last executing test programs: 47.284470748s ago: executing program 2 (id=193): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) 47.239306058s ago: executing program 2 (id=196): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@quota}, {@init_itable}, {@noblock_validity}, {@barrier}, {@barrier}, {@block_validity}]}, 0x1, 0x55a, &(0x7f0000000b80)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r10, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000000000000000000000c3000005"]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='mm_lru_insertion\x00', r2}, 0xffffff5a) munlock(&(0x7f0000cf4000/0x3000)=nil, 0x3000) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 46.210612864s ago: executing program 2 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000ac1e00010000000000000000000000000900000000000000000000000000000004000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736d332d636500"/316], 0x184}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000c40)=ANY=[@ANYRES16], &(0x7f0000000000)=""/142, 0x26, 0x8e, 0x5, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f0000000500)=""/151, 0x200}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1410, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8898}, 0x40008800) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x1207000, 0x800, 0x10, 0x1}, 0x20) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x9, &(0x7f0000000140)="3201e8815826992ee5") bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800160000e7057ba2f8ff00000000bf8b00000000000007000000f8ffffffb7030000080000f7b604000000000000850000001600000095f925d7894e4a8e5c6639956e853118b8e9f01109d60841ea4141348583e2c78f5785da47427b5f109440403dd583eaf3d8e11e67f2c04e4e5295bc5876d7a9a3311e582194d97b9389a2fc1c93a904dfdb5fd8a149fe3c98df77d55976ce9479d06ac82c4f6403a0883f0aa224bdc073dc4751964183e406273bfcb30a322eda54edd0f69f32476f047792d5faf0c48ab14faf57025df972a0077a0a384a8618ec92"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) r9 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) shmdt(r9) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40011}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000600)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000640)) 45.265726749s ago: executing program 2 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x100) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") open(&(0x7f0000000480)='.\x00', 0x0, 0x0) timer_create(0x3, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 43.95194908s ago: executing program 2 (id=228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x100) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") open(&(0x7f0000000480)='.\x00', 0x0, 0x0) timer_create(0x3, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 43.655564305s ago: executing program 2 (id=234): r0 = getpid() setreuid(0xee00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd70000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES32=r3, @ANYBLOB="2db91a0000000400000003f9f08ba1266b1633fea0936b876d977e0b31b058a69905a591069865c68e9dddbf6f326b663d7d455f80f5259591d64e9503a3ffa2e22292ca040491626e529ca5fc25008d5d11f39a37"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000040) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/70, 0x300000, 0xc00, 0x80000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x2, 0x0, 0xdd5c, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r7, r7, 0x2) dup2(r6, r7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0x11) r8 = getpgid(0x0) getpgid(r8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000f80), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 43.631577165s ago: executing program 32 (id=234): r0 = getpid() setreuid(0xee00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd70000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES32=r3, @ANYBLOB="2db91a0000000400000003f9f08ba1266b1633fea0936b876d977e0b31b058a69905a591069865c68e9dddbf6f326b663d7d455f80f5259591d64e9503a3ffa2e22292ca040491626e529ca5fc25008d5d11f39a37"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000040) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/70, 0x300000, 0xc00, 0x80000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x2, 0x0, 0xdd5c, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r7, r7, 0x2) dup2(r6, r7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0x11) r8 = getpgid(0x0) getpgid(r8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000f80), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.479427077s ago: executing program 4 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x141001, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 1.464108187s ago: executing program 4 (id=1164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) rt_sigtimedwait(&(0x7f0000000600)={[0xffffffffffff7ffa]}, 0x0, 0x0, 0x8) 1.226772031s ago: executing program 1 (id=1176): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)={0x1}) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r2, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) 1.217817941s ago: executing program 0 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000018dc07db94"], 0x0) 1.201801372s ago: executing program 3 (id=1178): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.186515772s ago: executing program 0 (id=1179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000012c0)='net/raw6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000001300)=""/4090, 0xffa}], 0x1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan0\x00'}, 0x18) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000300)={r8, 0x6, 0x8}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r8, 0x4}, &(0x7f0000000100)=0x8) setxattr$incfs_id(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) 1.141968492s ago: executing program 1 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x3, 0x2, 0x6, 0x7, 0x3, 0x80, {0xfc, 0x9, "30ea56c4f61cab1d"}, 0x7, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.141560522s ago: executing program 3 (id=1181): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) unshare(0x24040000) unshare(0x2c020400) 1.034866404s ago: executing program 3 (id=1184): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x27) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x80, 0x6d, 0x4}}, 0x20, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x7}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001cc0), 0x46040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 1.025832164s ago: executing program 1 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000004c0)="01000722625a900ede290f00015b097ead85847837", 0x15, r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r8, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1000000, @rand_addr=' \x01\x00'}}}, 0x32) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 991.084455ms ago: executing program 3 (id=1186): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 976.374015ms ago: executing program 1 (id=1188): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xabb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 952.424916ms ago: executing program 1 (id=1190): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=0x6) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}}, 0x4040010) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x19, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r9 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 932.859036ms ago: executing program 3 (id=1191): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x0], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) getpid() syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 550.583831ms ago: executing program 4 (id=1196): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x27) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x80, 0x6d, 0x4}}, 0x20, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x7}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001cc0), 0x46040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 433.803384ms ago: executing program 5 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xabb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x803, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write(r6, &(0x7f0000000740)="edab3a6bbe1ea71c2e2c279836e027be724cef88d92bef6a354c77ee75360a5e9d14b02fea9a24cfb2c97a8f8480a0777108cd2bed1e171d14d57211a4bc27db8b7bbd11b53af120c864246738df12d19488d06802512d6d248310ab50165d870f84cd2d92ae969fe6058f9b0503be56d7bda77724a2e3144436102623c6463b978f46207a79f601fd7b0b389aeb2d95f14794920b8010e7f256e810bc49961a3d81419fb3dc098255ebf944f6514dd189889e5b65d77400d4c4e96da14035d415bf64f581517d6c3c58966ea3a1f84df123cc2e7ec8fc416583bf3ba8274c87", 0xe0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 337.434485ms ago: executing program 4 (id=1198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000004c0)="01000722625a900ede290f00015b097ead85847837", 0x15, r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r8, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1000000, @rand_addr=' \x01\x00'}}}, 0x32) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 336.954685ms ago: executing program 5 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 314.640895ms ago: executing program 5 (id=1200): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x818f, 0x0, 0x0, 0x0, 0xdfaa}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 307.906485ms ago: executing program 0 (id=1201): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 295.761606ms ago: executing program 4 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000018dc07db94"], 0x0) 277.946966ms ago: executing program 4 (id=1203): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x80, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 256.163986ms ago: executing program 0 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) 221.894627ms ago: executing program 5 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) syz_open_pts(r2, 0x0) 180.235918ms ago: executing program 0 (id=1206): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) unshare(0x2c020400) 179.877887ms ago: executing program 5 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @random="c0f75472268c"}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 141.702428ms ago: executing program 0 (id=1208): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@noquota}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nolazytime}]}, 0xfe, 0x264, &(0x7f0000000700)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x28541, 0x14b) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) creat(&(0x7f0000000100)='./file0\x00', 0x4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 39.1334ms ago: executing program 5 (id=1209): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000060000000100000f030000000300100002000080ffffffff8f54b7030000000000000f010000004000000000000061"], 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x818f, 0x0, 0x0, 0x0, 0xdfaa}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 21.40164ms ago: executing program 1 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xabb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x803, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write(r6, &(0x7f0000000740)="edab3a6bbe1ea71c2e2c279836e027be724cef88d92bef6a354c77ee75360a5e9d14b02fea9a24cfb2c97a8f8480a0777108cd2bed1e171d14d57211a4bc27db8b7bbd11b53af120c864246738df12d19488d06802512d6d248310ab50165d870f84cd2d92ae969fe6058f9b0503be56d7bda77724a2e3144436102623c6463b978f46207a79f601fd7b0b389aeb2d95f14794920b8010e7f256e810bc49961a3d81419fb3dc098255ebf944f6514dd189889e5b65d77400d4c4e96da14035d415bf64f581517d6c3c58966ea3a1f84df123cc2e7ec8fc416583bf3ba8274c87", 0xe0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 0s ago: executing program 3 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) kernel console output (not intermixed with test programs): ithout journal. Quota mode: writeback. [ 37.157215][ T29] audit: type=1400 audit(1742976993.504:509): avc: denied { create } for pid=3874 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.164002][ T29] audit: type=1326 audit(1742976993.504:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5850d169 code=0x7ffc0000 [ 37.362718][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.428095][ T3896] loop1: detected capacity change from 0 to 512 [ 37.428550][ T3896] EXT4-fs: Ignoring removed nobh option [ 37.435313][ T3896] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 40192 [ 37.475703][ T3900] can0: slcan on ttyS3. [ 37.581862][ T3900] can0 (unregistered): slcan off ttyS3. [ 37.604862][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.620049][ T3908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.638222][ T3910] capability: warning: `syz.0.79' uses 32-bit capabilities (legacy support in use) [ 37.703935][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.750563][ T3920] loop9: detected capacity change from 0 to 7 [ 37.756923][ T3915] loop3: detected capacity change from 0 to 512 [ 37.757192][ T3920] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.771573][ T3920] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.779567][ T3920] loop9: unable to read partition table [ 37.781885][ T3915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.795429][ T3920] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 37.795429][ T3920] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 