last executing test programs: 42.553637696s ago: executing program 2 (id=771): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000340)={[{@grpquota}, {@nobarrier}, {@dioread_lock}, {@delalloc}, {@abort}, {@dioread_nolock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010140)='memory.events.local\x00', 0x275a, 0x0) 42.485017906s ago: executing program 2 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8f5ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad801000000ce81ed0bffece0b42a9ecba46dee5de6ccd40dd6e4edef3d93452a929500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24000084) 42.457608116s ago: executing program 2 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 42.367517045s ago: executing program 2 (id=779): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) setns(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000040), 0x8) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="2706045842add8a33095f5b86377d8159770aca1024c0eb1701f9c2b94933074d09870f942abe653079a5353958e37e2d324c6da1f615f1d1126200a84834dddbe995b86073d69a04aada2cf2958c5cd5af5f2f008aadceb1490046ae8d13aa7a202f8e66b3b9303cdd0b65133280d448ec650e1b98e59d0fd834a41e72fd3758161c6d6f76f4ac5173c53cf44e3ca04013554fd974a2e87b7669de360407b01d7c7c5e0605ba7c40f0b4e7848b7e0a0f3b385e08a10229870b795d7ffc5a391616a15a6b32a", @ANYRES16=r6, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000044) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=r3], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649d, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0x4000000e, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x4003, 0x101, 0x100fff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x4, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x1, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b0, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x2, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x5b034f17, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffbff1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x7ff, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x21b9, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x2, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x7, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x5, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0xffffffff, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x9df4, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x81, 0xff7ffff7, 0x3, 0x1, 0x7514, 0x8, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x4, 0xe, 0xd, 0x4, 0x6, 0x0, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x0, 0x3, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd47c, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 41.021665132s ago: executing program 2 (id=828): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_getattr(0x0, &(0x7f0000001680)={0x38}, 0x38, 0x0) 40.54911661s ago: executing program 2 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8f5ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad801000000ce81ed0bffece0b42a9ecba46dee5de6ccd40dd6e4edef3d93452a929500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24000084) 40.5288755s ago: executing program 32 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8f5ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad801000000ce81ed0bffece0b42a9ecba46dee5de6ccd40dd6e4edef3d93452a929500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24000084) 30.764096561s ago: executing program 4 (id=987): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/100, 0x64}, 0x1}], 0x1, 0x2043, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000015c0)=""/4110, 0x100e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000005800000016"], 0xf8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x8000) 30.697380961s ago: executing program 4 (id=989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff0000ff04be04020506050e0204094300080004000000040011000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 30.603333211s ago: executing program 4 (id=991): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x9, 0x40}, 0x14105, 0x30, 0x8, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1458c2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) wait4(0x0, 0x0, 0x4000000a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x0, 0xfffffffffffffffc}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRESHEX=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) ioperm(0x0, 0xfffc, 0x8005) prctl$PR_SET_NAME(0x49, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) shmctl$IPC_RMID(0x0, 0x0) shmdt(0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000002000/0x4000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 30.41648664s ago: executing program 4 (id=995): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) setns(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000040), 0x8) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="2706045842add8a33095f5b86377d8159770aca1024c0eb1701f9c2b94933074d09870f942abe653079a5353958e37e2d324c6da1f615f1d1126200a84834dddbe995b86073d69a04aada2cf2958c5cd5af5f2f008aadceb1490046ae8d13aa7a202f8e66b3b9303cdd0b65133280d448ec650e1b98e59d0fd834a41e72fd3758161c6d6f76f4ac5173c53cf44e3ca04013554fd974a2e87b7669de360407b01d7c7c5e0605ba7c40f0b4e7848b7e0a0f3b385e08a10229870b795d7ffc5a391616a15a6b32a", @ANYRES16=r6, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000044) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=r3], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 28.771247675s ago: executing program 4 (id=1007): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='cachefiles_read\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r1) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540100001865000000000000000000001d010000150003000000000000000000dd5f39260205000000000000000000"], 0x154}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@nogrpid}, {@nolazytime}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') munmap(&(0x7f0000004000/0x5000)=nil, 0x5000) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x8f) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x4c800}], 0x1, 0x7800, 0x0, 0x3) r6 = open(&(0x7f0000000100)='./file0\x00', 0xda141, 0x61) r7 = openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000080)="1b50f90cf8ce180fbf801dc866cecb38f015fab42bcdc95f922463e2c0545eeeb2e7731cbf5f8fde00f3d4", 0x2b, 0x400c881, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @mcast1, 0x1}, 0x1c) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 28.445600224s ago: executing program 4 (id=1011): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x9, 0x946a, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x8, 0x9, 0x6}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = dup(r5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x8, 0x4, 0x0, 0x4, 0x0}) 28.440922454s ago: executing program 33 (id=1011): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x9, 0x946a, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x8, 0x9, 0x6}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = dup(r5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x8, 0x4, 0x0, 0x4, 0x0}) 21.379153743s ago: executing program 5 (id=1099): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200cc02, &(0x7f0000000080), 0x1, 0x570, &(0x7f00000010c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000040)={[{@auto_da_alloc}, {@nombcache}, {@jqfmt_vfsv1}]}, 0xff, 0x485, &(0x7f0000001040)="$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") request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 21.130330922s ago: executing program 5 (id=1104): r0 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000580)={0x4, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002a80)=""/4104, 0x1008}, {&(0x7f0000002a00)=""/83, 0x53}, {&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f0000000640)=""/93, 0x5d}], 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYBLOB="5d943a5f9af69f2ee4669ea2d5686e7df9ae9b0c40a830959ed5d401f24e64dfb3c4a68a3dad52e6674b92c095ce23602a1ccdf7e81fabce28a547a5d354e36f9f817b343db37104a8c541d248675d4e8516f94de5046a9a95bc9bb21e9dc27aa8da75a99e1876a2f8626ca4c5a794b068d56b42584fa260ef9eff417c4a39d58c0a39731be9adf42e798867306ec87dec5703fef111a02e3834f625dea6cf7c77b5b211a6d111ea9e0aeb8dcd7823cfe52b295992e472c9e842c0", @ANYRES64=r0, @ANYRESOCT, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 20.865835381s ago: executing program 5 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 20.799334381s ago: executing program 5 (id=1107): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) setns(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000040), 0x8) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="2706045842add8a33095f5b86377d8159770aca1024c0eb1701f9c2b94933074d09870f942abe653079a5353958e37e2d324c6da1f615f1d1126200a84834dddbe995b86073d69a04aada2cf2958c5cd5af5f2f008aadceb1490046ae8d13aa7a202f8e66b3b9303cdd0b65133280d448ec650e1b98e59d0fd834a41e72fd3758161c6d6f76f4ac5173c53cf44e3ca04013554fd974a2e87b7669de360407b01d7c7c5e0605ba7c40f0b4e7848b7e0a0f3b385e08a10229870b795d7ffc5a391616a15a6b32a", @ANYRES16=r6, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000044) 19.870649139s ago: executing program 3 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 19.870117629s ago: executing program 5 (id=1118): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r1 = socket$inet6(0xa, 0x80002, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0x1}, 0xfffffffffffffff3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=r0], 0x64}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r4 = dup2(r3, r3) mq_notify(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffe}, 0x8) 19.843397039s ago: executing program 3 (id=1120): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x9, 0x40}, 0x14105, 0x30, 0x8, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x1458c2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x4000000a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r4, 0x0, 0xfffffffffffffffc}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRESHEX=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) ioperm(0x0, 0xfffc, 0x8005) prctl$PR_SET_NAME(0x49, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) shmctl$IPC_RMID(0x0, 0x0) shmdt(0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000002000/0x4000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 19.610380858s ago: executing program 5 (id=1125): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) syz_io_uring_setup(0x247, &(0x7f0000000300)={0x0, 0x5a87, 0x401, 0x2, 0xfffffffc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') socket$kcm(0xa, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 19.584721258s ago: executing program 34 (id=1125): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) syz_io_uring_setup(0x247, &(0x7f0000000300)={0x0, 0x5a87, 0x401, 0x2, 0xfffffffc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') socket$kcm(0xa, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 19.581594198s ago: executing program 3 (id=1127): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x25003100, 0x0, 0x38, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xffbf, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000feffffff00000000000900080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x440c7200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) 19.361786097s ago: executing program 3 (id=1129): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) setns(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000040), 0x8) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x7) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 18.410118234s ago: executing program 3 (id=1138): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000280), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 18.340669534s ago: executing program 3 (id=1140): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 18.308732094s ago: executing program 35 (id=1140): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 12.628928377s ago: executing program 8 (id=1191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_usb_connect(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(r0, 0x1) 11.973264025s ago: executing program 8 (id=1205): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x3c) 11.636857884s ago: executing program 8 (id=1207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffff611}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.467254834s ago: executing program 8 (id=1211): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd", 0x45}], 0x1) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 11.341691633s ago: executing program 0 (id=1213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f0000000100), 0xc7, 0x2100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1) 11.341573763s ago: executing program 8 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 10.949353342s ago: executing program 0 (id=1217): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x10) close(r0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}]}, 0x3c}}, 0x0) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d1", 0x1}], 0x1}}], 0x1, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="7f", 0x1}]) 10.949018782s ago: executing program 8 (id=1218): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.749011881s ago: executing program 7 (id=1219): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/244, 0xf4}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) write$sndseq(r2, &(0x7f0000000380)=[{0x50, 0xed, 0xf3, 0xaf, @tick=0x8, {0x68, 0x80}, {0x5, 0x8}, @raw8={"8d8de9d94b98685abc2260ec"}}], 0x4a) 10.641871561s ago: executing program 1 (id=1220): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0) 10.554713311s ago: executing program 7 (id=1221): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 10.415163331s ago: executing program 0 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 10.22992859s ago: executing program 0 (id=1225): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x20000a) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x40cd) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0xbf0, &(0x7f0000000140)={0x0, 0xfffffffe, 0x20, 0x3, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 9.117544387s ago: executing program 0 (id=1231): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x7) 8.551987585s ago: executing program 1 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd2d1, 0x0, 0x0, 0x400b2e, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xff, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffc9, 0x100, 0x0, 0x0, 0x40d, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x3, 0x0, 0x0, 0xc0000000}, {0x2, 0x0, 0x0, 0x0, 0xfffd, 0xbebc20}, 0x7, 0x14, 0x2000000}}]}}]}, 0x45c}}, 0x0) 7.701089803s ago: executing program 7 (id=1238): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 7.630749312s ago: executing program 6 (id=1239): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x10) close(r0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}]}, 0x3c}}, 0x0) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171", 0x2}], 0x1}}], 0x1, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="7f", 0x1}]) 7.627265992s ago: executing program 7 (id=1240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64f764ec}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.411243849s ago: executing program 1 (id=1241): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="300000001114010029bd7000000000000800010000000000080003"], 0x30}}, 0x0) 5.624000167s ago: executing program 7 (id=1242): socket(0x848000000015, 0x805, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0) 5.266171965s ago: executing program 6 (id=1243): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x0, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000200)={0x1}, 0x4b) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = socket(0x23, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, 0x0, 0x0) close(r7) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, &(0x7f0000000400), 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) listen(r4, 0x0) connect$pppl2tp(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3.095688229s ago: executing program 0 (id=1244): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x10) close(r0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}]}, 0x3c}}, 0x0) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d1", 