1 < > p4 [ 138.651163][ T9829] loop3: p4 size 8388608 extends beyond EOD, truncated [ 138.681254][ T9837] loop4: detected capacity change from 0 to 2048 [ 138.688037][ T9833] loop1: p1 < > p4 [ 138.693577][ T9833] loop1: p4 size 8388608 extends beyond EOD, truncated [ 138.798145][ T9851] loop1: detected capacity change from 0 to 512 [ 138.806641][ T9851] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 138.814889][ T9851] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.821718][ T9851] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.836627][ T9851] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 138.843638][ T9851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2105: bg 0: block 40: padding at end of block bitmap is not set [ 138.858102][ T9851] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 138.867416][ T9851] EXT4-fs (loop1): 1 truncate cleaned up [ 138.873471][ T9851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.891185][ T9847] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.2105: corrupted xattr block 31: invalid header [ 138.904660][ T9847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 138.970361][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.989555][ T9857] loop1: detected capacity change from 0 to 1024 [ 139.007661][ T9857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.031268][ T9857] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.2106: Allocating blocks 497-513 which overlap fs metadata [ 139.045569][ T9857] EXT4-fs (loop1): pa ffff88810651b690: logic 256, phys. 385, len 8 [ 139.053592][ T9857] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 139.090750][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.107294][ T9861] ALSA: seq fatal error: cannot create timer (-22) [ 139.162019][ T9867] FAULT_INJECTION: forcing a failure. [ 139.162019][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 139.174723][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.1.2110 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 139.174750][ T9867] Tainted: [W]=WARN [ 139.174757][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.174767][ T9867] Call Trace: [ 139.174773][ T9867] [ 139.174780][ T9867] dump_stack_lvl+0xf2/0x150 [ 139.174810][ T9867] dump_stack+0x15/0x1a [ 139.174829][ T9867] should_fail_ex+0x24a/0x260 [ 139.174852][ T9867] should_failslab+0x8f/0xb0 [ 139.174870][ T9867] kmem_cache_alloc_noprof+0x52/0x320 [ 139.174882][ T9867] ? skb_clone+0x154/0x1f0 [ 139.174974][ T9867] skb_clone+0x154/0x1f0 [ 139.174987][ T9867] __netlink_deliver_tap+0x2bd/0x4f0 [ 139.175007][ T9867] netlink_sendskb+0x126/0x150 [ 139.175098][ T9867] netlink_unicast+0x291/0x670 [ 139.175113][ T9867] netlink_ack+0x4b7/0x4f0 [ 139.175129][ T9867] netlink_rcv_skb+0x19c/0x230 [ 139.175145][ T9867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.175236][ T9867] rtnetlink_rcv+0x1c/0x30 [ 139.175248][ T9867] netlink_unicast+0x599/0x670 [ 139.175263][ T9867] netlink_sendmsg+0x5cc/0x6e0 [ 139.175354][ T9867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.175370][ T9867] __sock_sendmsg+0x140/0x180 [ 139.175387][ T9867] ____sys_sendmsg+0x326/0x4b0 [ 139.175423][ T9867] __sys_sendmsg+0x19d/0x230 [ 139.175442][ T9867] __x64_sys_sendmsg+0x46/0x50 [ 139.175474][ T9867] x64_sys_call+0x2734/0x2dc0 [ 139.175488][ T9867] do_syscall_64+0xc9/0x1c0 [ 139.175504][ T9867] ? clear_bhb_loop+0x55/0xb0 [ 139.175519][ T9867] ? clear_bhb_loop+0x55/0xb0 [ 139.175532][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.175613][ T9867] RIP: 0033:0x7ff9c421d169 [ 