37.799470][ T3915] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.825481][ T3922] syz.0.82 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.062892][ T3950] loop1: detected capacity change from 0 to 512 [ 38.085385][ T3950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.098587][ T3950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.86: bg 0: block 248: padding at end of block bitmap is not set [ 38.136380][ T3950] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.86: Failed to acquire dquot type 1 [ 38.160112][ T3950] EXT4-fs (loop1): 1 truncate cleaned up [ 38.173576][ T3950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.194424][ T3975] can0: slcan on ttyS3. [ 38.226486][ T3950] syz.1.86 (3950) used greatest stack depth: 9216 bytes left [ 38.235751][ T3975] can0 (unregistered): slcan off ttyS3. [ 38.301026][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.310343][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.328168][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.434448][ T3996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.795663][ T4041] __nla_validate_parse: 15 callbacks suppressed [ 38.795679][ T4041] netlink: 112 bytes leftover after parsing attributes in process `syz.4.94'. [ 38.905212][ T4043] loop0: detected capacity change from 0 to 512 [ 39.019186][ T4093] FAULT_INJECTION: forcing a failure. [ 39.019186][ T4093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.032336][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.3.96 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 39.032369][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.032384][ T4093] Call Trace: [ 39.032392][ T4093] [ 39.032401][ T4093] dump_stack_lvl+0xf6/0x150 [ 39.032430][ T4093] dump_stack+0x15/0x1a [ 39.032449][ T4093] should_fail_ex+0x261/0x270 [ 39.032547][ T4093] should_fail+0xb/0x10 [ 39.032572][ T4093] should_fail_usercopy+0x1a/0x20 [ 39.032602][ T4093] strncpy_from_user+0x25/0x230 [ 39.032645][ T4093] __se_sys_add_key+0x80/0x330 [ 39.032680][ T4093] __x64_sys_add_key+0x67/0x80 [ 39.032753][ T4093] x64_sys_call+0x1f10/0x2e10 [ 39.032780][ T4093] do_syscall_64+0xc9/0x1c0 [ 39.032820][ T4093] ? clear_bhb_loop+0x25/0x80 [ 39.032847][ T4093] ? clear_bhb_loop+0x25/0x80 [ 39.032873][ T4093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.032974][ T4093] RIP: 0033:0x7f8c5850d169 [ 39.032989][ T4093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.033005][ T4093] RSP: 002b:00007f8c56b71038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 39.033079][ T4093] RAX: ffffffffffffffda RBX: 00007f8c58725fa0 RCX: 00007f8c5850d169 [ 39.033095][ T4093] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 39.033110][ T4093] RBP: 00007f8c56b71090 R08: ffffffffffffffff R09: 0000000000000000 [ 39.033125][ T4093] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001 [ 39.033138][ T4093] R13: 0000000000000000 R14: 00007f8c58725fa0 R15: 00007ffc4d1f9238 [ 39.033235][ T4093] [ 39.036826][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.241051][ T4118] set match dimension is over the limit! [ 39.251320][ T4043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.318841][ T4127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 39.327787][ T4127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 39.382132][ T4127] gretap0: entered promiscuous mode [ 39.411078][ T4127] batadv_slave_1: entered promiscuous mode [ 39.434820][ T4132] netlink: 132 bytes leftover after parsing attributes in process `syz.3.99'. [ 39.477181][ T3996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.508737][ T4152] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 39.532653][ T4150] can0: slcan on ttyS3. [ 39.539405][ T3996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.552360][ T4149] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 39.596166][ T4150] can0 (unregistered): slcan off ttyS3. [ 39.614579][ T3996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.715262][ T4173] loop3: detected capacity change from 0 to 512 [ 39.746324][ T4173] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.753582][ T4173] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.106: bg 0: block 248: padding at end of block bitmap is not set [ 39.769845][ T4173] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.106: Failed to acquire dquot type 1 [ 39.785229][ T4173] EXT4-fs (loop3): 1 truncate cleaned up [ 39.798131][ T3996] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.810116][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.838712][ T3996] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.890820][ T3996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.901357][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.919159][ T3996] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.085059][ T4186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 40.341176][ C0] Dropped outbound packet type=700 [ 40.376012][ T4208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.393238][ T4208] program syz.4.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.570607][ T4228] can0: slcan on ttyS3. [ 40.575089][ T4225] FAULT_INJECTION: forcing a failure. [ 40.575089][ T4225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.588230][ T4225] CPU: 1 UID: 0 PID: 4225 Comm: syz.1.115 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 40.588263][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.588278][ T4225] Call Trace: [ 40.588366][ T4225] [ 40.588375][ T4225] dump_stack_lvl+0xf6/0x150 [ 40.588401][ T4225] dump_stack+0x15/0x1a [ 40.588420][ T4225] should_fail_ex+0x261/0x270 [ 40.588493][ T4225] should_fail+0xb/0x10 [ 40.588512][ T4225] should_fail_usercopy+0x1a/0x20 [ 40.588537][ T4225] _copy_to_user+0x20/0xa0 [ 40.588565][ T4225] simple_read_from_buffer+0xb2/0x130 [ 40.588650][ T4225] proc_fail_nth_read+0x103/0x140 [ 40.588681][ T4225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.588703][ T4225] vfs_read+0x1b2/0x710 [ 40.588783][ T4225] ? __rcu_read_unlock+0x4e/0x70 [ 40.588816][ T4225] ? __fget_files+0x186/0x1c0 [ 40.588872][ T4225] ksys_read+0xeb/0x1b0 [ 40.588909][ T4225] __x64_sys_read+0x42/0x50 [ 40.588946][ T4225] x64_sys_call+0x2a3b/0x2e10 [ 40.588970][ T4225] do_syscall_64+0xc9/0x1c0 [ 40.589071][ T4225] ? clear_bhb_loop+0x25/0x80 [ 40.589097][ T4225] ? clear_bhb_loop+0x25/0x80 [ 40.589125][ T4225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.589150][ T4225] RIP: 0033:0x7f154a9dbb7c [ 40.589207][ T4225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.589228][ T4225] RSP: 002b:00007f1549047030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.589247][ T4225] RAX: ffffffffffffffda RBX: 00007f154abf5fa0 RCX: 00007f154a9dbb7c [ 40.589261][ T4225] RDX: 000000000000000f RSI: 00007f15490470a0 RDI: 0000000000000006 [ 40.589327][ T4225] RBP: 00007f1549047090 R08: 0000000000000000 R09: 0000000000000000 [ 40.589341][ T4225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.589355][ T4225] R13: 0000000000000000 R14: 00007f154abf5fa0 R15: 00007ffd19f7eb58 [ 40.589376][ T4225] [ 40.793651][ T4227] loop0: detected capacity change from 0 to 128 [ 40.831964][ T4228] can0 (unregistered): slcan off ttyS3. [ 40.863712][ T4232] loop1: detected capacity change from 0 to 1024 [ 40.925466][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 40.928598][ T4232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.934420][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 40.978072][ T4236] loop4: detected capacity change from 0 to 512 [ 41.000211][ T4236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.022470][ T4236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.119: bg 0: block 248: padding at end of block bitmap is not set [ 41.054995][ T4236] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.119: Failed to acquire dquot type 1 [ 41.067872][ T4236] EXT4-fs (loop4): 1 truncate cleaned up [ 41.099056][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.136792][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.167829][ T4252] FAULT_INJECTION: forcing a failure. [ 41.167829][ T4252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.181102][ T4252] CPU: 1 UID: 0 PID: 4252 Comm: syz.4.125 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 41.181133][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.181147][ T4252] Call Trace: [ 41.181153][ T4252] [ 41.181160][ T4252] dump_stack_lvl+0xf6/0x150 [ 41.181251][ T4252] dump_stack+0x15/0x1a [ 41.181269][ T4252] should_fail_ex+0x261/0x270 [ 41.181297][ T4252] should_fail+0xb/0x10 [ 41.181320][ T4252] should_fail_usercopy+0x1a/0x20 [ 41.181343][ T4252] _copy_to_user+0x20/0xa0 [ 41.181410][ T4252] simple_read_from_buffer+0xb2/0x130 [ 41.181445][ T4252] proc_fail_nth_read+0x103/0x140 [ 41.181467][ T4252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.181519][ T4252] vfs_read+0x1b2/0x710 [ 41.181611][ T4252] ? __rcu_read_unlock+0x4e/0x70 [ 41.181649][ T4252] ? __fget_files+0x186/0x1c0 [ 41.181684][ T4252] ksys_read+0xeb/0x1b0 [ 41.181797][ T4252] __x64_sys_read+0x42/0x50 [ 41.181834][ T4252] x64_sys_call+0x2a3b/0x2e10 [ 41.181859][ T4252] do_syscall_64+0xc9/0x1c0 [ 41.181909][ T4252] ? clear_bhb_loop+0x25/0x80 [ 41.181935][ T4252] ? clear_bhb_loop+0x25/0x80 [ 41.181960][ T4252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.181983][ T4252] RIP: 0033:0x7f0e6b17bb7c [ 41.182002][ T4252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.182048][ T4252] RSP: 002b:00007f0e697e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.182071][ T4252] RAX: ffffffffffffffda RBX: 00007f0e6b395fa0 RCX: 00007f0e6b17bb7c [ 41.182085][ T4252] RDX: 000000000000000f RSI: 00007f0e697e70a0 RDI: 0000000000000006 [ 41.182099][ T4252] RBP: 00007f0e697e7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.182112][ T4252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.182126][ T4252] R13: 0000000000000000 R14: 00007f0e6b395fa0 R15: 00007ffccaf85568 [ 41.182163][ T4252] [ 41.376677][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 41.376694][ T29] audit: type=1326 audit(1742976997.534:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.406648][ T29] audit: type=1326 audit(1742976997.534:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.430321][ T29] audit: type=1326 audit(1742976997.534:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.442755][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.453722][ T29] audit: type=1326 audit(1742976997.534:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.501342][ T29] audit: type=1326 audit(1742976997.764:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.524770][ T29] audit: type=1326 audit(1742976997.764:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.548256][ T29] audit: type=1326 audit(1742976997.784:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49fefc4127 code=0x7ffc0000 [ 41.571604][ T29] audit: type=1326 audit(1742976997.784:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49fef69359 code=0x7ffc0000 [ 41.594847][ T29] audit: type=1326 audit(1742976997.784:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fefcd169 code=0x7ffc0000 [ 41.618097][ T29] audit: type=1326 audit(1742976997.814:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.2.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49fefc4127 code=0x7ffc0000 [ 41.747839][ T2967] IPVS: starting estimator thread 0... [ 41.841654][ T4268] IPVS: using max 2544 ests per chain, 127200 per kthread [ 42.236198][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.255162][ T3376] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.272039][ T4272] loop3: detected capacity change from 0 to 128 [ 42.301408][ T4272] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.323211][ T4272] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.624313][ T4297] loop4: detected capacity change from 0 to 256 [ 42.691981][ T4297] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.815248][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 42.824120][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 42.836949][ T4312] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 42.852923][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 42.931552][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.259741][ T4356] loop0: detected capacity change from 0 to 128 [ 43.269561][ T4356] EXT4-fs: Ignoring removed nobh option [ 43.320406][ T4356] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.370490][ T4356] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.570248][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.716915][ T4393] FAULT_INJECTION: forcing a failure. [ 43.716915][ T4393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.730065][ T4393] CPU: 1 UID: 0 PID: 4393 Comm: syz.4.161 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 43.730096][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.730107][ T4393] Call Trace: [ 43.730113][ T4393] [ 43.730120][ T4393] dump_stack_lvl+0xf6/0x150 [ 43.730141][ T4393] dump_stack+0x15/0x1a [ 43.730156][ T4393] should_fail_ex+0x261/0x270 [ 43.730179][ T4393] should_fail+0xb/0x10 [ 43.730250][ T4393] should_fail_usercopy+0x1a/0x20 [ 43.730280][ T4393] strncpy_from_user+0x25/0x230 [ 43.730321][ T4393] __se_sys_add_key+0x80/0x330 [ 43.730349][ T4393] __x64_sys_add_key+0x67/0x80 [ 43.730419][ T4393] x64_sys_call+0x1f10/0x2e10 [ 43.730439][ T4393] do_syscall_64+0xc9/0x1c0 [ 43.730471][ T4393] ? clear_bhb_loop+0x25/0x80 [ 43.730496][ T4393] ? clear_bhb_loop+0x25/0x80 [ 43.730516][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.730565][ T4393] RIP: 0033:0x7f0e6b17d169 [ 43.730583][ T4393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.730604][ T4393] RSP: 002b:00007f0e697e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 43.730623][ T4393] RAX: ffffffffffffffda RBX: 00007f0e6b395fa0 RCX: 00007f0e6b17d169 [ 43.730641][ T4393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.730652][ T4393] RBP: 00007f0e697e7090 R08: ffffffffffffffff R09: 0000000000000000 [ 43.730663][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.730731][ T4393] R13: 0000000000000000 R14: 00007f0e6b395fa0 R15: 00007ffccaf85568 [ 43.730753][ T4393] [ 43.960167][ T4389] loop2: detected capacity change from 0 to 512 [ 44.040840][ T4389] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.051289][ T4389] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.160: bg 0: block 248: padding at end of block bitmap is not set [ 44.092666][ T4389] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.160: Failed to acquire dquot type 1 [ 44.136609][ T4389] EXT4-fs (loop2): 1 truncate cleaned up [ 44.152109][ T4389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.191989][ T4389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.219118][ T4435] loop4: detected capacity change from 0 to 128 [ 44.238781][ T4435] EXT4-fs: Ignoring removed nobh option [ 44.248088][ T4435] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.267070][ T4435] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.280612][ T4407] loop0: detected capacity change from 0 to 128 [ 44.293154][ T4407] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.305842][ T4407] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.312672][ T4443] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 44.355825][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.382304][ T4446] geneve2: entered promiscuous mode [ 44.387565][ T4446] geneve2: entered allmulticast mode [ 44.420801][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.421166][ T4448] SELinux: policydb version -843889552 does not match my version range 15-34 [ 44.438962][ T4448] SELinux: failed to load policy [ 44.520699][ T4452] can0: slcan on ttyS3. [ 44.571695][ T4452] can0 (unregistered): slcan off ttyS3. [ 44.591584][ T4454] can0: slcan on ttyS3. [ 44.600103][ T4470] loop2: detected capacity change from 0 to 256 [ 44.655153][ T4454] can0 (unregistered): slcan off ttyS3. [ 44.674079][ T4454] can0: slcan on ttyS3. [ 44.773129][ T4454] can0 (unregistered): slcan off ttyS3. [ 44.833396][ T4496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4496 comm=gtp [ 44.866812][ T4500] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 44.875236][ T4500] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 44.897183][ T4503] loop4: detected capacity change from 0 to 1764 [ 44.904392][ T4503] iso9660: Unknown parameter 'ioccruftÀ' [ 44.936712][ T4505] FAULT_INJECTION: forcing a failure. [ 44.936712][ T4505] name failslab, interval 1, probability 0, space 0, times 0 [ 44.949594][ T4505] CPU: 1 UID: 0 PID: 4505 Comm: syz.0.184 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 44.949657][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.949672][ T4505] Call Trace: [ 44.949679][ T4505] [ 44.949688][ T4505] dump_stack_lvl+0xf6/0x150 [ 44.949714][ T4505] dump_stack+0x15/0x1a [ 44.949757][ T4505] should_fail_ex+0x261/0x270 [ 44.949786][ T4505] should_failslab+0x8f/0xb0 [ 44.949836][ T4505] kmem_cache_alloc_noprof+0x59/0x340 [ 44.949865][ T4505] ? __break_lease+0x7b/0xf30 [ 44.949945][ T4505] __break_lease+0x7b/0xf30 [ 44.950055][ T4505] ? path_openat+0x1ab2/0x2000 [ 44.950088][ T4505] ? make_vfsgid+0x52/0xa0 [ 44.950118][ T4505] vfs_set_acl+0x2b5/0x720 [ 44.950157][ T4505] do_set_acl+0x95/0x130 [ 44.950260][ T4505] file_setxattr+0x172/0x1b0 [ 44.950282][ T4505] path_setxattrat+0x2c8/0x320 [ 44.950328][ T4505] __x64_sys_fsetxattr+0x6d/0x80 [ 44.950356][ T4505] x64_sys_call+0x2bad/0x2e10 [ 44.950400][ T4505] do_syscall_64+0xc9/0x1c0 [ 44.950424][ T4505] ? clear_bhb_loop+0x25/0x80 [ 44.950446][ T4505] ? clear_bhb_loop+0x25/0x80 [ 44.950466][ T4505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.950540][ T4505] RIP: 0033:0x7f613fa3d169 [ 44.950555][ T4505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.950655][ T4505] RSP: 002b:00007f613e0a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 44.950675][ T4505] RAX: ffffffffffffffda RBX: 00007f613fc55fa0 RCX: 00007f613fa3d169 [ 44.950687][ T4505] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 44.950697][ T4505] RBP: 00007f613e0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.950708][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.950718][ T4505] R13: 0000000000000000 R14: 00007f613fc55fa0 R15: 00007ffed5a34268 [ 44.950735][ T4505] [ 45.188029][ T4507] netlink: 'syz.0.185': attribute type 7 has an invalid length. [ 45.196065][ T4507] __nla_validate_parse: 17 callbacks suppressed [ 45.196076][ T4507] netlink: 140 bytes leftover after parsing attributes in process `syz.0.185'. [ 45.240305][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 45.249281][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 45.278886][ T4516] loop1: detected capacity change from 0 to 512 [ 45.303968][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 45.321136][ T4518] IPVS: Unknown mcast interface: macvlan0 [ 45.500384][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 45.517435][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 45.557411][ T4535] loop2: detected capacity change from 0 to 1024 [ 45.598289][ T4535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.627204][ T4535] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 45.654072][ T4531] loop1: detected capacity change from 0 to 128 [ 45.662358][ T4531] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.675930][ T4531] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.754799][ T4548] loop3: detected capacity change from 0 to 512 [ 45.763693][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.789226][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 45.798681][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 45.844877][ T4554] FAULT_INJECTION: forcing a failure. [ 45.844877][ T4554] name failslab, interval 1, probability 0, space 0, times 0 [ 45.854261][ T3459] IPVS: starting estimator thread 0... [ 45.857573][ T4554] CPU: 0 UID: 0 PID: 4554 Comm: syz.1.204 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 45.857608][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.857623][ T4554] Call Trace: [ 45.857632][ T4554] [ 45.857642][ T4554] dump_stack_lvl+0xf6/0x150 [ 45.857671][ T4554] dump_stack+0x15/0x1a [ 45.857691][ T4554] should_fail_ex+0x261/0x270 [ 45.857801][ T4554] should_failslab+0x8f/0xb0 [ 45.857825][ T4554] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 45.857858][ T4554] ? __alloc_skb+0x10d/0x320 [ 45.857896][ T4554] __alloc_skb+0x10d/0x320 [ 45.858010][ T4554] ? audit_log_start+0x363/0x6d0 [ 45.858036][ T4554] audit_log_start+0x37e/0x6d0 [ 45.858061][ T4554] ? kstrtouint+0x7b/0xc0 [ 45.858086][ T4554] audit_seccomp+0x4b/0x130 [ 45.858137][ T4554] __seccomp_filter+0x694/0x10e0 [ 45.858172][ T4554] ? vfs_write+0x669/0x950 [ 45.858210][ T4554] ? putname+0xe1/0x100 [ 45.858293][ T4554] __secure_computing+0x7e/0x160 [ 45.858367][ T4554] syscall_trace_enter+0xcf/0x1f0 [ 45.858399][ T4554] ? fpregs_assert_state_consistent+0x83/0xa0 [ 45.858522][ T4554] do_syscall_64+0xaa/0x1c0 [ 45.858641][ T4554] ? clear_bhb_loop+0x25/0x80 [ 45.858667][ T4554] ? clear_bhb_loop+0x25/0x80 [ 45.858692][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.858719][ T4554] RIP: 0033:0x7f154a9dd169 [ 45.858736][ T4554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.858790][ T4554] RSP: 002b:00007f1549047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 45.858812][ T4554] RAX: ffffffffffffffda RBX: 00007f154abf5fa0 RCX: 00007f154a9dd169 [ 45.858827][ T4554] RDX: 0000000000000000 RSI: 0000000000000066 RDI: 0000000000000010 [ 45.858841][ T4554] RBP: 00007f1549047090 R08: 0000000000000000 R09: 0000000000000000 [ 45.858856][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.858870][ T4554] R13: 0000000000000000 R14: 00007f154abf5fa0 R15: 00007ffd19f7eb58 [ 45.858892][ T4554] [ 46.107165][ T4562] can0: slcan on ttyS3. [ 46.161940][ T4557] IPVS: using max 2544 ests per chain, 127200 per kthread [ 46.411982][ T4562] can0 (unregistered): slcan off ttyS3. [ 46.532937][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.578694][ T29] kauditd_printk_skb: 993 callbacks suppressed [ 46.578712][ T29] audit: type=1400 audit(1742977002.854:1941): avc: denied { unmount } for pid=3578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.604719][ T29] audit: type=1400 audit(1742977002.914:1942): avc: denied { create } for pid=4597 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.624184][ T29] audit: type=1400 audit(1742977002.924:1943): avc: denied { write } for pid=4597 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.668838][ T29] audit: type=1400 audit(1742977003.004:1944): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.690953][ T29] audit: type=1400 audit(1742977003.004:1945): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.712624][ T29] audit: type=1400 audit(1742977003.004:1946): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.734910][ T29] audit: type=1400 audit(1742977003.004:1947): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.757816][ T29] audit: type=1400 audit(1742977003.004:1948): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.780637][ T29] audit: type=1400 audit(1742977003.004:1949): avc: denied { map_create } for pid=4597 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.799766][ T29] audit: type=1400 audit(1742977003.004:1950): avc: denied { create } for pid=4597 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.882412][ T4626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=4626 comm=syz.2.210 [ 46.941888][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 46.950728][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 47.028041][ T4654] geneve2: entered promiscuous mode [ 47.033456][ T4654] geneve2: entered allmulticast mode [ 47.363997][ T4700] can0: slcan on ttyS3. [ 47.560584][ T4725] loop2: detected capacity change from 0 to 512 [ 47.567155][ T4700] can0 (unregistered): slcan off ttyS3. [ 47.655771][ T4725] EXT4-fs (loop2): orphan cleanup on readonly fs Mar 26 08:16:43 syzkaller kern.info kernel: [ 47.655771][ T4725] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.699162][ T4725] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.221: bg 0: block 248: padding at end of block bitmap is not set [ 47.750419][ T4725] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.221: Failed to acquire dquot type 1 [ 47.776218][ T4725] EXT4-fs (loop2): 1 truncate cleaned up [ 47.913588][ T4725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.767993][ T3578] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 48.807526][ T3578] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 48.960209][ T4781] can0: slcan on ttyS3. [ 49.012698][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.045684][ T4781] can0 (unregistered): slcan off ttyS3. [ 49.479442][ T4827] chnl_net:caif_netlink_parms(): no params data found [ 49.631531][ T4900] netlink: 'syz.3.244': attribute type 8 has an invalid length. [ 49.788871][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.796162][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.812532][ T4827] bridge_slave_0: entered allmulticast mode [ 49.821963][ T4827] bridge_slave_0: entered promiscuous mode [ 49.836515][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.843691][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.869109][ T4827] bridge_slave_1: entered allmulticast mode [ 49.877786][ T4827] bridge_slave_1: entered promiscuous mode [ 49.929833][ T4827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.940721][ T4827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.979213][ T4827] team0: Port device team_slave_0 added [ 49.990219][ T4827] team0: Port device team_slave_1 added [ 50.056750][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.063885][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.090033][ T4827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.111288][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.118320][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.144284][ T4827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.184620][ T4827] hsr_slave_0: entered promiscuous mode [ 50.192137][ T4827] hsr_slave_1: entered promiscuous mode [ 50.208186][ T4827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.218025][ T4827] Cannot create hsr debugfs directory [ 50.334810][ T4827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.350191][ T4827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.365975][ T4827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.381334][ T4827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.403832][ T4938] loop1: detected capacity change from 0 to 128 [ 50.459890][ T4938] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.465009][ T4827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.486561][ T4938] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.523976][ T4827] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.534030][ T1719] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.541168][ T1719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.561198][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.568293][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.612686][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.628251][ T4059] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.708344][ T4827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.735232][ T4059] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.755003][ T4962] __nla_validate_parse: 9 callbacks suppressed [ 50.755018][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 50.770045][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 50.835253][ T4059] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.850308][ T4973] netlink: 'syz.0.265': attribute type 8 has an invalid length. [ 50.875894][ T4974] smc: net device bond0 applied user defined pnetid SYZ0 [ 50.883617][ T4974] smc: net device bond0 erased user defined pnetid SYZ0 [ 50.893118][ T4059] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.029681][ T4059] bridge_slave_1: left allmulticast mode [ 51.035478][ T4059] bridge_slave_1: left promiscuous mode [ 51.041142][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.070539][ T4059] bridge_slave_0: left allmulticast mode [ 51.076281][ T4059] bridge_slave_0: left promiscuous mode [ 51.082083][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.214934][ T4059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.229351][ T4059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.244768][ T4059] bond0 (unregistering): Released all slaves [ 51.254357][ T4827] veth0_vlan: entered promiscuous mode [ 51.306664][ T4827] veth1_vlan: entered promiscuous mode [ 51.313450][ T4059] IPVS: stopping master sync thread 4312 ... [ 51.440141][ T4059] hsr_slave_0: left promiscuous mode [ 51.449307][ T4059] hsr_slave_1: left promiscuous mode [ 51.455623][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.463078][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.472045][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.479457][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.494538][ T4059] veth1_macvtap: left promiscuous mode [ 51.501650][ T4059] veth0_macvtap: left promiscuous mode [ 51.507182][ T4059] veth1_vlan: left promiscuous mode [ 51.521711][ T4059] veth0_vlan: left promiscuous mode [ 51.617596][ T4059] team0 (unregistering): Port device team_slave_1 removed [ 51.628783][ T4059] team0 (unregistering): Port device team_slave_0 removed [ 51.672947][ T4827] veth0_macvtap: entered promiscuous mode [ 51.690520][ T4827] veth1_macvtap: entered promiscuous mode [ 51.717342][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.727857][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.737797][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.748416][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.758887][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.769486][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.779384][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.790111][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.807971][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 51.807988][ T29] audit: type=1400 audit(1742977007.151:2549): avc: denied { create } for pid=5015 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.833839][ T29] audit: type=1400 audit(1742977007.151:2550): avc: denied { setopt } for pid=5015 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.853534][ T29] audit: type=1400 audit(1742977007.151:2551): avc: denied { ioctl } for pid=5015 comm="syz.4.264" path="socket:[7083]" dev="sockfs" ino=7083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.878434][ T29] audit: type=1400 audit(1742977007.151:2552): avc: denied { write } for pid=5015 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.903136][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.912497][ T29] audit: type=1326 audit(1742977007.191:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 51.914833][ T5016] geneve2: entered promiscuous mode [ 51.935931][ T29] audit: type=1326 audit(1742977007.191:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 51.941050][ T5016] geneve2: entered allmulticast mode [ 51.964380][ T29] audit: type=1326 audit(1742977007.191:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 51.993082][ T29] audit: type=1326 audit(1742977007.191:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 52.016206][ T29] audit: type=1326 audit(1742977007.191:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 52.039340][ T29] audit: type=1326 audit(1742977007.191:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 52.087468][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.098018][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.107861][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.118393][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.121663][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 52.128293][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.137032][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 52.147398][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.161841][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 52.166005][ T4827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.185300][ T4827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.196263][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.204933][ T4827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.213697][ T4827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.222434][ T4827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.231176][ T4827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.247186][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 52.256164][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 52.279580][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 52.317518][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 52.326438][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 52.490464][ T5061] futex_wake_op: syz.0.274 tries to shift op by -1; fix this program [ 52.720219][ T5082] geneve2: entered promiscuous mode [ 52.725675][ T5082] geneve2: entered allmulticast mode [ 52.834165][ T5086] program syz.1.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.129991][ T5118] loop3: detected capacity change from 0 to 512 [ 53.173828][ T5118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.203691][ T5118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.288: bg 0: block 248: padding at end of block bitmap is not set [ 53.258471][ T5118] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.288: Failed to acquire dquot type 1 [ 53.296421][ T5118] EXT4-fs (loop3): 1 truncate cleaned up [ 53.344109][ T5118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.430094][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.613751][ T5160] smc: net device bond0 applied user defined pnetid SYZ0 Mar 26 08:16:49 syzkaller daemon.info dhcpcd[3042]: eth2: IAID 27:b1:fa:22 Mar 26 08:16:49 syzkaller daemon.info dhcpcd[3042]: eth2: adding address fe80::fd50:fc4a:91c0:7fb0 [ 53.855814][ T5196] smc: net device bond0 erased user defined pnetid SYZ0 [ 53.951220][ T5202] smc: net device bond0 applied user defined pnetid SYZ0 [ 53.961354][ T5202] smc: net device bond0 erased user defined pnetid SYZ0 [ 54.240317][ T5234] FAULT_INJECTION: forcing a failure. [ 54.240317][ T5234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.253546][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz.5.313 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 54.253579][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.253594][ T5234] Call Trace: [ 54.253633][ T5234] [ 54.253663][ T5234] dump_stack_lvl+0xf6/0x150 [ 54.253690][ T5234] dump_stack+0x15/0x1a [ 54.253709][ T5234] should_fail_ex+0x261/0x270 [ 54.253737][ T5234] should_fail+0xb/0x10 [ 54.253761][ T5234] should_fail_usercopy+0x1a/0x20 [ 54.253791][ T5234] _copy_from_user+0x1c/0xa0 [ 54.253868][ T5234] __sys_bpf+0x156/0x7c0 [ 54.253914][ T5234] __x64_sys_bpf+0x43/0x50 [ 54.253981][ T5234] x64_sys_call+0x23da/0x2e10 [ 54.254062][ T5234] do_syscall_64+0xc9/0x1c0 [ 54.254092][ T5234] ? clear_bhb_loop+0x25/0x80 [ 54.254118][ T5234] ? clear_bhb_loop+0x25/0x80 [ 54.254143][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.254281][ T5234] RIP: 0033:0x7f271959d169 [ 54.254299][ T5234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.254320][ T5234] RSP: 002b:00007f2717c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.254342][ T5234] RAX: ffffffffffffffda RBX: 00007f27197b5fa0 RCX: 00007f271959d169 [ 54.254398][ T5234] RDX: 0000000000000020 RSI: 0000200000000880 RDI: 0000000000000002 [ 54.254412][ T5234] RBP: 00007f2717c07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.254426][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.254440][ T5234] R13: 0000000000000000 R14: 00007f27197b5fa0 R15: 00007fffefc71278 [ 54.254460][ T5234] [ 54.511823][ T5236] xt_hashlimit: max too large, truncated to 1048576 [ 54.529884][ T5243] FAULT_INJECTION: forcing a failure. [ 54.529884][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.543043][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: syz.5.315 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 54.543134][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.543148][ T5243] Call Trace: [ 54.543156][ T5243] [ 54.543164][ T5243] dump_stack_lvl+0xf6/0x150 [ 54.543208][ T5243] dump_stack+0x15/0x1a [ 54.543227][ T5243] should_fail_ex+0x261/0x270 [ 54.543256][ T5243] should_fail+0xb/0x10 [ 54.543290][ T5243] should_fail_usercopy+0x1a/0x20 [ 54.543319][ T5243] _copy_from_user+0x1c/0xa0 [ 54.543348][ T5243] copy_msghdr_from_user+0x54/0x2b0 [ 54.543405][ T5243] ? __fget_files+0x186/0x1c0 [ 54.543431][ T5243] __sys_sendmsg+0x141/0x240 [ 54.543526][ T5243] __x64_sys_sendmsg+0x46/0x50 [ 54.543546][ T5243] x64_sys_call+0x26f3/0x2e10 [ 54.543569][ T5243] do_syscall_64+0xc9/0x1c0 [ 54.543597][ T5243] ? clear_bhb_loop+0x25/0x80 [ 54.543622][ T5243] ? clear_bhb_loop+0x25/0x80 [ 54.543661][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.543683][ T5243] RIP: 0033:0x7f271959d169 [ 54.543697][ T5243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.543712][ T5243] RSP: 002b:00007f2717c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.543729][ T5243] RAX: ffffffffffffffda RBX: 00007f27197b5fa0 RCX: 00007f271959d169 [ 54.543742][ T5243] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 54.543755][ T5243] RBP: 00007f2717c07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.543769][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.543789][ T5243] R13: 0000000000000000 R14: 00007f27197b5fa0 R15: 00007fffefc71278 [ 54.543811][ T5243] [ 54.731618][ T5236] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.739286][ T5236] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 54.764006][ T5219] loop4: detected capacity change from 0 to 128 [ 54.809654][ T5219] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.830174][ T5219] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.186700][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.406589][ T5344] loop4: detected capacity change from 0 to 512 [ 55.416725][ T5344] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.431015][ T5344] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.330: bg 0: block 248: padding at end of block bitmap is not set [ 55.446701][ T5344] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.330: Failed to acquire dquot type 1 [ 55.458777][ T5344] EXT4-fs (loop4): 1 truncate cleaned up [ 55.466460][ T5344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.499878][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.752104][ T5408] loop4: detected capacity change from 0 to 8192 [ 55.804506][ T5417] __nla_validate_parse: 6 callbacks suppressed [ 55.804520][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 55.819692][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 55.831927][ T5408] tipc: Started in network mode [ 55.832831][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 55.836801][ T5408] tipc: Node identity 7f000001, cluster identity 4711 [ 55.852848][ T5408] tipc: Enabled bearer , priority 10 [ 55.904756][ T5421] program syz.4.