0x1}], 0x1}}], 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="7f", 0x1}]) 2.542198737s ago: executing program 7 (id=1245): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 2.001388766s ago: executing program 1 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r7, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd", 0x22d}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050003000000140004"], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="130000001000000002000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000016000000000000000000000000000000000000000000000000fd46dc1bfe0c277a1da6f875838204cab7da90c4f448e18f7eb34009ce2a082db82802ddab9d5769e4bb94abfdcb"], 0x48) 0s ago: executing program 6 (id=1247): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x8, 0x4}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) kernel console output (not intermixed with test programs): 000003e syscall=202 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.583658][ T29] audit: type=1326 audit(1738733321.012:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.607303][ T29] audit: type=1326 audit(1738733321.012:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d71cde9 code=0x7ffc0000 [ 55.630705][ T29] audit: type=1326 audit(1738733321.012:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d71cde9 code=0x7ffc0000 [ 55.655096][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.655147][ T29] audit: type=1326 audit(1738733321.012:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.655173][ T29] audit: type=1326 audit(1738733321.012:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.712005][ T29] audit: type=1326 audit(1738733321.012:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.736578][ T29] audit: type=1326 audit(1738733321.012:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.761252][ T29] audit: type=1326 audit(1738733321.012:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ea5fcde9 code=0x7ffc0000 [ 55.786225][ T29] audit: type=1326 audit(1738733321.112:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f579d71cde9 code=0x7ffc0000 [ 56.048649][ T4899] loop4: detected capacity change from 0 to 128 [ 56.112290][ T4904] loop1: detected capacity change from 0 to 512 [ 56.120756][ T1726] kworker/u8:6: attempt to access beyond end of device [ 56.120756][ T1726] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 56.188121][ T4869] workqueue: Failed to create a rescuer kthread for wq "dio/loop3": -EINTR [ 56.215251][ T4904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.260169][ T4904] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.365311][ T4924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4924 comm=syz.4.549 [ 56.385534][ T4919] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.411976][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.423507][ T4928] 9pnet_fd: Insufficient options for proto=fd [ 56.435860][ T4930] netlink: 148 bytes leftover after parsing attributes in process `syz.2.548'. [ 56.490405][ T4936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 56.537151][ T4938] loop3: detected capacity change from 0 to 2048 [ 56.591857][ T4938] loop3: p3 p4 < > [ 56.616291][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 56.629733][ T2999] loop3: p3 p4 < > [ 56.649704][ T4938] vlan2: entered allmulticast mode [ 56.767748][ T4956] loop2: detected capacity change from 0 to 8192 [ 56.773359][ T4955] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.782990][ T4955] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.791779][ T4955] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.800581][ T4955] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.808218][ T4958] loop4: detected capacity change from 0 to 512 [ 56.834032][ T4955] vxlan0: entered promiscuous mode [ 56.839336][ T4955] vxlan0: entered allmulticast mode [ 56.864707][ T4958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.880126][ T4958] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.891201][ T4955] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.900313][ T4955] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.909237][ T4955] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.918224][ T4955] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.951221][ T4963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.564'. [ 56.973105][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.057830][ T4970] netlink: 36 bytes leftover after parsing attributes in process `syz.4.565'. [ 57.074228][ T4971] loop3: detected capacity change from 0 to 512 [ 57.103755][ T4971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.132156][ T4971] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.171149][ T4981] tipc: Started in network mode [ 57.176803][ T4981] tipc: Node identity , cluster identity 4711 [ 57.182920][ T4981] tipc: Failed to obtain node identity [ 57.188375][ T4981] tipc: Enabling of bearer rejected, failed to enable media [ 57.239054][ T4984] siw: device registration error -23 [ 57.281035][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.291837][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.353610][ T4996] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.362365][ T4996] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.371102][ T4996] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.379804][ T4996] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.405846][ T4999] loop4: detected capacity change from 0 to 512 [ 57.431495][ T4996] vxlan0: entered promiscuous mode [ 57.436652][ T4996] vxlan0: entered allmulticast mode [ 57.487417][ T4996] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.496503][ T4996] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.505757][ T4996] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.515085][ T4996] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.531016][ T4965] workqueue: Failed to create a rescuer kthread for wq "dio/loop2": -EINTR [ 57.540519][ T4999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.561892][ T5005] loop1: detected capacity change from 0 to 8192 [ 57.580974][ T4999] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.660733][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.735794][ T5017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5017 comm=syz.2.579 [ 57.806633][ T5020] netlink: 148 bytes leftover after parsing attributes in process `syz.1.582'. [ 57.883318][ T5026] ipt_REJECT: ECHOREPLY no longer supported. [ 57.979219][ T5034] loop1: detected capacity change from 0 to 512 [ 57.986378][ T5034] EXT4-fs: Ignoring removed bh option [ 57.987424][ T5030] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 57.996563][ T5034] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 58.053252][ T5034] EXT4-fs (loop1): 1 truncate cleaned up [ 58.059405][ T5034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.115557][ T5030] netlink: 44 bytes leftover after parsing attributes in process `syz.2.587'. [ 58.130153][ T5030] loop2: detected capacity change from 0 to 512 [ 58.140371][ T5030] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.174889][ T5030] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.587: corrupted in-inode xattr: invalid ea_ino [ 58.220230][ T5030] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.587: couldn't read orphan inode 15 (err -117) [ 58.248247][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.291361][ T5030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.367737][ T5049] FAULT_INJECTION: forcing a failure. [ 58.367737][ T5049] name failslab, interval 1, probability 0, space 0, times 0 [ 58.380808][ T5049] CPU: 0 UID: 0 PID: 5049 Comm: syz.4.595 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 58.380831][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.380916][ T5049] Call Trace: [ 58.380921][ T5049] [ 58.380927][ T5049] dump_stack_lvl+0xf2/0x150 [ 58.381005][ T5049] dump_stack+0x15/0x1a [ 58.381021][ T5049] should_fail_ex+0x24a/0x260 [ 58.381047][ T5049] should_failslab+0x8f/0xb0 [ 58.381105][ T5049] __kmalloc_noprof+0xab/0x3f0 [ 58.381196][ T5049] ? security_sk_alloc+0x53/0x120 [ 58.381268][ T5049] ? should_failslab+0x8f/0xb0 [ 58.381285][ T5049] security_sk_alloc+0x53/0x120 [ 58.381355][ T5049] sk_prot_alloc+0xc6/0x190 [ 58.381375][ T5049] sk_alloc+0x33/0x360 [ 58.381471][ T5049] ? __pfx_genl_release+0x10/0x10 [ 58.381487][ T5049] netlink_create+0x31b/0x460 [ 58.381545][ T5049] ? __pfx_genl_unbind+0x10/0x10 [ 58.381586][ T5049] ? __pfx_genl_bind+0x10/0x10 [ 58.381602][ T5049] __sock_create+0x2e9/0x5a0 [ 58.381618][ T5049] __sys_socket+0xae/0x240 [ 58.381657][ T5049] __x64_sys_socket+0x3f/0x50 [ 58.381672][ T5049] x64_sys_call+0x2cf2/0x2dc0 [ 58.381690][ T5049] do_syscall_64+0xc9/0x1c0 [ 58.381707][ T5049] ? clear_bhb_loop+0x55/0xb0 [ 58.381779][ T5049] ? clear_bhb_loop+0x55/0xb0 [ 58.381797][ T5049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.381816][ T5049] RIP: 0033:0x7ff9ea5fed07 [ 58.381864][ T5049] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.381877][ T5049] RSP: 002b:00007ff9e8c5ffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 58.381891][ T5049] RAX: ffffffffffffffda RBX: 00007ff9ea815fa0 RCX: 00007ff9ea5fed07 [ 58.381899][ T5049] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 58.381908][ T5049] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 58.381916][ T5049] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 58.381925][ T5049] R13: 0000000000000000 R14: 00007ff9ea815fa0 R15: 00007fff871d9298 [ 58.381938][ T5049] [ 58.693883][ T5057] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 58.834172][ T5059] loop4: detected capacity change from 0 to 128 [ 58.835414][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.930275][ T28] kworker/u8:1: attempt to access beyond end of device [ 58.930275][ T28] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 58.953977][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.086469][ T5082] loop4: detected capacity change from 0 to 2048 [ 59.119210][ T5088] ipt_REJECT: ECHOREPLY no longer supported. [ 59.119491][ T5082] EXT4-fs (loop4): bad block size 8192 [ 59.135583][ T5093] netlink: 148 bytes leftover after parsing attributes in process `syz.0.599'. [ 59.142866][ T5091] loop1: detected capacity change from 0 to 1024 [ 59.209304][ T5091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.285818][ T5105] loop4: detected capacity change from 0 to 512 [ 59.295726][ T5105] EXT4-fs: Ignoring removed bh option [ 59.307952][ T5105] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 59.334578][ T5105] EXT4-fs (loop4): 1 truncate cleaned up [ 59.364897][ T5105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.420998][ T5117] loop3: detected capacity change from 0 to 1024 [ 59.458722][ T5117] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.474346][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.507301][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.524176][ T5117] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.550151][ T5117] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.609426][ T5117] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 59.653736][ T5128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5128 comm=syz.1.614 [ 59.687437][ T5117] EXT4-fs (loop3): Remounting filesystem read-only [ 59.711513][ T5117] EXT4-fs (loop3): 1 orphan inode deleted [ 59.730747][ T5117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.778925][ T5141] loop1: detected capacity change from 0 to 256 [ 59.792985][ T5117] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 59.799906][ T5117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.821689][ T5141] FAT-fs (loop1): bogus number of FAT sectors [ 59.827790][ T5141] FAT-fs (loop1): Can't find a valid FAT filesystem [ 59.857144][ T5147] loop4: detected capacity change from 0 to 1024 [ 59.921669][ T5147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.933926][ T5117] loop3: detected capacity change from 0 to 2048 [ 59.980343][ T5117] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.131628][ T5160] netlink: 276 bytes leftover after parsing attributes in process `syz.3.610'. [ 60.150218][ T5117] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 60.162524][ T5117] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.162524][ T5117] [ 60.172264][ T5117] EXT4-fs (loop3): Total free blocks count 0 [ 60.178230][ T5117] EXT4-fs (loop3): Free/Dirty block details [ 60.184178][ T5117] EXT4-fs (loop3): free_blocks=2415919504 [ 60.189897][ T5117] EXT4-fs (loop3): dirty_blocks=32 [ 60.195022][ T5117] EXT4-fs (loop3): Block reservation details [ 60.201037][ T5117] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 60.246597][ T5165] bridge0: entered promiscuous mode [ 60.252239][ T5165] vlan2: entered promiscuous mode [ 60.267876][ T5165] bridge0: left promiscuous mode [ 60.396556][ T1726] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.408914][ T1726] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.408914][ T1726] [ 60.581838][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 60.581852][ T29] audit: type=1326 audit(1738733326.042:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.641821][ T5187] loop1: detected capacity change from 0 to 1024 [ 60.660340][ T29] audit: type=1326 audit(1738733326.072:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.684311][ T29] audit: type=1326 audit(1738733326.072:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.707827][ T29] audit: type=1326 audit(1738733326.072:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.731798][ T29] audit: type=1326 audit(1738733326.072:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.755413][ T29] audit: type=1326 audit(1738733326.072:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.778869][ T29] audit: type=1326 audit(1738733326.072:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.802189][ T29] audit: type=1326 audit(1738733326.072:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.825486][ T29] audit: type=1326 audit(1738733326.072:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.848851][ T29] audit: type=1326 audit(1738733326.072:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 60.975569][ T5204] FAULT_INJECTION: forcing a failure. [ 60.975569][ T5204] name failslab, interval 1, probability 0, space 0, times 0 [ 60.988329][ T5204] CPU: 0 UID: 0 PID: 5204 Comm: syz.0.644 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 60.988425][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.988435][ T5204] Call Trace: [ 60.988441][ T5204] [ 60.988448][ T5204] dump_stack_lvl+0xf2/0x150 [ 60.988472][ T5204] dump_stack+0x15/0x1a [ 60.988488][ T5204] should_fail_ex+0x24a/0x260 [ 60.988512][ T5204] ? register_netdevice+0x1fa/0xe40 [ 60.988592][ T5204] should_failslab+0x8f/0xb0 [ 60.988615][ T5204] __kmalloc_cache_noprof+0x4e/0x320 [ 60.988645][ T5204] register_netdevice+0x1fa/0xe40 [ 60.988665][ T5204] ? snprintf+0x87/0xb0 [ 60.988716][ T5204] ppp_dev_configure+0x64a/0x700 [ 60.988813][ T5204] ppp_ioctl+0x4b3/0x11b0 [ 60.988833][ T5204] ? __fget_files+0x17c/0x1c0 [ 60.988858][ T5204] ? __pfx_ppp_ioctl+0x10/0x10 [ 60.988880][ T5204] __se_sys_ioctl+0xc9/0x140 [ 60.988895][ T5204] __x64_sys_ioctl+0x43/0x50 [ 60.988963][ T5204] x64_sys_call+0x1690/0x2dc0 [ 60.988983][ T5204] do_syscall_64+0xc9/0x1c0 [ 60.989085][ T5204] ? clear_bhb_loop+0x55/0xb0 [ 60.989109][ T5204] ? clear_bhb_loop+0x55/0xb0 [ 60.989132][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.989166][ T5204] RIP: 0033:0x7f579d71cde9 [ 60.989180][ T5204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.989196][ T5204] RSP: 002b:00007f579bd87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.989320][ T5204] RAX: ffffffffffffffda RBX: 00007f579d935fa0 RCX: 00007f579d71cde9 [ 60.989332][ T5204] RDX: 0000200000000100 RSI: 00000000c004743e RDI: 0000000000000003 [ 60.989343][ T5204] RBP: 00007f579bd87090 R08: 0000000000000000 R09: 0000000000000000 [ 60.989354][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.989365][ T5204] R13: 0000000000000000 R14: 00007f579d935fa0 R15: 00007ffd07ed8b28 [ 60.989380][ T5204] [ 61.222834][ T5211] tipc: Started in network mode [ 61.227764][ T5211] tipc: Node identity , cluster identity 4711 [ 61.234069][ T5211] tipc: Failed to obtain node identity [ 61.239548][ T5211] tipc: Enabling of bearer rejected, failed to enable media [ 61.260740][ T5202] bridge0: entered promiscuous mode [ 61.271049][ T5202] vlan2: entered promiscuous mode [ 61.287983][ T5202] bridge0: left promiscuous mode [ 61.317573][ T5211] siw: device registration error -23 [ 61.322994][ T5215] loop2: detected capacity change from 0 to 128 [ 61.345876][ T5215] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.491950][ T5223] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5223 comm=syz.0.649 [ 61.596675][ T5236] loop2: detected capacity change from 0 to 512 [ 61.642440][ T5236] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.671871][ T5239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.657'. [ 61.760160][ T5246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 61.769562][ T5246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 61.802453][ T5249] loop4: detected capacity change from 0 to 512 [ 61.892182][ T5249] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.901463][ T5249] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 61.942186][ T5264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5264 comm=syz.3.668 [ 61.958058][ T5258] loop2: detected capacity change from 0 to 8192 [ 61.965999][ T5249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 61.980278][ T5258] /dev/loop2: Can't open blockdev [ 61.997828][ T5249] System zones: 0-2, 18-18, 34-34 [ 62.096272][ T5249] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.138612][ T5276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.673'. [ 62.191709][ T5249] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.660: bg 0: block 18: invalid block bitmap [ 62.216801][ T5249] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 62.248098][ T5280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.257172][ T5280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.266124][ T5280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.275258][ T5280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.281060][ T5249] EXT4-fs (loop4): 1 truncate cleaned up [ 62.369134][ T5280] vxlan0: entered promiscuous mode [ 62.374488][ T5280] vxlan0: entered allmulticast mode [ 62.404224][ T5293] loop1: detected capacity change from 0 to 512 [ 62.411843][ T5280] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.421462][ T5280] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.430559][ T5280] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.439503][ T5280] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.451611][ T5293] EXT4-fs: Ignoring removed bh option [ 62.466247][ T5293] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 62.477621][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 62.637071][ T5293] EXT4-fs (loop1): 1 truncate cleaned up [ 62.649546][ T5297] bond1: entered promiscuous mode [ 62.654753][ T5297] bond1: entered allmulticast mode [ 62.681963][ T5297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.745827][ T5308] tipc: Started in network mode [ 62.750735][ T5308] tipc: Node identity , cluster identity 4711 [ 62.756888][ T5308] tipc: Failed to obtain node identity [ 62.762417][ T5308] tipc: Enabling of bearer rejected, failed to enable media [ 62.791180][ T5311] netlink: 132 bytes leftover after parsing attributes in process `syz.4.687'. [ 62.835071][ T5317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 62.849052][ T5308] siw: device registration error -23 [ 62.997956][ T5347] loop1: detected capacity change from 0 to 512 [ 63.035328][ T5347] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.044620][ T5347] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 63.054903][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 63.098865][ T5352] bond1: entered promiscuous mode [ 63.104454][ T5352] bond1: entered allmulticast mode [ 63.116834][ T5352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.138485][ T5357] loop4: detected capacity change from 0 to 512 [ 63.153718][ T5357] EXT4-fs: Ignoring removed bh option [ 63.168833][ T5357] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 63.189606][ T5367] netlink: 132 bytes leftover after parsing attributes in process `syz.3.701'. [ 63.215279][ T5357] EXT4-fs (loop4): 1 truncate cleaned up [ 63.229254][ T5347] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 63.244318][ T5374] tipc: Started in network mode [ 63.249891][ T5374] tipc: Node identity , cluster identity 4711 [ 63.256742][ T5374] tipc: Failed to obtain node identity [ 63.263339][ T5374] tipc: Enabling of bearer rejected, failed to enable media [ 63.313235][ T5347] System zones: 0-2, 18-18, 34-34 [ 63.346263][ T5374] siw: device registration error -23 [ 63.369163][ T5347] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 63.393374][ T5386] hsr_slave_0: left promiscuous mode [ 63.401237][ T5347] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.696: bg 0: block 18: invalid block bitmap [ 63.414419][ T5386] hsr_slave_1: left promiscuous mode [ 63.427128][ T5347] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.446836][ T5347] EXT4-fs (loop1): 1 truncate cleaned up [ 63.573985][ T5398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 63.584527][ T5402] FAULT_INJECTION: forcing a failure. [ 63.584527][ T5402] name failslab, interval 1, probability 0, space 0, times 0 [ 63.597205][ T5402] CPU: 1 UID: 0 PID: 5402 Comm: syz.1.712 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 63.597224][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.597234][ T5402] Call Trace: [ 63.597240][ T5402] [ 63.597246][ T5402] dump_stack_lvl+0xf2/0x150 [ 63.597270][ T5402] dump_stack+0x15/0x1a [ 63.597286][ T5402] should_fail_ex+0x24a/0x260 [ 63.597383][ T5402] should_failslab+0x8f/0xb0 [ 63.597405][ T5402] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 63.597442][ T5402] ? __d_alloc+0x3d/0x340 [ 63.597489][ T5402] __d_alloc+0x3d/0x340 [ 63.597518][ T5402] d_alloc_pseudo+0x1e/0x80 [ 63.597546][ T5402] alloc_file_pseudo+0x73/0x140 [ 63.597571][ T5402] anon_inode_getfile+0xa3/0x120 [ 63.597635][ T5402] do_epoll_create+0x1ec/0x280 [ 63.597656][ T5402] __x64_sys_epoll_create+0x35/0x50 [ 63.597681][ T5402] x64_sys_call+0x2b26/0x2dc0 [ 63.597701][ T5402] do_syscall_64+0xc9/0x1c0 [ 63.597782][ T5402] ? clear_bhb_loop+0x55/0xb0 [ 63.597803][ T5402] ? clear_bhb_loop+0x55/0xb0 [ 63.597892][ T5402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.597925][ T5402] RIP: 0033:0x7f38eec5cde9 [ 63.597938][ T5402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.597952][ T5402] RSP: 002b:00007f38ed2c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 63.597966][ T5402] RAX: ffffffffffffffda RBX: 00007f38eee75fa0 RCX: 00007f38eec5cde9 [ 63.597976][ T5402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 63.597986][ T5402] RBP: 00007f38ed2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.598044][ T5402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.598086][ T5402] R13: 0000000000000000 R14: 00007f38eee75fa0 R15: 00007ffcde78cd78 [ 63.598100][ T5402] [ 63.603835][ T5398] bond1: entered promiscuous mode [ 63.792968][ T5398] bond1: entered allmulticast mode [ 63.798438][ T5398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.826661][ T5411] tipc: Started in network mode [ 63.832025][ T5411] tipc: Node identity , cluster identity 4711 [ 63.838298][ T5411] tipc: Failed to obtain node identity [ 63.844055][ T5411] tipc: Enabling of bearer rejected, failed to enable media [ 63.853802][ T5414] veth0_vlan: entered allmulticast mode [ 63.898409][ T5415] siw: device registration error -23 [ 63.919479][ T5422] loop4: detected capacity change from 0 to 512 [ 63.963894][ T5422] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.973359][ T5422] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 63.998549][ T5422] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 64.009972][ T5422] System zones: 0-2, 18-18, 34-34 [ 64.022670][ T5422] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.061531][ T5422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.722: bg 0: block 18: invalid block bitmap [ 64.155279][ T5443] FAULT_INJECTION: forcing a failure. [ 64.155279][ T5443] name failslab, interval 1, probability 0, space 0, times 0 [ 64.155581][ T5422] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.167930][ T5443] CPU: 0 UID: 0 PID: 5443 Comm: syz.2.729 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 64.167953][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.167963][ T5443] Call Trace: [ 64.167969][ T5443] [ 64.167976][ T5443] dump_stack_lvl+0xf2/0x150 [ 64.168001][ T5443] dump_stack+0x15/0x1a [ 64.168018][ T5443] should_fail_ex+0x24a/0x260 [ 64.168046][ T5443] should_failslab+0x8f/0xb0 [ 64.168066][ T5443] kmem_cache_alloc_noprof+0x52/0x320 [ 64.168091][ T5443] ? vm_area_dup+0x98/0x130 [ 64.168110][ T5443] vm_area_dup+0x98/0x130 [ 64.168128][ T5443] __split_vma+0xf7/0x6a0 [ 64.168152][ T5443] ? __check_object_size+0x74/0x520 [ 64.168186][ T5443] ? __check_object_size+0x8b/0x520 [ 64.168215][ T5443] vms_gather_munmap_vmas+0x171/0x7a0 [ 64.168239][ T5443] ? bpf_probe_read_kernel_str+0x49/0x70 [ 64.168264][ T5443] ? __rcu_read_unlock+0x4e/0x70 [ 64.168282][ T5443] ? bpf_trace_run3+0x12b/0x1d0 [ 64.168298][ T5443] ? cgroup_rstat_updated+0x9f/0x570 [ 64.168320][ T5443] ? __rcu_read_unlock+0x4e/0x70 [ 64.168335][ T5443] do_vmi_align_munmap+0x1a4/0x390 [ 64.168361][ T5443] do_vmi_munmap+0x1eb/0x230 [ 64.168384][ T5443] __se_sys_mremap+0x696/0xf10 [ 64.168407][ T5443] __x64_sys_mremap+0x67/0x80 [ 64.168424][ T5443] x64_sys_call+0x27e8/0x2dc0 [ 64.168445][ T5443] do_syscall_64+0xc9/0x1c0 [ 64.168465][ T5443] ? clear_bhb_loop+0x55/0xb0 [ 64.168486][ T5443] ? clear_bhb_loop+0x55/0xb0 [ 64.168507][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.168535][ T5443] RIP: 0033:0x7f88cc46cde9 [ 64.168549][ T5443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.168563][ T5443] RSP: 002b:00007f88caad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 64.168579][ T5443] RAX: ffffffffffffffda RBX: 00007f88cc685fa0 RCX: 00007f88cc46cde9 [ 64.168589][ T5443] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 64.168600][ T5443] RBP: 00007f88caad7090 R08: 00002000008b5000 R09: 0000000000000000 [ 64.168610][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.168620][ T5443] R13: 0000000000000000 R14: 00007f88cc685fa0 R15: 00007ffd1567a628 [ 64.168635][ T5443] [ 64.431028][ T5422] EXT4-fs (loop4): 1 truncate cleaned up [ 64.445926][ T5475] FAULT_INJECTION: forcing a failure. [ 64.445926][ T5475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.459508][ T5475] CPU: 1 UID: 0 PID: 5475 Comm: syz.3.734 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 64.459602][ T5475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.459615][ T5475] Call Trace: [ 64.459621][ T5475] [ 64.459707][ T5475] dump_stack_lvl+0xf2/0x150 [ 64.459745][ T5475] dump_stack+0x15/0x1a [ 64.459762][ T5475] should_fail_ex+0x24a/0x260 [ 64.459856][ T5475] should_fail+0xb/0x10 [ 64.459883][ T5475] should_fail_usercopy+0x1a/0x20 [ 64.459899][ T5475] _copy_from_user+0x1c/0xa0 [ 64.459974][ T5475] kstrtouint_from_user+0x76/0xe0 [ 64.460006][ T5475] ? 0xffffffff81000000 [ 64.460016][ T5475] ? selinux_file_permission+0x22a/0x360 [ 64.460108][ T5475] proc_fail_nth_write+0x4f/0x150 [ 64.460131][ T5475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.460171][ T5475] vfs_write+0x27d/0x920 [ 64.460187][ T5475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.460206][ T5475] ? __fget_files+0x17c/0x1c0 [ 64.460231][ T5475] ksys_write+0xe8/0x1b0 [ 64.460316][ T5475] __x64_sys_write+0x42/0x50 [ 64.460333][ T5475] x64_sys_call+0x287e/0x2dc0 [ 64.460380][ T5475] do_syscall_64+0xc9/0x1c0 [ 64.460404][ T5475] ? clear_bhb_loop+0x55/0xb0 [ 64.460508][ T5475] ? clear_bhb_loop+0x55/0xb0 [ 64.460532][ T5475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.460551][ T5475] RIP: 0033:0x7f627772b89f [ 64.460624][ T5475] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 64.460639][ T5475] RSP: 002b:00007f6275d97030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 64.460656][ T5475] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f627772b89f [ 64.460669][ T5475] RDX: 0000000000000001 RSI: 00007f6275d970a0 RDI: 0000000000000004 [ 64.460681][ T5475] RBP: 00007f6275d97090 R08: 0000000000000000 R09: 0000000000000000 [ 64.460692][ T5475] R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000001 [ 64.460703][ T5475] R13: 0000000000000000 R14: 00007f6277945fa0 R15: 00007ffdf97305f8 [ 64.460721][ T5475] [ 64.782705][ T5486] loop2: detected capacity change from 0 to 512 [ 64.851921][ T5486] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.894907][ T5507] vlan2: entered promiscuous mode [ 65.006975][ T5519] tipc: Started in network mode [ 65.011993][ T5519] tipc: Node identity , cluster identity 4711 [ 65.018227][ T5519] tipc: Failed to obtain node identity [ 65.024304][ T5519] tipc: Enabling of bearer rejected, failed to enable media [ 65.056604][ T5519] siw: device registration error -23 [ 65.066135][ T5524] tipc: Started in network mode [ 65.071635][ T5524] tipc: Node identity , cluster identity 4711 [ 65.078261][ T5524] tipc: Failed to obtain node identity [ 65.084337][ T5524] tipc: Enabling of bearer rejected, failed to enable media [ 65.211460][ T5544] loop2: detected capacity change from 0 to 512 [ 65.240420][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.249609][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.291978][ T5544] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.302970][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.317602][ T5556] loop1: detected capacity change from 0 to 512 [ 65.325619][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.365017][ T5559] tipc: Started in network mode [ 65.369914][ T5559] tipc: Node identity , cluster identity 4711 [ 65.376154][ T5559] tipc: Failed to obtain node identity [ 65.381922][ T5559] tipc: Enabling of bearer rejected, failed to enable media [ 65.403124][ T5556] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.767: casefold flag without casefold feature [ 65.416277][ T5556] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.767: couldn't read orphan inode 15 (err -117) [ 65.546575][ T5567] loop2: detected capacity change from 0 to 512 [ 65.582532][ T5567] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.665586][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 65.665661][ T29] audit: type=1326 audit(1738733331.122:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.695603][ T29] audit: type=1326 audit(1738733331.122:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.720062][ T29] audit: type=1326 audit(1738733331.122:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.745760][ T29] audit: type=1326 audit(1738733331.122:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.771747][ T29] audit: type=1326 audit(1738733331.122:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.796218][ T29] audit: type=1326 audit(1738733331.122:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.819720][ T29] audit: type=1326 audit(1738733331.122:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.843241][ T29] audit: type=1326 audit(1738733331.122:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 65.869962][ T5590] tipc: Started in network mode [ 65.874885][ T5590] tipc: Node identity , cluster identity 4711 [ 65.881006][ T5590] tipc: Failed to obtain node identity [ 65.886465][ T5590] tipc: Enabling of bearer rejected, failed to enable media [ 65.902537][ T5592] ipt_REJECT: ECHOREPLY no longer supported. [ 65.952127][ T5593] loop2: detected capacity change from 0 to 8192 [ 66.015354][ T5590] siw: device registration error -23 [ 66.144323][ T5625] loop3: detected capacity change from 0 to 512 [ 66.167800][ T29] audit: type=1326 audit(1738733331.622:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 66.199904][ T5627] loop1: detected capacity change from 0 to 1024 [ 66.216975][ T29] audit: type=1326 audit(1738733331.652:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 66.268939][ T5627] EXT4-fs mount: 27 callbacks suppressed [ 66.269000][ T5627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.311982][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.334566][ T5625] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.451128][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.491706][ T5652] tipc: Started in network mode [ 66.496680][ T5652] tipc: Node identity , cluster identity 4711 [ 66.502997][ T5652] tipc: Failed to obtain node identity [ 66.508536][ T5652] tipc: Enabling of bearer rejected, failed to enable media [ 66.537712][ T5652] siw: device registration error -23 [ 66.721326][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.931624][ T5688] __nla_validate_parse: 19 callbacks suppressed [ 66.931675][ T5688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.823'. [ 67.111152][ T5698] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 67.119867][ T5698] ref_ctr increment failed for inode: 0x40d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104a44200 [ 67.239873][ T5702] FAULT_INJECTION: forcing a failure. [ 67.239873][ T5702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.253329][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: syz.1.830 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 67.253349][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.253358][ T5702] Call Trace: [ 67.253364][ T5702] [ 67.253370][ T5702] dump_stack_lvl+0xf2/0x150 [ 67.253422][ T5702] dump_stack+0x15/0x1a [ 67.253473][ T5702] should_fail_ex+0x24a/0x260 [ 67.253500][ T5702] should_fail+0xb/0x10 [ 67.253620][ T5702] should_fail_usercopy+0x1a/0x20 [ 67.253638][ T5702] _copy_from_user+0x1c/0xa0 [ 67.253703][ T5702] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 67.253730][ T5702] map_update_elem+0x195/0x470 [ 67.253756][ T5702] __sys_bpf+0x713/0x7a0 [ 67.253784][ T5702] __x64_sys_bpf+0x43/0x50 [ 67.253871][ T5702] x64_sys_call+0x2914/0x2dc0 [ 67.253895][ T5702] do_syscall_64+0xc9/0x1c0 [ 67.253914][ T5702] ? clear_bhb_loop+0x55/0xb0 [ 67.254075][ T5702] ? clear_bhb_loop+0x55/0xb0 [ 67.254096][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.254116][ T5702] RIP: 0033:0x7f38eec5cde9 [ 67.254129][ T5702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.254146][ T5702] RSP: 002b:00007f38ed2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.254233][ T5702] RAX: ffffffffffffffda RBX: 00007f38eee75fa0 RCX: 00007f38eec5cde9 [ 67.254243][ T5702] RDX: 0000000000000020 RSI: 0000200000000880 RDI: 0000000000000002 [ 67.254255][ T5702] RBP: 00007f38ed2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.254266][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.254276][ T5702] R13: 0000000000000000 R14: 00007f38eee75fa0 R15: 00007ffcde78cd78 [ 67.254292][ T5702] [ 67.470212][ T5706] loop4: detected capacity change from 0 to 1024 [ 67.482135][ T5706] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.517663][ T5706] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 67.526868][ T5706] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.579013][ T5706] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 67.611672][ T5706] EXT4-fs (loop4): Remounting filesystem read-only [ 67.619526][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.653012][ T5706] EXT4-fs (loop4): 1 orphan inode deleted [ 67.667912][ T5706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.682886][ T5706] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.691424][ T5706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.714570][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.747787][ T5720] ip6gretap0: entered promiscuous mode [ 67.755462][ T5720] vlan2: entered promiscuous mode [ 67.769348][ T5720] ip6gretap0: left promiscuous mode [ 67.793003][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.807904][ T5706] loop4: detected capacity change from 0 to 2048 [ 67.833150][ T5706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.849495][ T5732] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 67.860585][ T5732] ref_ctr increment failed for inode: 0x37c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810837b700 [ 67.889184][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.904098][ T5706] FAULT_INJECTION: forcing a failure. [ 67.904098][ T5706] name failslab, interval 1, probability 0, space 0, times 0 [ 67.920549][ T5706] CPU: 0 UID: 0 PID: 5706 Comm: syz.4.832 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 67.920923][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.920932][ T5706] Call Trace: [ 67.920938][ T5706] [ 67.920945][ T5706] dump_stack_lvl+0xf2/0x150 [ 67.920972][ T5706] dump_stack+0x15/0x1a [ 67.921103][ T5706] should_fail_ex+0x24a/0x260 [ 67.921180][ T5706] should_failslab+0x8f/0xb0 [ 67.921203][ T5706] kmem_cache_alloc_noprof+0x52/0x320 [ 67.921265][ T5706] ? __es_insert_extent+0x563/0xed0 [ 67.921286][ T5706] __es_insert_extent+0x563/0xed0 [ 67.921355][ T5706] ext4_es_insert_delayed_extent+0x312/0x8b0 [ 67.921383][ T5706] ext4_da_get_block_prep+0x79e/0xbb0 [ 67.921407][ T5706] ext4_block_write_begin+0x34f/0x9c0 [ 67.921428][ T5706] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 67.921553][ T5706] ext4_da_write_begin+0x318/0x540 [ 67.921580][ T5706] generic_perform_write+0x1a8/0x4a0 [ 67.921595][ T5706] ? __mark_inode_dirty+0x45e/0x7e0 [ 67.921675][ T5706] ext4_buffered_write_iter+0x1ed/0x3c0 [ 67.921697][ T5706] ext4_file_write_iter+0x383/0xf20 [ 67.921721][ T5706] ? 0xffffffff81000000 [ 67.921731][ T5706] ? selinux_file_permission+0x22a/0x360 [ 67.921801][ T5706] ? __rcu_read_unlock+0x4e/0x70 [ 67.921820][ T5706] ? avc_policy_seqno+0x15/0x20 [ 67.921843][ T5706] ? selinux_file_permission+0x22a/0x360 [ 67.921865][ T5706] vfs_write+0x77b/0x920 [ 67.921882][ T5706] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 67.921907][ T5706] __x64_sys_pwrite64+0xf6/0x150 [ 67.921991][ T5706] x64_sys_call+0xab0/0x2dc0 [ 67.922011][ T5706] do_syscall_64+0xc9/0x1c0 [ 67.922030][ T5706] ? clear_bhb_loop+0x55/0xb0 [ 67.922050][ T5706] ? clear_bhb_loop+0x55/0xb0 [ 67.922117][ T5706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.922202][ T5706] RIP: 0033:0x7ff9ea5fcde9 [ 67.922215][ T5706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.922238][ T5706] RSP: 002b:00007ff9e8c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 67.922255][ T5706] RAX: ffffffffffffffda RBX: 00007ff9ea815fa0 RCX: 00007ff9ea5fcde9 [ 67.922267][ T5706] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 67.922304][ T5706] RBP: 00007ff9e8c61090 R08: 0000000000000000 R09: 0000000000000000 [ 67.922313][ T5706] R10: 000000000000fec8 R11: 0000000000000246 R12: 0000000000000001 [ 67.922322][ T5706] R13: 0000000000000000 R14: 00007ff9ea815fa0 R15: 00007fff871d9298 [ 67.922336][ T5706] [ 68.236924][ T5706] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 68.256870][ T5706] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 68.269811][ T5706] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.269811][ T5706] [ 68.280592][ T5706] EXT4-fs (loop4): Total free blocks count 0 [ 68.286755][ T5706] EXT4-fs (loop4): Free/Dirty block details [ 68.293625][ T5706] EXT4-fs (loop4): free_blocks=2415919504 [ 68.299452][ T5706] EXT4-fs (loop4): dirty_blocks=32 [ 68.305115][ T5706] EXT4-fs (loop4): Block reservation details [ 68.312017][ T5706] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 68.376798][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 68.394559][ T28] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.422831][ T11] bridge_slave_1: left allmulticast mode [ 68.429308][ T11] bridge_slave_1: left promiscuous mode [ 68.435475][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.462551][ T11] bridge_slave_0: left allmulticast mode [ 68.468455][ T11] bridge_slave_0: left promiscuous mode [ 68.474286][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.537786][ T11] bridge0 (unregistering): left allmulticast mode [ 68.588558][ T5752] netlink: 'syz.4.848': attribute type 13 has an invalid length. [ 68.617879][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.635064][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.649339][ T11] bond0 (unregistering): Released all slaves [ 68.715908][ T5755] loop4: detected capacity change from 0 to 512 [ 68.796371][ T11] hsr_slave_0: left promiscuous mode [ 68.850351][ T11] hsr_slave_1: left promiscuous mode [ 68.865289][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.873752][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.897093][ T5786] loop4: detected capacity change from 0 to 512 [ 68.924450][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.934116][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.974936][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.989634][ T11] veth1_macvtap: left promiscuous mode [ 68.990322][ T5786] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.995670][ T11] veth0_macvtap: left promiscuous mode [ 69.013963][ T11] veth1_vlan: left promiscuous mode [ 69.070704][ T5798] netlink: 'syz.0.858': attribute type 13 has an invalid length. [ 69.099436][ T11] pim6reg (unregistering): left allmulticast mode [ 69.125054][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.208819][ T11] team0 (unregistering): Port device team_slave_1 removed [ 69.227124][ T5805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5805 comm=syz.0.862 [ 69.244974][ T11] team0 (unregistering): Port device team_slave_0 removed [ 69.294545][ T5809] loop4: detected capacity change from 0 to 128 [ 69.311018][ T5809] vfat: Unknown parameter '¨G]¼½¨øM[ÿÜS!‚H¸ê)xÔ`/:(û9jš;U®#Á ~“ªC~֋𦈱ñ­¨;ì–+ƒP•84koÊ š•´ê‘xXótë½ý' [ 69.327154][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.335643][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.364416][ T5717] bridge_slave_0: entered allmulticast mode [ 69.382920][ T5717] bridge_slave_0: entered promiscuous mode [ 69.401135][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.408931][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.426775][ T5717] bridge_slave_1: entered allmulticast mode [ 69.434088][ T5717] bridge_slave_1: entered promiscuous mode [ 69.466293][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.489903][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.512720][ T5820] netlink: 148 bytes leftover after parsing attributes in process `syz.0.866'. [ 69.553142][ T5717] team0: Port device team_slave_0 added [ 69.567623][ T5717] team0: Port device team_slave_1 added [ 69.627669][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.636344][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.662348][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.748896][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.755900][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.784090][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.808295][ T5837] loop1: detected capacity change from 0 to 512 [ 69.855026][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.856590][ T5841] netlink: 'syz.0.869': attribute type 13 has an invalid length. [ 69.871439][ T5837] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.968758][ T5717] hsr_slave_0: entered promiscuous mode [ 69.980682][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.004037][ T5717] hsr_slave_1: entered promiscuous mode [ 70.050526][ T5854] can0: slcan on ttyS3. [ 70.066243][ T5859] ipt_REJECT: ECHOREPLY no longer supported. [ 70.100279][ T5853] can0 (unregistered): slcan off ttyS3. [ 70.145803][ T5865] loop1: detected capacity change from 0 to 512 [ 70.152804][ T5865] EXT4-fs: Ignoring removed bh option [ 70.153748][ T5865] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 70.192549][ T5865] EXT4-fs (loop1): 1 truncate cleaned up [ 70.239497][ T5865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.329394][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.345379][ T5717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.374180][ T5717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.408544][ T5717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.435849][ T5884] loop1: detected capacity change from 0 to 1024 [ 70.526204][ T5717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.585008][ T5900] ipt_REJECT: ECHOREPLY no longer supported. [ 70.594818][ T5884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.753587][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.801212][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.825911][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.833887][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.875638][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.883350][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.898729][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 70.898742][ T29] audit: type=1326 audit(1738733336.352:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 70.929916][ T29] audit: type=1326 audit(1738733336.352:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5883 comm="syz.1.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 70.962966][ T5717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.973434][ T5717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.031865][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.062271][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.152920][ T5939] loop1: detected capacity change from 0 to 4096 [ 71.179445][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.253248][ T29] audit: type=1400 audit(1738733336.712:2582): avc: denied { write } for pid=5937 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.271468][ T5717] veth0_vlan: entered promiscuous mode [ 71.319293][ T29] audit: type=1326 audit(1738733336.772:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 71.344978][ T29] audit: type=1326 audit(1738733336.772:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 71.370768][ T29] audit: type=1326 audit(1738733336.772:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 71.394898][ T29] audit: type=1326 audit(1738733336.772:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 71.421541][ T29] audit: type=1326 audit(1738733336.772:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 71.439901][ T5717] veth1_vlan: entered promiscuous mode [ 71.447229][ T29] audit: type=1326 audit(1738733336.772:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 71.477166][ T29] audit: type=1326 audit(1738733336.912:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38eec5b750 code=0x7ffc0000 [ 71.556628][ T5717] veth0_macvtap: entered promiscuous mode [ 71.568050][ T5717] veth1_macvtap: entered promiscuous mode [ 71.586047][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.602466][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.602476][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.602487][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.602499][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.602512][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.602520][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.602529][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.637995][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.643840][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.725630][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.725641][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.725672][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.725683][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.725696][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.725739][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.725752][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.786030][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.851586][ T5983] bridge0: entered promiscuous mode [ 71.858054][ T5983] vlan2: entered promiscuous mode [ 71.877147][ T5983] bridge0: left promiscuous mode [ 71.906188][ T5717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.917429][ T5717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.926228][ T5717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.935123][ T5717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.256147][ T6013] loop4: detected capacity change from 0 to 512 [ 72.292267][ T6013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.332040][ T6013] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.349094][ T6025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12560 sclass=netlink_route_socket pid=6025 comm=syz.5.893 [ 72.408903][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.428268][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.487905][ T6038] loop4: detected capacity change from 0 to 512 [ 72.518043][ T6037] Cannot find add_set index 0 as target [ 72.526913][ T6038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.554412][ T6038] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.595966][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.769124][ T6060] loop4: detected capacity change from 0 to 512 [ 72.804034][ T6060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.847434][ T6060] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.936116][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.021261][ T6075] tipc: Started