139.175622][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.175632][ T9867] RSP: 002b:00007ff9c2887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.175643][ T9867] RAX: ffffffffffffffda RBX: 00007ff9c4435fa0 RCX: 00007ff9c421d169 [ 139.175650][ T9867] RDX: 0000000000000000 RSI: 00004000000007c0 RDI: 0000000000000008 [ 139.175657][ T9867] RBP: 00007ff9c2887090 R08: 0000000000000000 R09: 0000000000000000 [ 139.175677][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.175683][ T9867] R13: 0000000000000000 R14: 00007ff9c4435fa0 R15: 00007fff3197ff88 [ 139.175693][ T9867] [ 139.454004][ T9873] FAULT_INJECTION: forcing a failure. [ 139.454004][ T9873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.467163][ T9873] CPU: 1 UID: 0 PID: 9873 Comm: syz.4.2112 Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 139.467190][ T9873] Tainted: [W]=WARN [ 139.467196][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.467209][ T9873] Call Trace: [ 139.467215][ T9873] [ 139.467223][ T9873] dump_stack_lvl+0xf2/0x150 [ 139.467309][ T9873] dump_stack+0x15/0x1a [ 139.467327][ T9873] should_fail_ex+0x24a/0x260 [ 139.467356][ T9873] should_fail+0xb/0x10 [ 139.467414][ T9873] should_fail_usercopy+0x1a/0x20 [ 139.467442][ T9873] _copy_to_user+0x20/0xa0 [ 139.467461][ T9873] simple_read_from_buffer+0xa0/0x110 [ 139.467526][ T9873] proc_fail_nth_read+0xf9/0x140 [ 139.467552][ T9873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.467637][ T9873] vfs_read+0x19b/0x6f0 [ 139.467704][ T9873] ? __rcu_read_unlock+0x4e/0x70 [ 139.467717][ T9873] ? __fget_files+0x17c/0x1c0 [ 139.467810][ T9873] ksys_read+0xe8/0x1b0 [ 139.467823][ T9873] __x64_sys_read+0x42/0x50 [ 139.467837][ T9873] x64_sys_call+0x2874/0x2dc0 [ 139.467850][ T9873] do_syscall_64+0xc9/0x1c0 [ 139.467884][ T9873] ? clear_bhb_loop+0x55/0xb0 [ 139.468047][ T9873] ? clear_bhb_loop+0x55/0xb0 [ 139.468067][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.468081][ T9873] RIP: 0033:0x7f896bc4bb7c [ 139.468091][ T9873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.468101][ T9873] RSP: 002b:00007f896a2b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.468147][ T9873] RAX: ffffffffffffffda RBX: 00007f896be65fa0 RCX: 00007f896bc4bb7c [ 139.468154][ T9873] RDX: 000000000000000f RSI: 00007f896a2b70a0 RDI: 0000000000000004 [ 139.468160][ T9873] RBP: 00007f896a2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.468166][ T9873] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 139.468173][ T9873] R13: 0000000000000000 R14: 00007f896be65fa0 R15: 00007fff592b4f18 [ 139.468183][ T9873] [ 139.704593][ T9881] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2116'. [ 139.717453][ T9883] Cannot find set identified by id 0 to match [ 139.756412][ T9880] loop2: detected capacity change from 0 to 2048 [ 139.765041][ T9885] netlink: 'syz.5.2118': attribute type 10 has an invalid length. [ 139.775242][ T9888] loop3: detected capacity change from 0 to 2048 [ 139.796683][ T9880] loop2: p1 < > p4 [ 139.802358][ T9880] loop2: p4 size 8388608 extends beyond EOD, truncated [ 139.831308][ T9888] loop3: p2 p3 p7 [ 139.911476][ T9898] loop1: detected capacity change from 0 to 2048 [ 139.925673][ T9907] syzkaller1: entered promiscuous mode [ 139.931364][ T9907] syzkaller1: entered allmulticast mode [ 139.973333][ T9913] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.035645][ T9897] program syz.5.2123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.045134][ T9897] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.071784][ T9897] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 