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.993285][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 56.064757][ T5427] loop4: detected capacity change from 0 to 8192 [ 56.427485][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.349'. [ 56.483382][ T5456] loop0: detected capacity change from 0 to 8192 [ 56.500988][ T5461] loop4: detected capacity change from 0 to 8192 [ 56.528480][ T5456] tipc: Started in network mode [ 56.533552][ T5456] tipc: Node identity 7f000001, cluster identity 4711 [ 56.542825][ T5456] tipc: Enabled bearer , priority 10 [ 56.564431][ T5461] tipc: Enabling of bearer rejected, already enabled [ 56.715306][ T5468] geneve2: entered promiscuous mode [ 56.720723][ T5468] geneve2: entered allmulticast mode [ 56.761930][ T5472] geneve2: entered promiscuous mode [ 56.767284][ T5472] geneve2: entered allmulticast mode [ 56.774815][ T5471] loop5: detected capacity change from 0 to 8192 [ 56.776003][ T5472] bridge1: port 1(geneve2) entered blocking state [ 56.787895][ T5472] bridge1: port 1(geneve2) entered disabled state [ 56.797601][ T5472] bridge1: port 1(geneve2) entered blocking state [ 56.804121][ T5472] bridge1: port 1(geneve2) entered forwarding state [ 56.814491][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.823315][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.833019][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.843475][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 56.843490][ T29] audit: type=1400 audit(1742977012.191:3217): avc: denied { create } for pid=5470 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.872897][ T5471] tipc: Started in network mode [ 56.877784][ T5471] tipc: Node identity 7f000001, cluster identity 4711 [ 56.884612][ T4373] tipc: Node number set to 2130706433 [ 56.891095][ T5471] tipc: Enabled bearer , priority 10 [ 56.896526][ T29] audit: type=1400 audit(1742977012.211:3218): avc: denied { write } for pid=5470 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.917662][ T29] audit: type=1400 audit(1742977012.211:3219): avc: denied { read } for pid=5470 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.943170][ T29] audit: type=1400 audit(1742977012.291:3220): avc: denied { module_request } for pid=5476 comm="syz.1.357" kmod="nft-expr-7-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.964016][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.965035][ T29] audit: type=1400 audit(1742977012.291:3221): avc: denied { create } for pid=5478 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.973729][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 57.002352][ T29] audit: type=1400 audit(1742977012.291:3222): avc: denied { unmount } for pid=4827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.059928][ T29] audit: type=1326 audit(1742977012.381:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5850d169 code=0x7ffc0000 [ 57.083520][ T29] audit: type=1326 audit(1742977012.381:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5850d169 code=0x7ffc0000 [ 57.107216][ T29] audit: type=1326 audit(1742977012.381:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c5850d169 code=0x7ffc0000 [ 57.130772][ T29] audit: type=1326 audit(1742977012.381:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5850d169 code=0x7ffc0000 [ 57.205243][ T5499] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.243102][ T5499] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.306182][ T5514] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.313977][ T5514] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.325410][ T5513] program syz.5.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.524965][ T5541] program syz.1.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.662857][ T1038] tipc: Node number set to 2130706433 [ 57.720142][ T5557] program syz.5.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.011754][ T36] tipc: Node number set to 2130706433 [ 58.088667][ T5580] loop5: detected capacity change from 0 to 8192 [ 58.148374][ T5580] tipc: Enabling of bearer rejected, already enabled [ 58.415682][ T5624] program syz.5.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.462550][ T5629] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.480051][ T5629] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.513002][ T5631] loop5: detected capacity change from 0 to 8192 [ 58.555314][ T5631] tipc: Enabling of bearer rejected, already enabled [ 58.768037][ T5663] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.775660][ T5663] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.834163][ T5667] geneve2: entered promiscuous mode [ 58.839434][ T5667] geneve2: entered allmulticast mode [ 59.139628][ T5695] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.167249][ T5695] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.343254][ T1012] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 59.373340][ T5712] program syz.4.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.571216][ T5729] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.967122][ T5759] loop0: detected capacity change from 0 to 128 [ 59.991006][ T5759] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.991337][ T5759] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.150846][ T5807] program syz.4.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.343784][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.537650][ T5859] geneve2: entered promiscuous mode [ 60.542999][ T5859] geneve2: entered allmulticast mode [ 60.905270][ T5881] loop1: detected capacity change from 0 to 512 [ 60.939036][ T5881] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.978999][ T5896] __nla_validate_parse: 48 callbacks suppressed [ 60.979014][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 61.003633][ T5881] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.489: bg 0: block 248: padding at end of block bitmap is not set [ 61.030691][ T5881] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.489: Failed to acquire dquot type 1 [ 61.060605][ T5881] EXT4-fs (loop1): 1 truncate cleaned up [ 61.072531][ T5881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.172301][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.471026][ T5944] geneve2: entered promiscuous mode [ 61.476431][ T5944] geneve2: entered allmulticast mode [ 61.505458][ T5963] smc: net device bond0 erased user defined pnetid SYZ0 [ 61.585390][ T5923] loop5: detected capacity change from 0 to 128 [ 61.608289][ T5923] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.634472][ T5923] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.668728][ T4071] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 61.769211][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 61.824197][ T6006] IPv6: Can't replace route, no match found [ 61.862164][ T29] kauditd_printk_skb: 1622 callbacks suppressed [ 61.862178][ T29] audit: type=1400 audit(1742977017.211:4832): avc: denied { create } for pid=5968 comm="syz.1.503" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.019716][ T29] audit: type=1326 audit(1742977017.361:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.043271][ T29] audit: type=1326 audit(1742977017.361:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.066739][ T29] audit: type=1326 audit(1742977017.361:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.090135][ T29] audit: type=1326 audit(1742977017.361:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.113604][ T29] audit: type=1326 audit(1742977017.361:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.136888][ T29] audit: type=1326 audit(1742977017.361:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.160324][ T29] audit: type=1326 audit(1742977017.361:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.222247][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 62.242938][ T29] audit: type=1326 audit(1742977017.561:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.266332][ T29] audit: type=1326 audit(1742977017.561:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 62.323635][ T4827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.366300][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 62.927683][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 63.037354][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 63.117047][ T6158] geneve2: entered promiscuous mode [ 63.122373][ T6158] geneve2: entered allmulticast mode [ 63.324697][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 63.459203][ T4059] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 63.484980][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 63.493881][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 63.527273][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 63.599820][ T6230] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.666574][ T6248] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.677088][ T6238] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.685234][ T6238] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.936609][ T1012] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 64.269380][ T6290] loop1: detected capacity change from 0 to 512 [ 64.314953][ T6290] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.360670][ T6290] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.563: bg 0: block 248: padding at end of block bitmap is not set [ 64.421212][ T6290] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.563: Failed to acquire dquot type 1 [ 64.444927][ T6290] EXT4-fs (loop1): 1 truncate cleaned up [ 64.459183][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.503624][ T6327] smc: net device bond0 applied user defined pnetid SYZ0 [ 64.561966][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.587001][ T6336] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.635223][ T6338] loop5: detected capacity change from 0 to 512 [ 64.669245][ T6343] loop4: detected capacity change from 0 to 512 [ 64.688170][ T6338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.749616][ T6338] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.560: bg 0: block 248: padding at end of block bitmap is not set [ 64.783917][ T6338] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.560: Failed to acquire dquot type 1 [ 64.821854][ T6338] EXT4-fs (loop5): 1 truncate cleaned up [ 64.844585][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.059719][ T4827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.128574][ T6394] loop4: detected capacity change from 0 to 512 [ 65.146127][ T6394] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.154426][ T6394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.572: bg 0: block 248: padding at end of block bitmap is not set [ 65.170091][ T6394] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.572: Failed to acquire dquot type 1 [ 65.198138][ T6394] EXT4-fs (loop4): 1 truncate cleaned up [ 65.216064][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.283663][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.755260][ T6440] bond1: entered promiscuous mode [ 65.760379][ T6440] bond1: entered allmulticast mode [ 65.794953][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.846451][ T6440] bond1 (unregistering): Released all slaves [ 65.884739][ T6441] bond1: entered promiscuous mode [ 65.884761][ T6441] bond1: entered allmulticast mode [ 65.884995][ T6441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.933670][ T6458] loop4: detected capacity change from 0 to 8192 [ 65.947331][ T6441] bond1 (unregistering): Released all slaves [ 66.103486][ T6489] __nla_validate_parse: 24 callbacks suppressed [ 66.103506][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 66.139019][ T6491] geneve2: entered promiscuous mode [ 66.144379][ T6491] geneve2: entered allmulticast mode [ 66.228601][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.237623][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.247908][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 66.268301][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.271986][ T6499] IPVS: Unknown mcast interface: macvlan0 [ 66.294082][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.302962][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.333799][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.387245][ T6511] loop4: detected capacity change from 0 to 8192 [ 66.398193][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.407189][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 66.903800][ T6557] loop3: detected capacity change from 0 to 8192 [ 66.919003][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 66.919056][ T29] audit: type=1326 audit(1742977022.261:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 66.999068][ T29] audit: type=1326 audit(1742977022.301:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.006682][ T6575] loop5: detected capacity change from 0 to 512 [ 67.022644][ T29] audit: type=1326 audit(1742977022.301:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.051788][ T29] audit: type=1326 audit(1742977022.301:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.075045][ T29] audit: type=1326 audit(1742977022.301:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.098216][ T29] audit: type=1326 audit(1742977022.301:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.121344][ T29] audit: type=1326 audit(1742977022.301:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.144359][ T29] audit: type=1326 audit(1742977022.301:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.167465][ T29] audit: type=1326 audit(1742977022.301:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.190466][ T29] audit: type=1326 audit(1742977022.301:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6b17d169 code=0x7ffc0000 [ 67.326237][ T6591] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.333546][ T6591] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.449734][ T36] IPVS: starting estimator thread 0... [ 67.572728][ T6607] IPVS: using max 2016 ests per chain, 100800 per kthread [ 67.667779][ T6627] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.682066][ T6624] IPVS: Unknown mcast interface: macvlan0 [ 67.711797][ T6627] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.808018][ T6648] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 67.839482][ T6653] loop1: detected capacity change from 0 to 512 [ 67.926203][ T6656] loop4: detected capacity change from 0 to 512 [ 67.934368][ T6656] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.941524][ T6656] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.627: bg 0: block 248: padding at end of block bitmap is not set [ 67.956693][ T6656] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.627: Failed to acquire dquot type 1 [ 67.969145][ T6656] EXT4-fs (loop4): 1 truncate cleaned up [ 67.975489][ T6656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.002188][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.524466][ T6683] loop0: detected capacity change from 0 to 128 [ 68.590713][ T6683] syz.0.637: attempt to access beyond end of device [ 68.590713][ T6683] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 68.604751][ T6683] syz.0.637: attempt to access beyond end of device [ 68.604751][ T6683] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 68.619151][ T6683] syz.0.637: attempt to access beyond end of device [ 68.619151][ T6683] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 68.633277][ T6683] syz.0.637: attempt to access beyond end of device [ 68.633277][ T6683] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 68.650180][ T6683] syz.0.637: attempt to access beyond end of device [ 68.650180][ T6683] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 68.663703][ T6683] syz.0.637: attempt to access beyond end of device [ 68.663703][ T6683] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 68.677478][ T6683] syz.0.637: attempt to access beyond end of device [ 68.677478][ T6683] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 68.691063][ T6683] syz.0.637: attempt to access beyond end of device [ 68.691063][ T6683] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 68.722893][ T6686] loop5: detected capacity change from 0 to 512 [ 68.728697][ T6683] syz.0.637: attempt to access beyond end of device [ 68.728697][ T6683] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 68.756876][ T6683] syz.0.637: attempt to access beyond end of device [ 68.756876][ T6683] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 68.833043][ T6694] futex_wake_op: syz.0.641 tries to shift op by -1; fix this program [ 69.126029][ T6714] loop5: detected capacity change from 0 to 512 [ 69.748983][ T6749] loop0: detected capacity change from 0 to 512 [ 69.827217][ T6759] program syz.0.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.907006][ T6765] futex_wake_op: syz.0.669 tries to shift op by -1; fix this program [ 70.221371][ T6772] smc: net device bond0 applied user defined pnetid SYZ0 [ 70.298290][ T6782] program syz.5.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.478533][ T6789] FAT-fs (loop3): unable to read boot sector [ 70.837389][ T6816] FAULT_INJECTION: forcing a failure. [ 70.837389][ T6816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.850668][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.0.690 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 70.850703][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.850718][ T6816] Call Trace: [ 70.850726][ T6816] [ 70.850735][ T6816] dump_stack_lvl+0xf6/0x150 [ 70.850770][ T6816] dump_stack+0x15/0x1a [ 70.850785][ T6816] should_fail_ex+0x261/0x270 [ 70.850852][ T6816] should_fail+0xb/0x10 [ 70.850875][ T6816] should_fail_usercopy+0x1a/0x20 [ 70.850904][ T6816] _copy_from_user+0x1c/0xa0 [ 70.850952][ T6816] copy_msghdr_from_user+0x54/0x2b0 [ 70.851053][ T6816] ? __fget_files+0x186/0x1c0 [ 70.851095][ T6816] __sys_sendmsg+0x141/0x240 [ 70.851130][ T6816] __x64_sys_sendmsg+0x46/0x50 [ 70.851210][ T6816] x64_sys_call+0x26f3/0x2e10 [ 70.851267][ T6816] do_syscall_64+0xc9/0x1c0 [ 70.851318][ T6816] ? clear_bhb_loop+0x25/0x80 [ 70.851343][ T6816] ? clear_bhb_loop+0x25/0x80 [ 70.851374][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.851398][ T6816] RIP: 0033:0x7f613fa3d169 [ 70.851465][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.851486][ T6816] RSP: 002b:00007f613e0a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.851507][ T6816] RAX: ffffffffffffffda RBX: 00007f613fc55fa0 RCX: 00007f613fa3d169 [ 70.851519][ T6816] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 70.851533][ T6816] RBP: 00007f613e0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.851546][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.851564][ T6816] R13: 0000000000000000 R14: 00007f613fc55fa0 R15: 00007ffed5a34268 [ 70.851584][ T6816] [ 71.142093][ T6835] smc: net device bond0 erased user defined pnetid SYZ0 [ 71.167547][ T6837] FAULT_INJECTION: forcing a failure. [ 71.167547][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 71.180292][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.4.694 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 71.180324][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.180354][ T6837] Call Trace: [ 71.180361][ T6837] [ 71.180370][ T6837] dump_stack_lvl+0xf6/0x150 [ 71.180397][ T6837] dump_stack+0x15/0x1a [ 71.180416][ T6837] should_fail_ex+0x261/0x270 [ 71.180462][ T6837] should_failslab+0x8f/0xb0 [ 71.180541][ T6837] kmem_cache_alloc_noprof+0x59/0x340 [ 71.180567][ T6837] ? alloc_empty_file+0x78/0x200 [ 71.180598][ T6837] ? _raw_spin_unlock+0x26/0x50 [ 71.180670][ T6837] alloc_empty_file+0x78/0x200 [ 71.180739][ T6837] alloc_file_pseudo+0xcb/0x160 [ 71.180770][ T6837] __shmem_file_setup+0x1bb/0x1f0 [ 71.180866][ T6837] shmem_file_setup+0x3b/0x50 [ 71.180892][ T6837] __se_sys_memfd_create+0x2e1/0x5a0 [ 71.180987][ T6837] __x64_sys_memfd_create+0x31/0x40 [ 71.181022][ T6837] x64_sys_call+0x1163/0x2e10 [ 71.181047][ T6837] do_syscall_64+0xc9/0x1c0 [ 71.181092][ T6837] ? clear_bhb_loop+0x25/0x80 [ 71.181191][ T6837] ? clear_bhb_loop+0x25/0x80 [ 71.181251][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.181274][ T6837] RIP: 0033:0x7f0e6b17d169 [ 71.181288][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.181331][ T6837] RSP: 002b:00007f0e697e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.181351][ T6837] RAX: ffffffffffffffda RBX: 000000000000062b RCX: 00007f0e6b17d169 [ 71.181365][ T6837] RDX: 00007f0e697e6ef0 RSI: 0000000000000000 RDI: 00007f0e6b1fec3c [ 71.181379][ T6837] RBP: 0000200000000600 R08: 00007f0e697e6bb7 R09: 00007f0e697e6e40 [ 71.181480][ T6837] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 71.181492][ T6837] R13: 00007f0e697e6ef0 R14: 00007f0e697e6eb0 R15: 0000200000000000 [ 71.181513][ T6837] [ 71.445041][ T6843] smc: net device bond0 applied user defined pnetid SYZ0 [ 71.491094][ T6846] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 71.502851][ T6846] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 71.530910][ T6846] loop1: detected capacity change from 0 to 512 [ 71.548824][ T6851] program syz.0.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.565544][ T6853] __nla_validate_parse: 34 callbacks suppressed [ 71.565562][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.702'. [ 71.584501][ T6846] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 71.592749][ T6846] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.599389][ T6846] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.699: invalid indirect mapped block 256 (level 2) [ 71.614956][ T6846] EXT4-fs (loop1): 2 truncates cleaned up [ 71.644344][ T6846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.690824][ T6863] smc: net device bond0 erased user defined pnetid SYZ0 [ 71.727646][ T6867] loop0: detected capacity change from 0 to 1024 [ 71.736304][ T6865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.705'. [ 71.745810][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.705'. [ 71.762395][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.803193][ T6867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.833437][ T6867] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 71.844184][ T6867] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.856984][ T6867] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.866171][ T6867] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.873115][ T6867] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.707: Inode bitmap for bg 0 marked uninitialized [ 71.886955][ T6867] EXT4-fs (loop0): Remounting filesystem read-only [ 71.894040][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.907867][ T6867] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 71.914977][ T6867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.933371][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 71.933388][ T29] audit: type=1400 audit(1742977027.281:6032): avc: denied { create } for pid=6877 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.976235][ T29] audit: type=1400 audit(1742977027.311:6033): avc: denied { read } for pid=6877 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.998214][ T6883] smc: net device bond0 applied user defined pnetid SYZ0 [ 72.045180][ T29] audit: type=1400 audit(1742977027.361:6034): avc: denied { write } for pid=6852 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.124674][ T6890] loop1: detected capacity change from 0 to 512 [ 72.134438][ T29] audit: type=1326 audit(1742977027.461:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.157935][ T29] audit: type=1326 audit(1742977027.461:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.181407][ T29] audit: type=1326 audit(1742977027.461:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.205058][ T29] audit: type=1326 audit(1742977027.461:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.228921][ T29] audit: type=1326 audit(1742977027.461:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.252551][ T29] audit: type=1326 audit(1742977027.461:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.261482][ T6892] loop0: detected capacity change from 0 to 8192 [ 72.275877][ T29] audit: type=1326 audit(1742977027.461:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 72.541059][ T6903] loop3: detected capacity change from 0 to 8192 [ 72.603945][ T6913] loop1: detected capacity change from 0 to 128 [ 72.644803][ T6913] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.687564][ T6921] geneve2: entered promiscuous mode [ 72.692916][ T6921] geneve2: entered allmulticast mode [ 72.735224][ T6913] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.198004][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.253319][ T6928] loop5: detected capacity change from 0 to 512 [ 73.320746][ T6931] loop3: detected capacity change from 0 to 512 [ 73.531363][ T3459] IPVS: starting estimator thread 0... [ 73.550355][ T6934] loop5: detected capacity change from 0 to 8192 [ 73.642125][ T6940] IPVS: using max 2592 ests per chain, 129600 per kthread [ 73.700962][ T6946] smc: net device bond0 erased user defined pnetid SYZ0 [ 73.784558][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 73.786945][ T6950] new mount options do not match the existing superblock, will be ignored [ 73.826718][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.737'. [ 73.871301][ T6958] loop4: detected capacity change from 0 to 512 [ 73.879440][ T6958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.904990][ T6960] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.911854][ T6958] EXT4-fs (loop4): 1 truncate cleaned up [ 73.918096][ T6958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.996456][ T6954] loop3: detected capacity change from 0 to 512 [ 74.034571][ T6954] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.044470][ T6954] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.739: bg 0: block 248: padding at end of block bitmap is not set [ 74.063018][ T6954] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.739: Failed to acquire dquot type 1 [ 74.070255][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.092021][ T6954] EXT4-fs (loop3): 1 truncate cleaned up [ 74.098548][ T6954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.140934][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.308183][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 74.563874][ T7022] loop4: detected capacity change from 0 to 512 [ 74.581822][ T7022] EXT4-fs: Ignoring removed bh option [ 74.596352][ T7022] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.607912][ T7022] EXT4-fs (loop4): 1 truncate cleaned up [ 74.614184][ T7022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.635770][ T7020] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 74.651019][ T7020] EXT4-fs (loop4): Remounting filesystem read-only [ 74.670825][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.841223][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 74.850394][ T7039] IPVS: Unknown mcast interface: macvlan0 [ 75.047665][ T7044] loop5: detected capacity change from 0 to 128 [ 75.059004][ T7044] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.076146][ T7044] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.335380][ T4827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.486197][ T7067] loop5: detected capacity change from 0 to 512 [ 75.565078][ T7072] loop3: detected capacity change from 0 to 512 [ 75.636087][ T7076] loop3: detected capacity change from 0 to 512 [ 75.881651][ T7088] smc: net device bond0 erased user defined pnetid SYZ0 [ 75.901969][ T7079] loop3: detected capacity change from 0 to 128 [ 75.919418][ T7079] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.969716][ T7079] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.065719][ T7095] smc: net device bond0 applied user defined pnetid SYZ0 [ 76.220200][ T7103] program syz.4.792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.236200][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.335138][ T7113] smc: net device bond0 erased user defined pnetid SYZ0 [ 76.481737][ T7123] loop4: detected capacity change from 0 to 1024 [ 76.498782][ T7123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.529126][ T7123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.621287][ T7121] loop3: detected capacity change from 0 to 128 [ 76.638379][ T7121] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.687689][ T7132] loop0: detected capacity change from 0 to 8192 [ 76.728882][ T7121] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.866160][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.871385][ T7141] syzkaller0: entered promiscuous mode [ 76.880749][ T7141] syzkaller0: entered allmulticast mode [ 76.885043][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 76.898916][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 76.911790][ T7147] smc: net device bond0 applied user defined pnetid SYZ0 [ 76.921195][ T7147] smc: net device bond0 erased user defined pnetid SYZ0 [ 76.956995][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 76.981284][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 76.981298][ T29] audit: type=1400 audit(1742977032.321:6831): avc: denied { shutdown } for pid=7149 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.031465][ T7152] smc: net device bond0 applied user defined pnetid SYZ0 [ 77.040611][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 77.071995][ T29] audit: type=1326 audit(1742977032.371:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2719594127 code=0x7ffc0000 [ 77.095390][ T29] audit: type=1326 audit(1742977032.371:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2719539359 code=0x7ffc0000 [ 77.118799][ T29] audit: type=1326 audit(1742977032.371:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271959d169 code=0x7ffc0000 [ 77.142226][ T29] audit: type=1400 audit(1742977032.371:6835): avc: denied { getopt } for pid=7149 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.162019][ T29] audit: type=1400 audit(1742977032.371:6836): avc: denied { name_connect } for pid=7149 comm="syz.0.812" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.184135][ T29] audit: type=1326 audit(1742977032.381:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2719594127 code=0x7ffc0000 [ 77.207509][ T29] audit: type=1326 audit(1742977032.381:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2719539359 code=0x7ffc0000 [ 77.230821][ T29] audit: type=1326 audit(1742977032.381:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271959d169 code=0x7ffc0000 [ 77.255057][ T29] audit: type=1326 audit(1742977032.381:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7142 comm="syz.5.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2719594127 code=0x7ffc0000 [ 77.280717][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.295944][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 77.306453][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 77.326515][ T314] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 77.414924][ T7168] geneve2: entered promiscuous mode [ 77.420198][ T7168] geneve2: entered allmulticast mode [ 77.588502][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'. [ 77.619585][ T7176] loop3: detected capacity change from 0 to 8192 [ 77.873220][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.902403][ T7195] IPVS: Unknown mcast interface: macvlan0 [ 77.916970][ T7198] geneve2: entered promiscuous mode [ 77.922400][ T7198] geneve2: entered allmulticast mode [ 78.111097][ T7214] loop1: detected capacity change from 0 to 128 [ 78.127551][ T7214] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.171730][ T7214] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.238239][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 78.311270][ T7232] Cannot find set identified by id 0 to match [ 78.329653][ T7234] 9pnet: Could not find request transport: r [ 78.347103][ T1012] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 78.411625][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 78.748725][ T7266] vlan0: entered allmulticast mode [ 78.776638][ T7268] FAULT_INJECTION: forcing a failure. [ 78.776638][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 78.789350][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.5.858 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 78.789379][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.789393][ T7268] Call Trace: [ 78.789401][ T7268] [ 78.789409][ T7268] dump_stack_lvl+0xf6/0x150 [ 78.789436][ T7268] dump_stack+0x15/0x1a [ 78.789454][ T7268] should_fail_ex+0x261/0x270 [ 78.789478][ T7268] should_failslab+0x8f/0xb0 [ 78.789497][ T7268] kmem_cache_alloc_noprof+0x59/0x340 [ 78.789522][ T7268] ? mas_alloc_nodes+0x1e3/0x490 [ 78.789550][ T7268] mas_alloc_nodes+0x1e3/0x490 [ 78.789578][ T7268] mas_preallocate+0x48d/0x6b0 [ 78.789606][ T7268] mmap_region+0x978/0x1630 [ 78.789658][ T7268] do_mmap+0x9ef/0xc80 [ 78.789678][ T7268] vm_mmap_pgoff+0x16d/0x2d0 [ 78.789699][ T7268] ksys_mmap_pgoff+0xd0/0x340 [ 78.789716][ T7268] ? fpregs_assert_state_consistent+0x83/0xa0 [ 78.789749][ T7268] x64_sys_call+0x1945/0x2e10 [ 78.789769][ T7268] do_syscall_64+0xc9/0x1c0 [ 78.789794][ T7268] ? clear_bhb_loop+0x25/0x80 [ 78.789815][ T7268] ? clear_bhb_loop+0x25/0x80 [ 78.789835][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.789856][ T7268] RIP: 0033:0x7f271959d1a3 [ 78.789870][ T7268] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 78.789887][ T7268] RSP: 002b:00007f2717c06e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 78.789906][ T7268] RAX: ffffffffffffffda RBX: 0000000000000616 RCX: 00007f271959d1a3 [ 78.789918][ T7268] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 78.789929][ T7268] RBP: 0000200000000642 R08: 00000000ffffffff R09: 0000000000000000 [ 78.789940][ T7268] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 78.789951][ T7268] R13: 00007f2717c06ef0 R14: 00007f2717c06eb0 R15: 0000200000000480 [ 78.789968][ T7268] [ 79.111777][ T7283] loop1: detected capacity change from 0 to 128 [ 79.240976][ T7297] geneve2: entered promiscuous mode [ 79.246354][ T7297] geneve2: entered allmulticast mode [ 79.280545][ T7299] FAULT_INJECTION: forcing a failure. [ 79.280545][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.293651][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.1.871 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 79.293679][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.293690][ T7299] Call Trace: [ 79.293698][ T7299] [ 79.293707][ T7299] dump_stack_lvl+0xf6/0x150 [ 79.293733][ T7299] dump_stack+0x15/0x1a [ 79.293803][ T7299] should_fail_ex+0x261/0x270 [ 79.293832][ T7299] should_fail+0xb/0x10 [ 79.293851][ T7299] should_fail_usercopy+0x1a/0x20 [ 79.293975][ T7299] _copy_to_user+0x20/0xa0 [ 79.294047][ T7299] simple_read_from_buffer+0xb2/0x130 [ 79.294165][ T7299] proc_fail_nth_read+0x103/0x140 [ 79.294202][ T7299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.294227][ T7299] vfs_read+0x1b2/0x710 [ 79.294254][ T7299] ? __rcu_read_unlock+0x4e/0x70 [ 79.294286][ T7299] ? __fget_files+0x186/0x1c0 [ 79.294315][ T7299] ksys_read+0xeb/0x1b0 [ 79.294409][ T7299] __x64_sys_read+0x42/0x50 [ 79.294439][ T7299] x64_sys_call+0x2a3b/0x2e10 [ 79.294513][ T7299] do_syscall_64+0xc9/0x1c0 [ 79.294545][ T7299] ? clear_bhb_loop+0x25/0x80 [ 79.294619][ T7299] ? clear_bhb_loop+0x25/0x80 [ 79.294639][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.294663][ T7299] RIP: 0033:0x7f154a9dbb7c [ 79.294681][ T7299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.294747][ T7299] RSP: 002b:00007f1549047030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.294764][ T7299] RAX: ffffffffffffffda RBX: 00007f154abf5fa0 RCX: 00007f154a9dbb7c [ 79.294775][ T7299] RDX: 000000000000000f RSI: 00007f15490470a0 RDI: 0000000000000007 [ 79.294786][ T7299] RBP: 00007f1549047090 R08: 0000000000000000 R09: 0000000000000000 [ 79.294796][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.294810][ T7299] R13: 0000000000000000 R14: 00007f154abf5fa0 R15: 00007ffd19f7eb58 [ 79.294829][ T7299] [ 80.265394][ T7342] futex_wake_op: syz.5.889 tries to shift op by -1; fix this program [ 80.365426][ T7351] geneve2: entered promiscuous mode [ 80.370809][ T7351] geneve2: entered allmulticast mode [ 80.787949][ T7386] loop3: detected capacity change from 0 to 8192 [ 80.883040][ T7388] geneve2: entered promiscuous mode [ 80.888306][ T7388] geneve2: entered allmulticast mode [ 80.958534][ T7390] program syz.3.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.048560][ T7398] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.154263][ T7411] xt_hashlimit: size too large, truncated to 1048576 [ 81.169663][ T7413] loop5: detected capacity change from 0 to 2048 [ 81.199497][ T7418] geneve2: entered promiscuous mode [ 81.205545][ T7418] geneve2: entered allmulticast mode [ 81.374162][ T7425] loop5: detected capacity change from 0 to 512 [ 81.406356][ T7430] program syz.3.918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.432834][ T7432] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.464087][ T7425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.485175][ T7425] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.520649][ T7425] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 81.620129][ T7442] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.720715][ T4827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.768726][ T7454] smc: net device bond0 applied user defined pnetid SYZ0 [ 82.012265][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 82.012303][ T29] audit: type=1326 audit(1742977037.361:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.042729][ T29] audit: type=1326 audit(1742977037.361:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.125814][ T7478] __nla_validate_parse: 34 callbacks suppressed [ 82.125835][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 82.145237][ T29] audit: type=1326 audit(1742977037.361:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.169311][ T29] audit: type=1326 audit(1742977037.361:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.193835][ T29] audit: type=1326 audit(1742977037.361:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.217257][ T29] audit: type=1326 audit(1742977037.361:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.241664][ T29] audit: type=1326 audit(1742977037.361:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.265094][ T29] audit: type=1326 audit(1742977037.361:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.289619][ T29] audit: type=1326 audit(1742977037.361:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.313072][ T29] audit: type=1326 audit(1742977037.361:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.0.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613fa3d169 code=0x7ffc0000 [ 82.337146][ T7468] program syz.5.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.379701][ T7487] loop4: detected capacity change from 0 to 512 [ 82.412030][ T7487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.425613][ T7487] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.490992][ T7508] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 82.516033][ T3307] block device autoloading is deprecated and will be removed. [ 82.888237][ T7564] geneve2: entered promiscuous mode [ 82.893592][ T7564] geneve2: entered allmulticast mode [ 83.136562][ T7584] loop0: detected capacity change from 0 to 128 [ 83.143388][ T7584] ext4: Unknown parameter 'smackfsfloor' [ 83.276342][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.443473][ T4059] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 83.462112][ T7592] loop5: detected capacity change from 0 to 128 [ 83.484227][ T7592] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.497191][ T7592] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.770846][ T4827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.934652][ T7626] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.441242][ T7635] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 84.447840][ T7635] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.455570][ T7635] vhci_hcd vhci_hcd.0: Device attached [ 84.603681][ T7642] smc: net device bond0 applied user defined pnetid SYZ0 [ 84.631967][ T36] vhci_hcd: vhci_device speed not set [ 84.701807][ T36] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 84.880397][ T7655] loop4: detected capacity change from 0 to 128 [ 84.956517][ T7660] futex_wake_op: syz.0.983 tries to shift op by -1; fix this program [ 85.263924][ T4059] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 85.275139][ T7637] vhci_hcd: connection reset by peer [ 85.309844][ T4061] vhci_hcd: stop threads [ 85.314845][ T4061] vhci_hcd: release socket [ 85.319289][ T4061] vhci_hcd: disconnect device [ 85.336066][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 85.656914][ T4059] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 85.827518][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'. [ 86.180615][ T7751] vhci_hcd: default hub control req: 6006 v0301 i0000 l0 [ 86.199712][ T7751] loop5: detected capacity change from 0 to 1024 [ 86.213713][ T7751] EXT4-fs: Ignoring removed orlov option [ 86.226694][ T7751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.228673][ T7755] FAULT_INJECTION: forcing a failure. [ 86.228673][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 