in network mode [ 73.026176][ T6075] tipc: Node identity , cluster identity 4711 [ 73.032272][ T6075] tipc: Failed to obtain node identity [ 73.037873][ T6075] tipc: Enabling of bearer rejected, failed to enable media [ 73.124682][ T6075] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.398306][ T6091] loop1: detected capacity change from 0 to 2048 [ 73.680052][ T6102] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.689461][ T6102] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.698254][ T6102] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.707070][ T6102] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.730129][ T6102] vxlan0: entered promiscuous mode [ 73.735370][ T6102] vxlan0: entered allmulticast mode [ 73.743035][ T6102] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.753266][ T6102] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.763242][ T6102] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.775724][ T6102] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.911400][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.941519][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.212239][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.944'. [ 75.424501][ T6179] netlink: 148 bytes leftover after parsing attributes in process `syz.5.948'. [ 75.565895][ T6190] 9pnet_fd: Insufficient options for proto=fd [ 75.899784][ T6217] loop4: detected capacity change from 0 to 512 [ 75.914486][ T6216] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 75.925958][ T6216] ref_ctr increment failed for inode: 0x432 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104a42680 [ 75.956055][ T6223] tipc: Started in network mode [ 75.961994][ T6223] tipc: Node identity , cluster identity 4711 [ 75.968645][ T6223] tipc: Failed to obtain node identity [ 75.972927][ T6219] netlink: 148 bytes leftover after parsing attributes in process `syz.1.962'. [ 75.975054][ T6223] tipc: Enabling of bearer rejected, failed to enable media [ 76.005756][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 76.005832][ T29] audit: type=1326 audit(1738733341.452:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.045390][ T29] audit: type=1326 audit(1738733341.452:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.076891][ T29] audit: type=1326 audit(1738733341.452:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.103374][ T29] audit: type=1326 audit(1738733341.452:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.128905][ T29] audit: type=1326 audit(1738733341.452:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.157930][ T29] audit: type=1326 audit(1738733341.452:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.186052][ T29] audit: type=1326 audit(1738733341.452:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.214480][ T29] audit: type=1326 audit(1738733341.452:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.240244][ T29] audit: type=1326 audit(1738733341.452:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.273081][ T29] audit: type=1326 audit(1738733341.452:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 76.323104][ T6217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.335718][ T6217] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.384584][ T6225] siw: device registration error -23 [ 76.601617][ T6238] 9pnet_fd: Insufficient options for proto=fd [ 76.680441][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.826885][ T6258] netlink: 148 bytes leftover after parsing attributes in process `syz.4.978'. [ 77.004680][ T6264] tipc: Started in network mode [ 77.009715][ T6264] tipc: Node identity , cluster identity 4711 [ 77.017063][ T6264] tipc: Failed to obtain node identity [ 77.023836][ T6264] tipc: Enabling of bearer rejected, failed to enable media [ 77.071750][ T6266] siw: device registration error -23 [ 77.232730][ T6275] 9pnet_fd: Insufficient options for proto=fd [ 77.294235][ T6279] capability: warning: `syz.5.986' uses deprecated v2 capabilities in a way that may be insecure [ 77.519403][ T6298] loop1: detected capacity change from 0 to 512 [ 77.557712][ T6302] netlink: 148 bytes leftover after parsing attributes in process `syz.4.991'. [ 77.600915][ T6298] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.992: corrupted in-inode xattr: invalid ea_ino [ 77.734709][ T6298] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.992: couldn't read orphan inode 15 (err -117) [ 77.822910][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.998584][ T6314] loop4: detected capacity change from 0 to 8192 [ 78.022437][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.322886][ T6330] loop1: detected capacity change from 0 to 512 [ 78.354960][ T6330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.564721][ T6330] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.652455][ T6334] loop3: detected capacity change from 0 to 512 [ 78.678111][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.756943][ T6337] 9pnet_fd: Insufficient options for proto=fd [ 78.775297][ T6338] loop5: detected capacity change from 0 to 512 [ 79.181949][ T6334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.210951][ T6334] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.233845][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.247447][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.257824][ T6353] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1005'. [ 79.395821][ T6338] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.556451][ T5717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.922980][ T4114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.934307][ T4114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.960886][ T6371] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.971727][ T6371] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.982185][ T6371] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.992261][ T6371] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.047966][ T6371] vxlan0: entered promiscuous mode [ 80.054938][ T6371] vxlan0: entered allmulticast mode [ 80.187673][ T6371] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.196759][ T6371] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.206160][ T6371] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.215255][ T6371] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.292209][ T4114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.303354][ T4114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.339456][ T6382] 9pnet_fd: Insufficient options for proto=fd [ 80.413033][ T4114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.423551][ T4114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.487571][ T6388] loop3: detected capacity change from 0 to 512 [ 80.503647][ T6396] loop1: detected capacity change from 0 to 512 [ 80.513665][ T6396] EXT4-fs: Ignoring removed i_version option [ 80.520338][ T6396] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.531302][ T6397] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1019'. [ 80.565625][ T6396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.582944][ T4114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.593972][ T4114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.598811][ T6396] EXT4-fs (loop1): 1 truncate cleaned up [ 80.631881][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.681548][ T6388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.733881][ T6404] ip6gre0: entered promiscuous mode [ 80.739140][ T6404] vlan2: entered promiscuous mode [ 80.740566][ T6388] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.756843][ T6404] ip6gre0: left promiscuous mode [ 80.798944][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 80.844584][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.030848][ T4114] bridge_slave_1: left allmulticast mode [ 81.039781][ T4114] bridge_slave_1: left promiscuous mode [ 81.046964][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.048244][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.075555][ T4114] bridge_slave_0: left allmulticast mode [ 81.083246][ T4114] bridge_slave_0: left promiscuous mode [ 81.092137][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.292308][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.326358][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.351080][ T4114] bond0 (unregistering): Released all slaves [ 81.361287][ T4114] bond1 (unregistering): Released all slaves [ 81.420244][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 81.420259][ T29] audit: type=1326 audit(1738733346.862:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.452294][ T29] audit: type=1326 audit(1738733346.862:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.477088][ T29] audit: type=1326 audit(1738733346.862:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.504803][ T29] audit: type=1326 audit(1738733346.862:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.531696][ T29] audit: type=1326 audit(1738733346.862:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.556145][ T29] audit: type=1326 audit(1738733346.862:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.579828][ T29] audit: type=1326 audit(1738733346.862:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f627772ce23 code=0x7ffc0000 [ 81.604873][ T29] audit: type=1326 audit(1738733346.862:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f627772ce23 code=0x7ffc0000 [ 81.632725][ T29] audit: type=1326 audit(1738733346.862:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.660528][ T29] audit: type=1326 audit(1738733346.862:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f627772cde9 code=0x7ffc0000 [ 81.694815][ T4114] hsr_slave_0: left promiscuous mode [ 81.707471][ T4114] hsr_slave_1: left promiscuous mode [ 81.726876][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.735066][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.800647][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.809525][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.845126][ T4114] veth1_macvtap: left promiscuous mode [ 81.864601][ T4114] veth0_macvtap: left promiscuous mode [ 81.880911][ T4114] veth1_vlan: left promiscuous mode [ 81.890404][ T4114] veth0_vlan: left promiscuous mode [ 81.963095][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1033'. [ 82.008722][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 82.028563][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 82.088577][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.095930][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.110302][ T6369] bridge_slave_0: entered allmulticast mode [ 82.121609][ T6369] bridge_slave_0: entered promiscuous mode [ 82.138410][ T6451] ip6gretap0: entered promiscuous mode [ 82.150214][ T6451] vlan2: entered promiscuous mode [ 82.156297][ T6451] ip6gretap0: left promiscuous mode [ 82.174590][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.181730][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.200762][ T6369] bridge_slave_1: entered allmulticast mode [ 82.215377][ T6369] bridge_slave_1: entered promiscuous mode [ 82.357779][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.371564][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.401169][ T6369] team0: Port device team_slave_0 added [ 82.410092][ T6369] team0: Port device team_slave_1 added [ 82.441899][ T6470] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.450672][ T6470] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.459467][ T6470] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.468316][ T6470] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.530123][ T6470] vxlan0: entered promiscuous mode [ 82.535319][ T6470] vxlan0: entered allmulticast mode [ 82.546788][ T6470] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.555980][ T6470] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.565021][ T6470] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.574196][ T6470] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.619775][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.627985][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.654615][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.666587][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.673589][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.702032][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.816298][ T6369] hsr_slave_0: entered promiscuous mode [ 82.830635][ T6369] hsr_slave_1: entered promiscuous mode [ 82.838950][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.857070][ T6369] Cannot create hsr debugfs directory [ 82.873340][ T6492] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.882139][ T6492] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.891019][ T6492] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.901188][ T6492] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.913334][ T6492] vxlan0: entered promiscuous mode [ 82.918516][ T6492] vxlan0: entered allmulticast mode [ 82.933871][ T6492] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.941708][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1045'. [ 82.942949][ T6492] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.961756][ T6492] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.970635][ T6492] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.080948][ T6518] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1047'. [ 83.196248][ T6369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 83.252886][ T6369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 83.298979][ T6369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 83.331525][ T6541] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.341164][ T6541] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.350610][ T6541] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.361317][ T6541] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.381384][ T6541] vxlan0: entered promiscuous mode [ 83.386703][ T6541] vxlan0: entered allmulticast mode [ 83.394150][ T6541] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.404705][ T6541] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.414592][ T6541] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.423647][ T6541] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.493118][ T6369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 83.591756][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.634712][ T6561] ip6tnl0: entered promiscuous mode [ 83.660523][ T6561] vlan2: entered promiscuous mode [ 83.690970][ T6561] ip6tnl0: left promiscuous mode [ 83.738326][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.777899][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.787054][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.851789][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.859083][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.876856][ T6589] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1063'. [ 83.898285][ T6593] FAULT_INJECTION: forcing a failure. [ 83.898285][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.905572][ T6369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.914500][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.5.1064 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 83.914522][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.914532][ T6593] Call Trace: [ 83.914537][ T6593] [ 83.914545][ T6593] dump_stack_lvl+0xf2/0x150 [ 83.914571][ T6593] dump_stack+0x15/0x1a [ 83.914593][ T6593] should_fail_ex+0x24a/0x260 [ 83.914624][ T6593] should_fail+0xb/0x10 [ 83.914648][ T6593] should_fail_usercopy+0x1a/0x20 [ 83.914664][ T6593] _copy_from_user+0x1c/0xa0 [ 83.914685][ T6593] ucma_write+0xd4/0x240 [ 83.914767][ T6593] ? __pfx_ucma_write+0x10/0x10 [ 83.914785][ T6593] vfs_write+0x27d/0x920 [ 83.914853][ T6593] ? __fget_files+0x17c/0x1c0 [ 83.914879][ T6593] ksys_write+0xe8/0x1b0 [ 83.914899][ T6593] __x64_sys_write+0x42/0x50 [ 83.914919][ T6593] x64_sys_call+0x287e/0x2dc0 [ 83.914942][ T6593] do_syscall_64+0xc9/0x1c0 [ 83.915025][ T6593] ? clear_bhb_loop+0x55/0xb0 [ 83.915048][ T6593] ? clear_bhb_loop+0x55/0xb0 [ 83.915082][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.915106][ T6593] RIP: 0033:0x7faf86a8cde9 [ 83.915226][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.915243][ T6593] RSP: 002b:00007faf850f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.915261][ T6593] RAX: ffffffffffffffda RBX: 00007faf86ca5fa0 RCX: 00007faf86a8cde9 [ 83.915293][ T6593] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000003 [ 83.915304][ T6593] RBP: 00007faf850f1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.915316][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.915326][ T6593] R13: 0000000000000000 R14: 00007faf86ca5fa0 R15: 00007ffefaf14b08 [ 83.915343][ T6593] [ 84.071095][ T6600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1066'. [ 84.085407][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.244773][ T6614] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.254230][ T6614] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.262195][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 84.264499][ T6614] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.283090][ T6614] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.312711][ T6614] vxlan0: entered promiscuous mode [ 84.318054][ T6614] vxlan0: entered allmulticast mode [ 84.326501][ T6614] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.335548][ T6614] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.344568][ T6614] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.353662][ T6614] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.370558][ T6621] FAULT_INJECTION: forcing a failure. [ 84.370558][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 84.383719][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.1.1069 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 84.383740][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.383750][ T6621] Call Trace: [ 84.383755][ T6621] [ 84.383762][ T6621] dump_stack_lvl+0xf2/0x150 [ 84.383795][ T6621] dump_stack+0x15/0x1a [ 84.383868][ T6621] should_fail_ex+0x24a/0x260 [ 84.383893][ T6621] ? __pfx_veth_setup+0x10/0x10 [ 84.383917][ T6621] should_failslab+0x8f/0xb0 [ 84.383940][ T6621] __kmalloc_node_noprof+0xad/0x410 [ 84.384036][ T6621] ? __kvmalloc_node_noprof+0x72/0x170 [ 84.384056][ T6621] ? __pfx_veth_setup+0x10/0x10 [ 84.384078][ T6621] __kvmalloc_node_noprof+0x72/0x170 [ 84.384099][ T6621] alloc_netdev_mqs+0xa8/0xa20 [ 84.384154][ T6621] ? __pfx_veth_setup+0x10/0x10 [ 84.384178][ T6621] rtnl_create_link+0x233/0x680 [ 84.384200][ T6621] rtnl_newlink_create+0x133/0x5d0 [ 84.384229][ T6621] rtnl_newlink+0xe9f/0x1250 [ 84.384270][ T6621] ? bsearch+0x98/0xc0 [ 84.384307][ T6621] ? ns_capable+0x7d/0xb0 [ 84.384326][ T6621] ? __pfx_rtnl_newlink+0x10/0x10 [ 84.384457][ T6621] rtnetlink_rcv_msg+0x651/0x710 [ 84.384481][ T6621] ? ref_tracker_free+0x3a5/0x410 [ 84.384518][ T6621] ? __dev_queue_xmit+0x186/0x2090 [ 84.384544][ T6621] netlink_rcv_skb+0x12c/0x230 [ 84.384567][ T6621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.384653][ T6621] rtnetlink_rcv+0x1c/0x30 [ 84.384676][ T6621] netlink_unicast+0x599/0x670 [ 84.384700][ T6621] netlink_sendmsg+0x5cc/0x6e0 [ 84.384769][ T6621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.384883][ T6621] __sock_sendmsg+0x140/0x180 [ 84.384903][ T6621] ____sys_sendmsg+0x312/0x410 [ 84.384976][ T6621] __sys_sendmsg+0x19d/0x230 [ 84.385007][ T6621] __x64_sys_sendmsg+0x46/0x50 [ 84.385027][ T6621] x64_sys_call+0x2734/0x2dc0 [ 84.385187][ T6621] do_syscall_64+0xc9/0x1c0 [ 84.385289][ T6621] ? clear_bhb_loop+0x55/0xb0 [ 84.385309][ T6621] ? clear_bhb_loop+0x55/0xb0 [ 84.385333][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.385357][ T6621] RIP: 0033:0x7f38eec5cde9 [ 84.385426][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.385443][ T6621] RSP: 002b:00007f38ed2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.385465][ T6621] RAX: ffffffffffffffda RBX: 00007f38eee75fa0 RCX: 00007f38eec5cde9 [ 84.385477][ T6621] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 84.385488][ T6621] RBP: 00007f38ed2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.385499][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.385510][ T6621] R13: 0000000000000000 R14: 00007f38eee75fa0 R15: 00007ffcde78cd78 [ 84.385530][ T6621] [ 84.388955][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.676331][ T6644] loop5: detected capacity change from 0 to 512 [ 84.769877][ T6653] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1076'. [ 85.012209][ T6369] veth0_vlan: entered promiscuous mode [ 85.021707][ T6369] veth1_vlan: entered promiscuous mode [ 85.042286][ T6369] veth0_macvtap: entered promiscuous mode [ 85.068691][ T6369] veth1_macvtap: entered promiscuous mode [ 85.112567][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.125241][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.135428][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.147214][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.157111][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.167675][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.177564][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.188157][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.190068][ T6690] loop3: detected capacity change from 0 to 512 [ 85.258780][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.327412][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.338184][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.348107][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.358542][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.368549][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.379178][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.389499][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.400534][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.432051][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.477138][ T6369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.486097][ T6369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.496187][ T6369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.505090][ T6369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.702376][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'. [ 85.811248][ T6734] loop6: detected capacity change from 0 to 512 [ 85.842560][ T6734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.904079][ T6734] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.939037][ T6747] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1088'. [ 85.987799][ T6369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.065094][ T6755] bridge0: entered promiscuous mode [ 86.085550][ T6755] vlan2: entered promiscuous mode [ 86.108062][ T6755] bridge0: left promiscuous mode [ 86.232996][ T6768] loop6: detected capacity change from 0 to 2048 [ 86.300600][ T6768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.367043][ T6369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.394857][ T6789] bond1: entered promiscuous mode [ 86.399937][ T6789] bond1: entered allmulticast mode [ 86.446200][ T6789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.497415][ T6789] bond1 (unregistering): Released all slaves [ 86.598745][ T6803] tipc: Started in network mode [ 86.603820][ T6803] tipc: Node identity , cluster identity 4711 [ 86.610554][ T6803] tipc: Failed to obtain node identity [ 86.616006][ T6803] tipc: Enabling of bearer rejected, failed to enable media [ 86.683089][ T6803] siw: device registration error -23 [ 86.722383][ T6809] loop5: detected capacity change from 0 to 512 [ 86.781774][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 86.807954][ T6809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.871926][ T6809] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.946551][ T6833] pimreg: entered allmulticast mode [ 86.966813][ T5717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.997118][ T6838] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1102'. [ 87.008334][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 87.008347][ T29] audit: type=1326 audit(1738733352.462:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.039042][ T29] audit: type=1326 audit(1738733352.462:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.062458][ T29] audit: type=1326 audit(1738733352.462:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.086083][ T29] audit: type=1326 audit(1738733352.462:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.110118][ T29] audit: type=1326 audit(1738733352.462:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.134470][ T29] audit: type=1326 audit(1738733352.462:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.159266][ T29] audit: type=1326 audit(1738733352.462:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.183195][ T29] audit: type=1326 audit(1738733352.462:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.206993][ T29] audit: type=1326 audit(1738733352.462:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.231247][ T29] audit: type=1326 audit(1738733352.462:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38eec5cde9 code=0x7ffc0000 [ 87.454423][ T6884] loop1: detected capacity change from 0 to 512 [ 87.464262][ T6887] loop6: detected capacity change from 0 to 1024 [ 87.492893][ T6887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.534495][ T6885] loop5: detected capacity change from 0 to 8192 [ 87.549901][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.571255][ T6884] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.615974][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.235812][ T6369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.304403][ T6952] pimreg: entered allmulticast mode [ 88.347845][ T6956] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1120'. [ 88.365985][ T6958] bridge1: entered promiscuous mode [ 88.371415][ T6958] bridge1: entered allmulticast mode [ 88.377617][ T6958] team0: Port device bridge1 added [ 88.386032][ T6958] bridge0: port 3(ip6gretap0) entered blocking state [ 88.392970][ T6958] bridge0: port 3(ip6gretap0) entered disabled state [ 88.400133][ T6958] ip6gretap0: entered allmulticast mode [ 88.406206][ T6958] ip6gretap0: entered promiscuous mode [ 88.412006][ T6958] bridge0: port 3(ip6gretap0) entered blocking state [ 88.418701][ T6958] bridge0: port 3(ip6gretap0) entered forwarding state [ 88.456251][ T6961] bond1: entered promiscuous mode [ 88.461376][ T6961] bond1: entered allmulticast mode [ 88.466636][ T6961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.476638][ T6961] bond1 (unregistering): Released all slaves [ 88.500336][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.586934][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.673886][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.743072][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.833936][ T6961] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1124'. [ 88.843029][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1124'. [ 88.862171][ T11] bridge_slave_1: left allmulticast mode [ 88.867949][ T11] bridge_slave_1: left promiscuous mode [ 88.873669][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.889759][ T11] bridge_slave_0: left allmulticast mode [ 88.895558][ T11] bridge_slave_0: left promiscuous mode [ 88.901219][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.918834][ T6986] loop3: detected capacity change from 0 to 8192 [ 89.094307][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.108981][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.121154][ T11] bond0 (unregistering): Released all slaves [ 89.133679][ T6968] chnl_net:caif_netlink_parms(): no params data found [ 89.185606][ T11] hsr_slave_0: left promiscuous mode [ 89.199670][ T11] hsr_slave_1: left promiscuous mode [ 89.216253][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.224101][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.240557][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.249495][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.262072][ T11] veth1_macvtap: left promiscuous mode [ 89.267666][ T11] veth0_macvtap: left promiscuous mode [ 89.273570][ T11] veth1_vlan: left promiscuous mode [ 89.283466][ T11] veth0_vlan: left promiscuous mode [ 89.398334][ T11] team0 (unregistering): Port device team_slave_1 removed [ 89.415910][ T11] team0 (unregistering): Port device team_slave_0 removed [ 89.507220][ T7032] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.517906][ T7032] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.526983][ T7032] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.536304][ T7032] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.546500][ T7032] vxlan0: entered promiscuous mode [ 89.552964][ T7032] vxlan0: entered allmulticast mode [ 89.560356][ T7032] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.569624][ T7032] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.572929][ T7039] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1137'. [ 89.578696][ T7032] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.596842][ T7032] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.613951][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.621184][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.629322][ T6968] bridge_slave_0: entered allmulticast mode [ 89.636626][ T6968] bridge_slave_0: entered promiscuous mode [ 89.644117][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.652422][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.659609][ T6968] bridge_slave_1: entered allmulticast mode [ 89.665970][ T6968] bridge_slave_1: entered promiscuous mode [ 89.715537][ T6968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.726882][ T6968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.806493][ T6968] team0: Port device team_slave_0 added [ 89.916551][ T6968] team0: Port device team_slave_1 added [ 89.964909][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.972001][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.002239][ T6968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.027983][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 90.041373][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.049781][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.078199][ T6968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.317632][ T6968] hsr_slave_0: entered promiscuous mode [ 90.342632][ T6968] hsr_slave_1: entered promiscuous mode [ 90.548649][ T6968] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.560526][ T6968] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.572768][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 90.584895][ T6968] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.621137][ T6968] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.795810][ T6968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.819420][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.826624][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.848863][ T7065] bridge_slave_0: entered allmulticast mode [ 90.856355][ T7065] bridge_slave_0: entered promiscuous mode [ 90.878030][ T6968] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.898177][ T7127] pim6reg1: entered promiscuous mode [ 90.903629][ T7127] pim6reg1: entered allmulticast mode [ 90.920925][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.928011][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.939571][ T7065] bridge_slave_1: entered allmulticast mode [ 90.946428][ T7065] bridge_slave_1: entered promiscuous mode [ 90.958867][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.965965][ T6512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.995904][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.003016][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.028648][ T6968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.039092][ T6968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.059303][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.078355][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.144314][ T7065] team0: Port device team_slave_0 added [ 91.165319][ T7065] team0: Port device team_slave_1 added [ 91.203405][ T7162] syz.1.1158 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.215126][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.222249][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.248360][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.261976][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.268930][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.294899][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.305639][ T7164] loop1: detected capacity change from 0 to 1024 [ 91.337039][ T6968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.344692][ T7164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.361669][ T7065] hsr_slave_0: entered promiscuous mode [ 91.377262][ T7065] hsr_slave_1: entered promiscuous mode [ 91.387431][ T7065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.397261][ T7065] Cannot create hsr debugfs directory [ 91.557629][ T7065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.578110][ T6968] veth0_vlan: entered promiscuous mode [ 91.584489][ T7065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.595478][ T7065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.605723][ T7065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.617971][ T6968] veth1_vlan: entered promiscuous mode [ 91.648226][ T6968] veth0_macvtap: entered promiscuous mode [ 91.662301][ T6968] veth1_macvtap: entered promiscuous mode [ 91.679693][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.690229][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.700193][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.710968][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.720828][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.731402][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.741407][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.752802][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.765240][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.773551][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.784096][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.794010][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.804555][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.814468][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.824903][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.834730][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.845166][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.855676][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.866738][ T6968] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.875528][ T6968] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.884336][ T6968] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.893146][ T6968] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926666][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.952785][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.990642][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1162'. [ 91.999634][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1162'. [ 92.001897][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.015674][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.058505][ T7065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.068999][ T7065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.083489][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.107139][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.114470][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.225073][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.251322][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1166'. [ 92.456260][ T7275] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1171'. [ 92.495142][ T7288] netlink: 'syz.7.1173': attribute type 3 has an invalid length. [ 92.532178][ T7065] veth0_vlan: entered promiscuous mode [ 92.555306][ T7065] veth1_vlan: entered promiscuous mode [ 92.598071][ T7065] veth0_macvtap: entered promiscuous mode [ 92.621716][ T7065] veth1_macvtap: entered promiscuous mode [ 92.672563][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.683183][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.693044][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.703516][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.713412][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.715507][ T7303] loop7: detected capacity change from 0 to 1764 [ 92.723838][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.723859][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.723872][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.723886][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.773726][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.800583][ T7305] loop6: detected capacity change from 0 to 1764 [ 92.820068][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 92.820084][ T29] audit: type=1400 audit(1738733358.252:3331): avc: denied { mount } for pid=7295 comm="syz.7.1176" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 92.861018][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.880908][ T29] audit: type=1400 audit(1738733358.342:3332): avc: denied { unmount } for pid=6369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 93.012247][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.022767][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.032781][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.043354][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.053276][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.054656][ T7306] infiniband syz0: set active [ 93.063816][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.063846][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.063858][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.063871][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.063900][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.119579][ T7306] infiniband syz0: added syz_tun [ 93.127323][ T7312] loop6: detected capacity change from 0 to 1024 [ 93.181154][ T7312] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 93.181154][ T7312] [ 93.192202][ T7312] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 93.265518][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.441833][ T7306] infiniband syz0: Couldn't open port 1 [ 93.454872][ T29] audit: type=1400 audit(1738733358.912:3333): avc: denied { read } for pid=7317 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.536417][ T7065] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545267][ T7065] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.548966][ T7306] RDS/IB: syz0: added [ 93.554648][ T7065] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.554678][ T7065] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.622968][ T7306] smc: adding ib device syz0 with port count 1 [ 93.639657][ T29] audit: type=1400 audit(1738733359.092:3334): avc: denied { getopt } for pid=7324 comm="syz.1.1182" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.679222][ T7306] smc: ib device syz0 port 1 has pnetid [ 93.743185][ T7326] bridge_slave_0: left allmulticast mode [ 93.748868][ T7326] bridge_slave_0: left promiscuous mode [ 93.754538][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.793763][ T7326] bridge_slave_1: left allmulticast mode [ 93.799455][ T7326] bridge_slave_1: left promiscuous mode [ 93.805250][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.853106][ T7326] bond0: (slave bond_slave_0): Releasing backup interface [ 93.893658][ T7326] bond0: (slave bond_slave_1): Releasing backup interface [ 93.940366][ T7326] team0: Port device team_slave_0 removed [ 93.993016][ T7326] team0: Port device team_slave_1 removed [ 93.999812][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.007433][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.081110][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.088590][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.177840][ T7333] tmpfs: Unsupported parameter 'huge' [ 94.271443][ T29] audit: type=1400 audit(1738733359.732:3335): avc: denied { read } for pid=7336 comm="syz.8.1185" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.294803][ T29] audit: type=1400 audit(1738733359.732:3336): avc: denied { open } for pid=7336 comm="syz.8.1185" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 94.446009][ T29] audit: type=1400 audit(1738733359.862:3337): avc: denied { connect } for pid=7343 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.465726][ T29] audit: type=1400 audit(1738733359.882:3338): avc: denied { setopt } for pid=7343 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.369265][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1190'. [ 95.393997][ T29] audit: type=1400 audit(1738733360.822:3339): avc: denied { read } for pid=7353 comm="syz.8.1189" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.500609][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.509125][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.686855][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1193'. [ 95.913194][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1198'. [ 95.948364][ T7380] netlink: 'syz.7.1200': attribute type 10 has an invalid length. [ 95.956866][ T7380] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1200'. [ 95.987545][ T7380] batadv0: entered promiscuous mode [ 95.993143][ T7380] batadv0: entered allmulticast mode [ 96.047573][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.102347][ T7380] bridge0: port 3(batadv0) entered blocking state [ 96.108929][ T7380] bridge0: port 3(batadv0) entered disabled state [ 96.130760][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.169739][ T7392] random: crng reseeded on system resumption [ 96.335805][ T29] audit: type=1400 audit(1738733361.622:3340): avc: denied { write } for pid=7381 comm="syz.1.1201" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.378407][ T7380] bridge0: port 3(batadv0) entered blocking state [ 96.384926][ T7380] bridge0: port 3(batadv0) entered forwarding state [ 96.425015][ T7386] batman_adv: batadv0: Adding interface: dummy0 [ 96.431696][ T7386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.470603][ T7386] batman_adv: batadv0: Interface activated: dummy0 [ 96.661016][ T7415] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1212'. [ 96.881081][ T28] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.891004][ T28] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.055237][ T7416] bridge2: entered promiscuous mode [ 97.522811][ T7449] 9pnet_virtio: no channels available for device syz [ 97.914286][ T7467] netlink: 'syz.6.1226': attribute type 1 has an invalid length. [ 97.922602][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1226'. [ 98.849355][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 98.849369][ T29] audit: type=1400 audit(1738733364.302:3347): avc: denied { shutdown } for pid=7448 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.876855][ T29] audit: type=1400 audit(1738733364.302:3348): avc: denied { read } for pid=7448 comm="syz.1.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.902385][ T7497] loop6: detected capacity change from 0 to 512 [ 99.040786][ T7497] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 99.308989][ T7497] EXT4-fs (loop6): 1 orphan inode deleted [ 99.315096][ T7497] EXT4-fs (loop6): 1 truncate cleaned up [ 99.378846][ T7497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.754130][ T6369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.915922][ T7524] loop6: detected capacity change from 0 to 256 [ 99.993880][ T29] audit: type=1400 audit(1738733365.442:3349): avc: denied { mount } for pid=7523 comm="syz.6.1233" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 100.000248][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.151129][ T29] audit: type=1400 audit(1738733365.532:3350): avc: denied { unmount } for pid=6369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 100.174365][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.320977][ T7535] sch_tbf: peakrate 12500000 is lower than or equals to rate 3221225472 ! [ 100.380344][ T29] audit: type=1400 audit(1738733365.842:3351): avc: denied { create } for pid=7538 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.672777][ T29] audit: type=1400 audit(1738733365.872:3352): avc: denied { setopt } for pid=7538 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.501544][ T29] audit: type=1400 audit(1738733369.962:3353): avc: denied { connect } for pid=7561 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.812657][ T29] audit: type=1400 audit(1738733370.012:3354): avc: denied { listen } for pid=7561 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.052627][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 107.814933][ T29] audit: type=1400 audit(1738733373.272:3355): avc: denied { create } for pid=7579 comm="syz.7.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.293849][ C0] ================================================================== [ 108.302057][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 108.309272][ C0] [ 108.311613][ C0] read-write to 0xffff888144adc020 of 4 bytes by interrupt on cpu 1: [ 108.320214][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 108.324996][ C0] can_rcv_filter+0xbf/0x4c0 [ 108.329874][ C0] can_receive+0x182/0x1f0 [ 108.334490][ C0] can_rcv+0xe7/0x180 [ 108.338756][ C0] __netif_receive_skb+0x123/0x280 [ 108.344424][ C0] process_backlog+0x22e/0x440 [ 108.349214][ C0] __napi_poll+0x63/0x3c0 [ 108.353647][ C0] net_rx_action+0x3a1/0x7f0 [ 108.358793][ C0] handle_softirqs+0xbf/0x280 [ 108.364366][ C0] run_ksoftirqd+0x1c/0x30 [ 108.369351][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 108.375534][ C0] kthread+0x4ae/0x520 [ 108.380311][ C0] ret_from_fork+0x4b/0x60 [ 108.384840][ C0] ret_from_fork_asm+0x1a/0x30 [ 108.389625][ C0] [ 108.392695][ C0] read-write to 0xffff888144adc020 of 4 bytes by interrupt on cpu 0: [ 108.401039][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 108.406520][ C0] can_rcv_filter+0xbf/0x4c0 [ 108.411401][ C0] can_receive+0x182/0x1f0 [ 108.415923][ C0] can_rcv+0xe7/0x180 [ 108.420091][ C0] __netif_receive_skb+0x123/0x280 [ 108.425213][ C0] process_backlog+0x22e/0x440 [ 108.429998][ C0] __napi_poll+0x63/0x3c0 [ 108.434348][ C0] net_rx_action+0x3a1/0x7f0 [ 108.439048][ C0] handle_softirqs+0xbf/0x280 [ 108.443904][ C0] do_softirq+0x5e/0x90 [ 108.448170][ C0] __local_bh_enable_ip+0x6e/0x70 [ 108.453212][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 108.458341][ C0] lock_sock_nested+0x10f/0x140 [ 108.463198][ C0] tcp_recvmsg+0x121/0x490 [ 108.467708][ C0] inet_recvmsg+0xbd/0x290 [ 108.472237][ C0] sock_recvmsg+0xfe/0x170 [ 108.476667][ C0] sock_read_iter+0x14c/0x1a0 [ 108.482065][ C0] vfs_read+0x5cc/0x6f0 [ 108.486643][ C0] ksys_read+0xe8/0x1b0 [ 108.490899][ C0] __x64_sys_read+0x42/0x50 [ 108.495519][ C0] x64_sys_call+0x2874/0x2dc0 [ 108.501252][ C0] do_syscall_64+0xc9/0x1c0 [ 108.506734][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.513709][ C0] [ 108.516929][ C0] value changed: 0x000c12ec -> 0x000c12ed [ 108.522923][ C0] [ 108.526295][ C0] Reported by Kernel Concurrency Sanitizer on: [ 108.532641][ C0] CPU: 0 UID: 0 PID: 3287 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 108.544634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.557496][ C0] ================================================================== [ 108.600052][ C0] ================================================================== [ 108.608488][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 108.615740][ C0] [ 108.618066][ C0] read-write to 0xffff888101fdf248 of 8 bytes by interrupt on cpu 1: [ 108.626384][ C0] can_rcv_filter+0x3a9/0x4c0 [ 108.631530][ C0] can_receive+0x182/0x1f0 [ 108.636123][ C0] can_rcv+0xe7/0x180 [ 108.640681][ C0] __netif_receive_skb+0x123/0x280 [ 108.647298][ C0] process_backlog+0x22e/0x440 [ 108.652617][ C0] __napi_poll+0x63/0x3c0 [ 108.657147][ C0] net_rx_action+0x3a1/0x7f0 [ 108.661851][ C0] handle_softirqs+0xbf/0x280 [ 108.666920][ C0] do_softirq+0x5e/0x90 [ 108.671675][ C0] __local_bh_enable_ip+0x6e/0x70 [ 108.676797][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 108.682012][ C0] neigh_periodic_work+0x605/0x6b0 [ 108.687580][ C0] process_scheduled_works+0x483/0x9a0 [ 108.694176][ C0] worker_thread+0x51d/0x6f0 [ 108.698946][ C0] kthread+0x4ae/0x520 [ 108.703125][ C0] ret_from_fork+0x4b/0x60 [ 108.707550][ C0] ret_from_fork_asm+0x1a/0x30 [ 108.712585][ C0] [ 108.714905][ C0] read-write to 0xffff888101fdf248 of 8 bytes by interrupt on cpu 0: [ 108.722990][ C0] can_rcv_filter+0x3a9/0x4c0 [ 108.728124][ C0] can_receive+0x182/0x1f0 [ 108.732826][ C0] can_rcv+0xe7/0x180 [ 108.736931][ C0] __netif_receive_skb+0x123/0x280 [ 108.742161][ C0] process_backlog+0x22e/0x440 [ 108.747292][ C0] __napi_poll+0x63/0x3c0 [ 108.752330][ C0] net_rx_action+0x3a1/0x7f0 [ 108.757028][ C0] handle_softirqs+0xbf/0x280 [ 108.761721][ C0] do_softirq+0x5e/0x90 [ 108.766156][ C0] __local_bh_enable_ip+0x6e/0x70 [ 108.775137][ C0] xt_replace_table+0x261/0x460 [ 108.780885][ C0] __do_replace+0xcc/0x580 [ 108.785873][ C0] do_ip6t_set_ctl+0x820/0x8c0 [ 108.790667][ C0] nf_setsockopt+0x195/0x1b0 [ 108.795275][ C0] ipv6_setsockopt+0x10f/0x130 [ 108.800222][ C0] tcp_setsockopt+0x93/0xb0 [ 108.804742][ C0] sock_common_setsockopt+0x64/0x80 [ 108.811520][ C0] __sys_setsockopt+0x187/0x200 [ 108.816384][ C0] __x64_sys_setsockopt+0x66/0x80 [ 108.821422][ C0] x64_sys_call+0x282e/0x2dc0 [ 108.826198][ C0] do_syscall_64+0xc9/0x1c0 [ 108.831064][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.837065][ C0] [ 108.839751][ C0] value changed: 0x0000000000007df6 -> 0x0000000000007df7 [ 108.846961][ C0] [ 108.849283][ C0] Reported by Kernel Concurrency Sanitizer on: [ 108.855547][ C0] CPU: 0 UID: 0 PID: 3300 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 108.866403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.878119][ C0] ================================================================== [ 108.965961][ C0] ================================================================== [ 108.975399][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 108.983664][ C0] [ 108.986014][ C0] read-write to 0xffff8881091a6248 of 8 bytes by interrupt on cpu 1: [ 108.996536][ C0] can_rcv_filter+0xd1/0x4c0 [ 109.004631][ C0] can_receive+0x182/0x1f0 [ 109.011598][ C0] can_rcv+0xe7/0x180 [ 109.015634][ C0] __netif_receive_skb+0x123/0x280 [ 109.020862][ C0] process_backlog+0x22e/0x440 [ 109.025675][ C0] __napi_poll+0x63/0x3c0 [ 109.030179][ C0] net_rx_action+0x3a1/0x7f0 [ 109.035197][ C0] handle_softirqs+0xbf/0x280 [ 109.041374][ C0] do_softirq+0x5e/0x90 [ 109.045567][ C0] __local_bh_enable_ip+0x6e/0x70 [ 109.052389][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 109.058386][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 109.067178][ C0] process_scheduled_works+0x483/0x9a0 [ 109.072839][ C0] worker_thread+0x51d/0x6f0 [ 109.077437][ C0] kthread+0x4ae/0x520 [ 109.081867][ C0] ret_from_fork+0x4b/0x60 [ 109.086300][ C0] ret_from_fork_asm+0x1a/0x30 [ 109.091092][ C0] [ 109.094573][ C0] read-write to 0xffff8881091a6248 of 8 bytes by interrupt on cpu 0: [ 109.102656][ C0] can_rcv_filter+0xd1/0x4c0 [ 109.107366][ C0] can_receive+0x182/0x1f0 [ 109.111982][ C0] can_rcv+0xe7/0x180 [ 109.115993][ C0] __netif_receive_skb+0x123/0x280 [ 109.121121][ C0] process_backlog+0x22e/0x440 [ 109.125918][ C0] __napi_poll+0x63/0x3c0 [ 109.130749][ C0] net_rx_action+0x3a1/0x7f0 [ 109.135389][ C0] handle_softirqs+0xbf/0x280 [ 109.140188][ C0] run_ksoftirqd+0x1c/0x30 [ 109.144664][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 109.149707][ C0] kthread+0x4ae/0x520 [ 109.154898][ C0] ret_from_fork+0x4b/0x60 [ 109.159682][ C0] ret_from_fork_asm+0x1a/0x30 [ 109.165167][ C0] [ 109.167669][ C0] value changed: 0x00000000000c856b -> 0x00000000000c856c [ 109.175261][ C0] [ 109.178126][ C0] Reported by Kernel Concurrency Sanitizer on: [ 109.184282][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 109.195534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.207172][ C0] ================================================================== [ 111.310878][ C1] ================================================================== [ 111.319514][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 111.326829][ C1] [ 111.329154][ C1] read-write to 0xffff888144adc020 of 4 bytes by interrupt on cpu 0: [ 111.337666][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 111.342711][ C1] can_rcv_filter+0xbf/0x4c0 [ 111.347334][ C1] can_receive+0x182/0x1f0 [ 111.351768][ C1] can_rcv+0xe7/0x180 [ 111.355948][ C1] __netif_receive_skb+0x123/0x280 [ 111.361110][ C1] process_backlog+0x22e/0x440 [ 111.365891][ C1] __napi_poll+0x63/0x3c0 [ 111.370323][ C1] net_rx_action+0x3a1/0x7f0 [ 111.376063][ C1] handle_softirqs+0xbf/0x280 [ 111.380831][ C1] do_softirq+0x5e/0x90 [ 111.385625][ C1] __local_bh_enable_ip+0x6e/0x70 [ 111.390660][ C1] fpu__clear_user_states+0x181/0x2b0 [ 111.396065][ C1] arch_do_signal_or_restart+0x2ff/0x4b0 [ 111.401762][ C1] syscall_exit_to_user_mode+0x62/0x120 [ 111.407576][ C1] do_syscall_64+0xd6/0x1c0 [ 111.412723][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.418632][ C1] [ 111.421002][ C1] read-write to 0xffff888144adc020 of 4 bytes by interrupt on cpu 1: [ 111.429360][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 111.434045][ C1] can_rcv_filter+0xbf/0x4c0 [ 111.438662][ C1] can_receive+0x182/0x1f0 [ 111.443224][ C1] can_rcv+0xe7/0x180 [ 111.447214][ C1] __netif_receive_skb+0x123/0x280 [ 111.452353][ C1] process_backlog+0x22e/0x440 [ 111.457131][ C1] __napi_poll+0x63/0x3c0 [ 111.461562][ C1] net_rx_action+0x3a1/0x7f0 [ 111.466170][ C1] handle_softirqs+0xbf/0x280 [ 111.471030][ C1] run_ksoftirqd+0x1c/0x30 [ 111.475455][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 111.480394][ C1] kthread+0x4ae/0x520 [ 111.484518][ C1] ret_from_fork+0x4b/0x60 [ 111.488944][ C1] ret_from_fork_asm+0x1a/0x30 [ 111.493716][ C1] [ 111.496032][ C1] value changed: 0x000ec9a4 -> 0x000ec9a5 [ 111.501746][ C1] [ 111.504066][ C1] Reported by Kernel Concurrency Sanitizer on: [ 111.510311][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 111.520993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.531139][ C1] ================================================================== [ 111.981798][ C1] ================================================================== [ 111.990120][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 111.997547][ C1] [ 112.000571][ C1] read-write to 0xffff888101fdf248 of 8 bytes by interrupt on cpu 0: [ 112.009823][ C1] can_rcv_filter+0xd1/0x4c0 [ 112.014552][ C1] can_receive+0x182/0x1f0 [ 112.019512][ C1] can_rcv+0xe7/0x180 [ 112.024459][ C1] __netif_receive_skb+0x123/0x280 [ 112.029766][ C1] process_backlog+0x22e/0x440 [ 112.035151][ C1] __napi_poll+0x63/0x3c0 [ 112.039500][ C1] net_rx_action+0x3a1/0x7f0 [ 112.044630][ C1] handle_softirqs+0xbf/0x280 [ 112.049495][ C1] do_softirq+0x5e/0x90 [ 112.053658][ C1] __local_bh_enable_ip+0x6e/0x70 [ 112.058854][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 112.063800][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 112.069441][ C1] process_scheduled_works+0x483/0x9a0 [ 112.074906][ C1] worker_thread+0x51d/0x6f0 [ 112.079495][ C1] kthread+0x4ae/0x520 [ 112.083564][ C1] ret_from_fork+0x4b/0x60 [ 112.087993][ C1] ret_from_fork_asm+0x1a/0x30 [ 112.092763][ C1] [ 112.095083][ C1] read-write to 0xffff888101fdf248 of 8 bytes by interrupt on cpu 1: [ 112.103492][ C1] can_rcv_filter+0xd1/0x4c0 [ 112.108100][ C1] can_receive+0x182/0x1f0 [ 112.112530][ C1] can_rcv+0xe7/0x180 [ 112.116525][ C1] __netif_receive_skb+0x123/0x280 [ 112.121734][ C1] process_backlog+0x22e/0x440 [ 112.126511][ C1] __napi_poll+0x63/0x3c0 [ 112.130855][ C1] net_rx_action+0x3a1/0x7f0 [ 112.135475][ C1] handle_softirqs+0xbf/0x280 [ 112.140676][ C1] run_ksoftirqd+0x1c/0x30 [ 112.145096][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 112.150050][ C1] kthread+0x4ae/0x520 [ 112.154210][ C1] ret_from_fork+0x4b/0x60 [ 112.158635][ C1] ret_from_fork_asm+0x1a/0x30 [ 112.163413][ C1] [ 112.165745][ C1] value changed: 0x000000000002f898 -> 0x000000000002f899 [ 112.172849][ C1] [ 112.175257][ C1] Reported by Kernel Concurrency Sanitizer on: [ 112.181507][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 112.192100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 112.202162][ C1] ================================================================== [ 114.386337][ C0] ================================================================== [ 114.394457][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 114.401666][ C0] [ 114.404072][ C0] read-write to 0xffff888144adc020 of 4 bytes by interrupt on cpu 1: [ 114.412231][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 114.416918][ C0] can_rcv_filter+0xbf/0x4c0 [ 114.421522][ C0] can_receive+0x182/0x1f0 [ 114.426205][ C0] can_rcv+0xe7/0x180 [ 114.430286][ C0] __netif_receive_skb+0x123/0x280 [ 114.435497][ C0] process_backlog+0x22e/0x440 [ 114.440277][ C0] __napi_poll+0x63/0x3c0 [ 114.444612][ C0] net_rx_action+0x3a1/0x7f0 [ 114.449215][ C0] handle_softirqs+0xbf/0x280 [ 114.453900][ C0] do_softirq+0x5e/0x90 [ 114.458163][ C0] __local_bh_enable_ip+0x6e/0x70 [ 114.463197][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 114.468164][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 114.473838][ C0] process_scheduled_works+0x483/0x9a0 [ 114.479296][ C0] worker_thread+0x51d/0x6f0 [ 114.483889][ C0] kthread+0x4ae/0x520 [ 114.487970][ C0] ret_from_fork+0x4b/0x60 [ 114.492395][ C0] ret_from_fork_asm+0x1a/0x30 [ 114.497174][ C0] [ 114.499494][ C0] read-write to 0xffff888144adc020 of 4 bytes by interrupt on cpu 0: [ 114.507566][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 114.512252][ C0] can_rcv_filter+0xbf/0x4c0 [ 114.516861][ C0] can_receive+0x182/0x1f0 [ 114.521299][ C0] can_rcv+0xe7/0x180 [ 114.525299][ C0] __netif_receive_skb+0x123/0x280 [ 114.530775][ C0] process_backlog+0x22e/0x440 [ 114.535555][ C0] __napi_poll+0x63/0x3c0 [ 114.539902][ C0] net_rx_action+0x3a1/0x7f0 [ 114.544511][ C0] handle_softirqs+0xbf/0x280 [ 114.549203][ C0] do_softirq+0x5e/0x90 [ 114.553487][ C0] __local_bh_enable_ip+0x6e/0x70 [ 114.558520][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 114.563738][ C0] batadv_nc_purge_paths+0x220/0x270 [ 114.569396][ C0] batadv_nc_worker+0x402/0xad0 [ 114.574459][ C0] process_scheduled_works+0x483/0x9a0 [ 114.580017][ C0] worker_thread+0x51d/0x6f0 [ 114.584627][ C0] kthread+0x4ae/0x520 [ 114.588711][ C0] ret_from_fork+0x4b/0x60 [ 114.593141][ C0] ret_from_fork_asm+0x1a/0x30 [ 114.597919][ C0] [ 114.600265][ C0] value changed: 0x0011c715 -> 0x0011c716 [ 114.606427][ C0] [ 114.608752][ C0] Reported by Kernel Concurrency Sanitizer on: [ 114.614986][ C0] CPU: 0 UID: 0 PID: 1726 Comm: kworker/u8:6 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 114.625928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.636145][ C0] Workqueue: bat_events batadv_nc_worker [ 114.641808][ C0] ================================================================== [ 115.020926][ C0] ================================================================== [ 115.029486][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 115.037066][ C0] [ 115.039393][ C0] read-write to 0xffff8881091a6248 of 8 bytes by interrupt on cpu 1: [ 115.047732][ C0] can_rcv_filter+0xd1/0x4c0 [ 115.052357][ C0] can_receive+0x182/0x1f0 [ 115.056794][ C0] can_rcv+0xe7/0x180 [ 115.060792][ C0] __netif_receive_skb+0x123/0x280 [ 115.066096][ C0] process_backlog+0x22e/0x440 [ 115.070899][ C0] __napi_poll+0x63/0x3c0 [ 115.075274][ C0] net_rx_action+0x3a1/0x7f0 [ 115.079889][ C0] handle_softirqs+0xbf/0x280 [ 115.084583][ C0] do_softirq+0x5e/0x90 [ 115.088750][ C0] __local_bh_enable_ip+0x6e/0x70 [ 115.093805][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 115.098760][ C0] lock_sock_nested+0x10f/0x140 [ 115.103963][ C0] sockopt_lock_sock+0x42/0x50 [ 115.108736][ C0] do_ip_getsockopt+0xb57/0x11a0 [ 115.113684][ C0] ip_getsockopt+0x5c/0x170 [ 115.118204][ C0] tcp_getsockopt+0xaa/0xe0 [ 115.122718][ C0] sock_common_getsockopt+0x5b/0x70 [ 115.127925][ C0] do_sock_getsockopt+0x1ca/0x260 [ 115.132996][ C0] __x64_sys_getsockopt+0x18c/0x200 [ 115.138393][ C0] x64_sys_call+0x1288/0x2dc0 [ 115.143090][ C0] do_syscall_64+0xc9/0x1c0 [ 115.148916][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.154910][ C0] [ 115.157244][ C0] read-write to 0xffff8881091a6248 of 8 bytes by interrupt on cpu 0: [ 115.165859][ C0] can_rcv_filter+0xd1/0x4c0 [ 115.170643][ C0] can_receive+0x182/0x1f0 [ 115.175085][ C0] can_rcv+0xe7/0x180 [ 115.179083][ C0] __netif_receive_skb+0x123/0x280 [ 115.184211][ C0] process_backlog+0x22e/0x440 [ 115.188986][ C0] __napi_poll+0x63/0x3c0 [ 115.193503][ C0] net_rx_action+0x3a1/0x7f0 [ 115.198110][ C0] handle_softirqs+0xbf/0x280 [ 115.202797][ C0] do_softirq+0x5e/0x90 [ 115.206955][ C0] __local_bh_enable_ip+0x6e/0x70 [ 115.212017][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 115.216968][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 115.222649][ C0] process_scheduled_works+0x483/0x9a0 [ 115.228113][ C0] worker_thread+0x51d/0x6f0 [ 115.232706][ C0] kthread+0x4ae/0x520 [ 115.236778][ C0] ret_from_fork+0x4b/0x60 [ 115.241227][ C0] ret_from_fork_asm+0x1a/0x30 [ 115.246095][ C0] [ 115.248414][ C0] value changed: 0x0000000000127939 -> 0x000000000012793a [ 115.255519][ C0] [ 115.257837][ C0] Reported by Kernel Concurrency Sanitizer on: [ 115.263988][ C0] CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 115.274675][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.284829][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 115.291622][ C0] ================================================================== [ 117.413477][ C0] ================================================================== [ 117.421771][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 117.429059][ C0] [ 117.431373][ C0] read-write to 0xffff88812a6c0358 of 4 bytes by interrupt on cpu 1: [ 117.439438][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 117.444133][ C0] can_rcv_filter+0xbf/0x4c0 [ 117.448731][ C0] can_receive+0x182/0x1f0 [ 117.453870][ C0] can_rcv+0xe7/0x180 [ 117.457950][ C0] __netif_receive_skb+0x123/0x280 [ 117.463080][ C0] process_backlog+0x22e/0x440 [ 117.467870][ C0] __napi_poll+0x63/0x3c0 [ 117.472317][ C0] net_rx_action+0x3a1/0x7f0 [ 117.476924][ C0] handle_softirqs+0xbf/0x280 [ 117.481670][ C0] do_softirq+0x5e/0x90 [ 117.487185][ C0] __local_bh_enable_ip+0x6e/0x70 [ 117.492403][ C0] wg_packet_tx_worker+0x2c8/0x360 [ 117.498862][ C0] process_scheduled_works+0x483/0x9a0 [ 117.504339][ C0] worker_thread+0x51d/0x6f0 [ 117.510565][ C0] kthread+0x4ae/0x520 [ 117.514905][ C0] ret_from_fork+0x4b/0x60 [ 117.519430][ C0] ret_from_fork_asm+0x1a/0x30 [ 117.524269][ C0] [ 117.528343][ C0] read-write to 0xffff88812a6c0358 of 4 bytes by interrupt on cpu 0: [ 117.537114][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 117.543455][ C0] can_rcv_filter+0xbf/0x4c0 [ 117.548794][ C0] can_receive+0x182/0x1f0 [ 117.553265][ C0] can_rcv+0xe7/0x180 [ 117.557447][ C0] __netif_receive_skb+0x123/0x280 [ 117.562821][ C0] process_backlog+0x22e/0x440 [ 117.567711][ C0] __napi_poll+0x63/0x3c0 [ 117.572329][ C0] net_rx_action+0x3a1/0x7f0 [ 117.577224][ C0] handle_softirqs+0xbf/0x280 [ 117.582042][ C0] do_softirq+0x5e/0x90 [ 117.586222][ C0] __local_bh_enable_ip+0x6e/0x70 [ 117.591441][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 117.596504][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 117.602151][ C0] process_scheduled_works+0x483/0x9a0 [ 117.608010][ C0] worker_thread+0x51d/0x6f0 [ 117.612774][ C0] kthread+0x4ae/0x520 [ 117.618702][ C0] ret_from_fork+0x4b/0x60 [ 117.623262][ C0] ret_from_fork_asm+0x1a/0x30 [ 117.628045][ C0] [ 117.630565][ C0] value changed: 0x000893e0 -> 0x000893e1 [ 117.636369][ C0] [ 117.640818][ C0] Reported by Kernel Concurrency Sanitizer on: [ 117.647328][ C0] CPU: 0 UID: 0 PID: 4114 Comm: kworker/u8:7 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 117.658375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 117.669393][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 117.676459][ C0] ================================================================== [ 118.144864][ C1] ================================================================== [ 118.152998][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 118.160307][ C1] [ 118.162737][ C1] read-write to 0xffff888101fdf248 of 8 bytes by interrupt on cpu 0: [ 118.171419][ C1] can_rcv_filter+0xd1/0x4c0 [ 118.176031][ C1] can_receive+0x182/0x1f0 [ 118.180460][ C1] can_rcv+0xe7/0x180 [ 118.184463][ C1] __netif_receive_skb+0x123/0x280 [ 118.189587][ C1] process_backlog+0x22e/0x440 [ 118.194365][ C1] __napi_poll+0x63/0x3c0 [ 118.198704][ C1] net_rx_action+0x3a1/0x7f0 [ 118.203314][ C1] handle_softirqs+0xbf/0x280 [ 118.208168][ C1] do_softirq+0x5e/0x90 [ 118.212325][ C1] __local_bh_enable_ip+0x6e/0x70 [ 118.217340][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 118.222276][ C1] lock_sock_nested+0x10f/0x140 [ 118.227147][ C1] sockopt_lock_sock+0x42/0x50 [ 118.231922][ C1] do_ipv6_setsockopt+0x9bf/0x2250 [ 118.237059][ C1] ipv6_setsockopt+0x57/0x130 [ 118.241741][ C1] tcp_setsockopt+0x93/0xb0 [ 118.246247][ C1] sock_common_setsockopt+0x64/0x80 [ 118.251555][ C1] __sys_setsockopt+0x187/0x200 [ 118.256652][ C1] __x64_sys_setsockopt+0x66/0x80 [ 118.261683][ C1] x64_sys_call+0x282e/0x2dc0 [ 118.266551][ C1] do_syscall_64+0xc9/0x1c0 [ 118.271154][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.277695][ C1] [ 118.280016][ C1] read-write to 0xffff888101fdf248 of 8 bytes by interrupt on cpu 1: [ 118.288071][ C1] can_rcv_filter+0xd1/0x4c0