140.134879][ T9928] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2135'. [ 140.172701][ T9928] loop5: detected capacity change from 0 to 2048 [ 140.220408][ T9928] loop5: p2 p3 p7 [ 140.250022][ T9931] loop5: detected capacity change from 0 to 2048 [ 140.286138][ T9931] loop5: p1 < > p4 [ 140.290506][ T9931] loop5: p4 size 8388608 extends beyond EOD, truncated [ 140.375116][ T9942] loop5: detected capacity change from 0 to 512 [ 140.382005][ T9942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.392961][ T9942] EXT4-fs (loop5): 1 truncate cleaned up [ 140.399017][ T9942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.412036][ T9942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.433662][ T9948] ALSA: seq fatal error: cannot create timer (-22) [ 140.589971][ T9953] syzkaller1: entered promiscuous mode [ 140.595570][ T9953] syzkaller1: entered allmulticast mode [ 140.683970][ T3297] ================================================================== [ 140.692058][ T3297] BUG: KCSAN: data-race in fprop_reflect_period_percpu / fprop_reflect_period_percpu [ 140.701510][ T3297] [ 140.703817][ T3297] write to 0xffff888100fbc9c8 of 4 bytes by task 1428 on cpu 0: [ 140.711435][ T3297] fprop_reflect_period_percpu+0x170/0x1a0 [ 140.717231][ T3297] fprop_fraction_percpu+0x77/0x150 [ 140.722418][ T3297] __wb_calc_thresh+0x8b/0x290 [ 140.727174][ T3297] domain_over_bg_thresh+0x22c/0x300 [ 140.732447][ T3297] wb_over_bg_thresh+0xb3/0x110 [ 140.737399][ T3297] wb_workfn+0x643/0x940 [ 140.741654][ T3297] process_scheduled_works+0x4db/0xa20 [ 140.747109][ T3297] worker_thread+0x51d/0x6f0 [ 140.751692][ T3297] kthread+0x4ae/0x520 [ 140.755759][ T3297] ret_from_fork+0x4b/0x60 [ 140.760169][ T3297] ret_from_fork_asm+0x1a/0x30 [ 140.764945][ T3297] [ 140.767258][ T3297] read to 0xffff888100fbc9c8 of 4 bytes by task 3297 on cpu 1: [ 140.774790][ T3297] fprop_reflect_period_percpu+0x32/0x1a0 [ 140.780519][ T3297] __fprop_add_percpu_max+0x58/0x180 [ 140.785804][ T3297] __wb_writeout_add+0x77/0x1d0 [ 140.790651][ T3297] __folio_end_writeback+0x20d/0x490 [ 140.795934][ T3297] folio_end_writeback+0xca/0x3c0 [ 140.800950][ T3297] __block_write_full_folio+0x5bf/0x8c0 [ 140.806493][ T3297] block_write_full_folio+0x293/0x2b0 [ 140.811871][ T3297] write_cache_pages+0x62/0x100 [ 140.816718][ T3297] blkdev_writepages+0x59/0x90 [ 140.821477][ T3297] do_writepages+0x1d8/0x480 [ 140.826064][ T3297] filemap_flush+0xe7/0x120 [ 140.830571][ T3297] sync_blockdev_nowait+0x29/0x40 [ 140.835591][ T3297] sync_filesystem+0xe3/0x190 [ 140.840298][ T3297] generic_shutdown_super+0x46/0x220 [ 140.845579][ T3297] kill_block_super+0x2a/0x70 [ 140.850250][ T3297] deactivate_locked_super+0x7d/0x1c0 [ 140.855614][ T3297] deactivate_super+0x9f/0xb0 [ 140.860285][ T3297] cleanup_mnt+0x268/0x2e0 [ 140.864691][ T3297] __cleanup_mnt+0x19/0x20 [ 140.869093][ T3297] task_work_run+0x13a/0x1a0 [ 140.873678][ T3297] syscall_exit_to_user_mode+0xa8/0x120 [ 140.879221][ T3297] do_syscall_64+0xd6/0x1c0 [ 140.883722][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.889616][ T3297] [ 140.891944][ T3297] value changed: 0x00000025 -> 0x00000026 [ 140.897659][ T3297] [ 140.899981][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 140.906129][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Tainted: G W 6.14.0-rc5-syzkaller-00109-g0f52fd4f67c6 #0 [ 140.918449][ T3297] Tainted: [W]=WARN [ 140.922239][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.932284][ T3297] ==================================================================