86.252693][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.0.1019 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 86.252726][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.252738][ T7755] Call Trace: [ 86.252745][ T7755] [ 86.252753][ T7755] dump_stack_lvl+0xf6/0x150 [ 86.252825][ T7755] dump_stack+0x15/0x1a [ 86.252844][ T7755] should_fail_ex+0x261/0x270 [ 86.252880][ T7755] should_failslab+0x8f/0xb0 [ 86.252902][ T7755] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 86.252935][ T7755] ? __alloc_skb+0x10d/0x320 [ 86.252974][ T7755] __alloc_skb+0x10d/0x320 [ 86.253007][ T7755] ? audit_log_start+0x363/0x6d0 [ 86.253091][ T7755] audit_log_start+0x37e/0x6d0 [ 86.253111][ T7755] ? kstrtouint+0x7b/0xc0 [ 86.253131][ T7755] audit_seccomp+0x4b/0x130 [ 86.253213][ T7755] __seccomp_filter+0x694/0x10e0 [ 86.253331][ T7755] ? vfs_write+0x669/0x950 [ 86.253361][ T7755] ? putname+0xe1/0x100 [ 86.253386][ T7755] __secure_computing+0x7e/0x160 [ 86.253449][ T7755] syscall_trace_enter+0xcf/0x1f0 [ 86.253552][ T7755] ? fpregs_assert_state_consistent+0x83/0xa0 [ 86.253601][ T7755] do_syscall_64+0xaa/0x1c0 [ 86.253627][ T7755] ? clear_bhb_loop+0x25/0x80 [ 86.253648][ T7755] ? clear_bhb_loop+0x25/0x80 [ 86.253668][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.253789][ T7755] RIP: 0033:0x7f613fa3d169 [ 86.253805][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.253822][ T7755] RSP: 002b:00007f613e0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000079 [ 86.253840][ T7755] RAX: ffffffffffffffda RBX: 00007f613fc55fa0 RCX: 00007f613fa3d169 [ 86.253887][ T7755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.253898][ T7755] RBP: 00007f613e0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.253909][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.253920][ T7755] R13: 0000000000000000 R14: 00007f613fc55fa0 R15: 00007ffed5a34268 [ 86.253937][ T7755] [ 86.538363][ T4827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.683067][ T7780] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 86.690960][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 86.728997][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 86.737976][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 86.751463][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 86.764866][ T7800] dccp_close: ABORT with 100 bytes unread [ 86.771548][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 86.780562][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 86.796469][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 86.869250][ T7817] IPVS: Unknown mcast interface: macvlan0 [ 86.927246][ T7824] loop5: detected capacity change from 0 to 8192 [ 86.961940][ T7827] geneve2: entered promiscuous mode [ 86.967221][ T7827] geneve2: entered allmulticast mode [ 87.034528][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 87.034546][ T29] audit: type=1326 audit(1742977042.381:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.080331][ T29] audit: type=1326 audit(1742977042.381:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.104757][ T29] audit: type=1326 audit(1742977042.381:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.128318][ T29] audit: type=1326 audit(1742977042.381:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.152573][ T29] audit: type=1326 audit(1742977042.381:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.176133][ T29] audit: type=1326 audit(1742977042.381:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.200239][ T29] audit: type=1326 audit(1742977042.381:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.205471][ T7849] __nla_validate_parse: 13 callbacks suppressed [ 87.205539][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.224603][ T29] audit: type=1326 audit(1742977042.381:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.230113][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.239113][ T29] audit: type=1326 audit(1742977042.381:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.266597][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.272182][ T29] audit: type=1326 audit(1742977042.381:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154a9dd169 code=0x7ffc0000 [ 87.339740][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.348742][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.369874][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.410004][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.419733][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.430430][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 87.462859][ T1012] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 87.552732][ T7871] loop1: detected capacity change from 0 to 8192 [ 87.630126][ T7874] geneve2: entered promiscuous mode [ 87.635521][ T7874] geneve2: entered allmulticast mode [ 87.754469][ T3307] block device autoloading is deprecated and will be removed. [ 87.857088][ T7882] loop1: detected capacity change from 0 to 128 [ 87.870413][ T7882] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.873987][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 87.886463][ T7882] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.133421][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.133535][ T7901] geneve2: entered promiscuous mode [ 88.147803][ T7901] geneve2: entered allmulticast mode [ 88.175571][ T7905] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.176080][ T7904] IPVS: Unknown mcast interface: macvlan0 [ 88.332248][ T7925] smc: net device bond0 applied user defined pnetid SYZ0 [ 88.459363][ T7942] smc: net device bond0 erased user defined pnetid SYZ0 [ 88.502936][ T7950] smc: net device bond0 applied user defined pnetid SYZ0 [ 88.699350][ T7978] geneve2: entered promiscuous mode [ 88.704680][ T7978] geneve2: entered allmulticast mode [ 88.793447][ T7983] bridge0: entered promiscuous mode [ 88.800283][ T7983] bridge0: port 3(macsec1) entered blocking state [ 88.802592][ T7985] FAULT_INJECTION: forcing a failure. [ 88.802592][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 88.807615][ T7983] bridge0: port 3(macsec1) entered disabled state [ 88.819514][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.5.1096 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 88.819594][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.819660][ T7985] Call Trace: [ 88.819667][ T7985] [ 88.819676][ T7985] dump_stack_lvl+0xf6/0x150 [ 88.819705][ T7985] dump_stack+0x15/0x1a [ 88.819720][ T7985] should_fail_ex+0x261/0x270 [ 88.819743][ T7985] should_failslab+0x8f/0xb0 [ 88.819761][ T7985] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 88.819849][ T7985] ? __alloc_skb+0x10d/0x320 [ 88.819953][ T7985] __alloc_skb+0x10d/0x320 [ 88.819998][ T7985] netlink_alloc_large_skb+0xad/0xe0 [ 88.820050][ T7985] netlink_sendmsg+0x3da/0x720 [ 88.820089][ T7985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.820123][ T7985] __sock_sendmsg+0x140/0x180 [ 88.820174][ T7985] ____sys_sendmsg+0x350/0x4e0 [ 88.820203][ T7985] __sys_sendmsg+0x1a0/0x240 [ 88.820294][ T7985] __x64_sys_sendmsg+0x46/0x50 [ 88.820319][ T7985] x64_sys_call+0x26f3/0x2e10 [ 88.820346][ T7985] do_syscall_64+0xc9/0x1c0 [ 88.820433][ T7985] ? clear_bhb_loop+0x25/0x80 [ 88.820461][ T7985] ? clear_bhb_loop+0x25/0x80 [ 88.820492][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.820518][ T7985] RIP: 0033:0x7f271959d169 [ 88.820538][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.820572][ T7985] RSP: 002b:00007f2717c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.820596][ T7985] RAX: ffffffffffffffda RBX: 00007f27197b5fa0 RCX: 00007f271959d169 [ 88.820611][ T7985] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 88.820693][ T7985] RBP: 00007f2717c07090 R08: 0000000000000000 R09: 0000000000000000 [ 88.820708][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.820723][ T7985] R13: 0000000000000000 R14: 00007f27197b5fa0 R15: 00007fffefc71278 [ 88.820746][ T7985] [ 89.027975][ T7983] macsec1: entered allmulticast mode [ 89.033342][ T7983] bridge0: entered allmulticast mode [ 89.044412][ T7983] macsec1: left allmulticast mode [ 89.049573][ T7983] bridge0: left allmulticast mode [ 89.063638][ T7983] bridge0: left promiscuous mode [ 89.352727][ T8013] geneve2: entered promiscuous mode [ 89.358129][ T8013] geneve2: entered allmulticast mode [ 89.400699][ T8017] IPVS: Unknown mcast interface: macvlan0 [ 89.630399][ T8035] IPVS: Unknown mcast interface: macvlan0 [ 89.787856][ T8049] loop4: detected capacity change from 0 to 8192 [ 89.802426][ T36] usb 7-1: enqueue for inactive port 0 [ 89.808259][ T36] usb 7-1: enqueue for inactive port 0 [ 89.881849][ T36] vhci_hcd: vhci_device speed not set [ 90.117347][ T8072] loop1: detected capacity change from 0 to 8192 [ 90.134950][ T1012] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 90.268742][ T8093] smc: net device bond0 erased user defined pnetid SYZ0 [ 90.290284][ T8095] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.515622][ T8115] IPVS: Unknown mcast interface: macvlan0 [ 91.048522][ T8122] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.076764][ T8124] geneve2: entered promiscuous mode [ 91.082767][ T8124] geneve2: entered allmulticast mode [ 91.150971][ T8132] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.417179][ T8161] geneve2: entered promiscuous mode [ 91.422503][ T8161] geneve2: entered allmulticast mode [ 91.582817][ T4071] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 91.589720][ T8182] IPVS: Unknown mcast interface: macvlan0 [ 91.639982][ T4061] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 91.854391][ T8218] loop5: detected capacity change from 0 to 8192 [ 92.070180][ T29] kauditd_printk_skb: 1116 callbacks suppressed [ 92.070194][ T29] audit: type=1400 audit(1742977047.411:8794): avc: denied { read write } for pid=8225 comm="syz.5.1195" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.105353][ T29] audit: type=1400 audit(1742977047.451:8795): avc: denied { open } for pid=8225 comm="syz.5.1195" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.142431][ T29] audit: type=1400 audit(1742977047.481:8796): avc: denied { read } for pid=8225 comm="syz.5.1195" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.164467][ T29] audit: type=1400 audit(1742977047.481:8797): avc: denied { open } for pid=8225 comm="syz.5.1195" path="net:[4026532379]" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.187954][ T29] audit: type=1400 audit(1742977047.481:8798): avc: denied { create } for pid=8225 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.209061][ T29] audit: type=1400 audit(1742977047.481:8799): avc: denied { write } for pid=8225 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.229649][ T29] audit: type=1400 audit(1742977047.481:8800): avc: denied { read } for pid=8225 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.250686][ T29] audit: type=1400 audit(1742977047.481:8801): avc: denied { ioctl } for pid=8225 comm="syz.5.1195" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.290999][ T29] audit: type=1400 audit(1742977047.631:8802): avc: denied { create } for pid=8233 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.319732][ T29] audit: type=1400 audit(1742977047.631:8803): avc: denied { create } for pid=8233 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.354093][ T8234] smc: net device bond0 erased user defined pnetid SYZ0 [ 92.538318][ T8253] smc: net device bond0 applied user defined pnetid SYZ0 [ 92.557384][ T8255] geneve2: entered promiscuous mode [ 92.562734][ T8255] geneve2: entered allmulticast mode [ 92.725782][ T3004] ================================================================== [ 92.727511][ T8262] smc: net device bond0 erased user defined pnetid SYZ0 [ 92.733894][ T3004] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 92.733940][ T3004] [ 92.733947][ T3004] write to 0xffff88810a8649a0 of 8 bytes by task 3753 on cpu 0: [ 92.733966][ T3004] inode_set_ctime_current+0x527/0x7a0 [ 92.733998][ T3004] shmem_unlink+0x114/0x170 [ 92.769134][ T3004] vfs_unlink+0x275/0x430 [ 92.773493][ T3004] do_unlinkat+0x21b/0x4b0 [ 92.777935][ T3004] __x64_sys_unlink+0x2e/0x40 [ 92.783049][ T3004] x64_sys_call+0x2358/0x2e10 [ 92.787733][ T3004] do_syscall_64+0xc9/0x1c0 [ 92.792247][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.798149][ T3004] [ 92.800476][ T3004] read to 0xffff88810a8649a0 of 8 bytes by task 3004 on cpu 1: [ 92.808021][ T3004] atime_needs_update+0x2ed/0x3e0 [ 92.813069][ T3004] touch_atime+0x4a/0x350 [ 92.817420][ T3004] do_readlinkat+0x12d/0x210 [ 92.822037][ T3004] __x64_sys_readlink+0x47/0x60 [ 92.826906][ T3004] x64_sys_call+0x2a81/0x2e10 [ 92.831598][ T3004] do_syscall_64+0xc9/0x1c0 [ 92.836176][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.842180][ T3004] [ 92.844512][ T3004] value changed: 0x0000000067e3b817 -> 0x0000000067e3b818 [ 92.851619][ T3004] [ 92.853944][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 92.860100][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 92.871751][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.881819][ T3004] ================================================================== [ 92.972747][ T8257] loop0: detected capacity change from 0 to 128 [ 92.981770][ T8257] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.995420][ T8257] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.195324][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.