last executing test programs: 10.320824899s ago: executing program 2 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000780)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.278362453s ago: executing program 2 (id=1062): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = creat(0x0, 0x22) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001680)={0x0, r3}, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000000440)=""/41, 0x29, 0x0, &(0x7f00000012c0)=""/40, 0x28}}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)="01bccda593c8b53e133b64c214fd9ff57d267b1cedf216fcff579e69c8c48218eaaa801fe1c7aa48fff56704717b4c04c956eab3c3e2dcc4219f905f04f9d2330cc13491742bac1e68f46037d1d96a508aae7bf06c19474e232903e7b1be47f8f789b6ecf551ee7e9e20a63cec1b0005e6b0a7fc3950797d4854d9cc1cba92", 0x7f}], 0x1, 0x0, 0x0, 0x8084}, 0x0) unshare(0x40000000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x1f000000, 0x0, {0x0, 0x0, 0x0, r1, {0x4}}}, 0x24}}, 0x0) r7 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) name_to_handle_at(r8, &(0x7f0000000080)='.\x00', &(0x7f0000000180)=@reiserfs_5={0x14, 0x5, {0x0, 0x0, 0x2}}, &(0x7f0000000140), 0x1200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000001380)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001400)='GPL\x00', 0x3, 0xbe, &(0x7f0000001440)=""/190, 0x40f00, 0x49, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000001500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x0, 0x10001}, 0x10, 0xe999, r2, 0x0, &(0x7f0000001580)=[r4, r8, r4, r4, r4], 0x0, 0x10, 0x1, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "ba51e7ad079edbdc"}}}]}, 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x110, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x9, "fbe862097484516a818e357131a8f5cb24e9e93476a9332e55dfe7261377"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'hsr0\x00', {0xff}, {}, 0x21, 0x5, 0x0, 0x21}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xba, 0x2, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010100, [0xff, 0xffffffff], 0x4e24, 0x4e24, 0x4e20, 0x4e23, 0xffffffff, 0x96, 0x1, 0x7, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 10.032426826s ago: executing program 2 (id=1067): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close(r0) r1 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='gpio_value\x00', 0xffffffffffffffff, 0x0, 0x10000000000}, 0x18) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.137186198s ago: executing program 2 (id=1077): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r10, 0x4, 0x1) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r12}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 8.544391383s ago: executing program 2 (id=1082): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) 7.717813839s ago: executing program 2 (id=1090): r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000002080000000800000000c00000", @ANYRES32=r0, @ANYBLOB="1900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}}) r12 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r14 = fcntl$dupfd(r13, 0x406, r12) sendmsg$nl_generic(r14, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}, @map_fd, @generic={0x0, 0xf, 0x7, 0x1, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @exit, @alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffffc}, @generic={0x9, 0x8, 0x3, 0x800, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xe0, &(0x7f00000004c0)=""/224, 0x41100, 0x20, '\x00', r8, 0x25, r0, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r2, r4, r1, r1, r11, r0, r14, r4, r1], &(0x7f00000005c0)=[{0x1, 0x1, 0x9, 0xb}, {0x4, 0x1, 0xc, 0xa}, {0x2, 0x2, 0x2, 0x1}], 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r16}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r17, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@bridge_getlink={0x28, 0x12, 0x4f38b0d43a3ffbab, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC=r3], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.611018249s ago: executing program 4 (id=1146): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00']) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone3(&(0x7f0000000700)={0x3020a0480, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffe3c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a01"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000080022ed6ff2c4dabd172d5de2b282c708e86fdf309ec2a9000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syslog(0x3, &(0x7f0000001780)=""/4096, 0x1000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) 2.60762483s ago: executing program 3 (id=1147): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close(r0) r1 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000004000000ff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000100000000000000000000000ecff000000000000000000e090a9d37c61b5fd66463046996b7656d95fc1516c1ef8850ea1636c430451bdd7f4293974d29c82923130685887f5753652d0c7fde0c7eb32c77ba35092a7c4cdbc497b75ba62ba2eb3295e03bccb0ff54102a18db2ca019c0b6d47397b084f9fe36d9807176dcfc4e84f2005e0e7be4ada27197fd8c9919c5607bb122c1cd24d3956ea8e90fbd8b72aba1a829060112f1c406a47fbadeadd677bcd51b635a0c8b1e2dfbec25925ccc01fa9b1f9295f70ce97ed080ae5cd59b4da3214f25ab629090a08bb665a658d5d9c91e8490ab1aec7ab2aa5fdcaa1f9d16ea55cbe78f5ddf13964b2b367d987889200"/274], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.592118541s ago: executing program 1 (id=1148): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close(r0) r1 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.326112865s ago: executing program 4 (id=1150): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r9, 0x4, 0x1) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.011059964s ago: executing program 4 (id=1152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44020}, 0x40000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf250300000008000100000000000c000300228b0000000000000c00030007000000000000001400078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_setup(0x4, &(0x7f0000002c40)=0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) io_submit(r4, 0x0, &(0x7f0000000280)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x28) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r7 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "2bfb365475a022828cd838d071861b3785d59b88391962c74fe9926b590e9571a4a6d4c564ef75640484e130280f84ca50ad62b0fe6d215c74561465407d7e7d", 0x38}, 0x48, r7) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r6, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000b40)) 1.682761195s ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000040e886aa958901000100000000003c3aab5ddb04ab5a4933b164f0f7963308bf917619e7e7dc67ba6db8165fcdac527ddbb1b80a23e743aefe340224491f1365cde615056444a5b54f0be912590b73446d9ec4b2f95bd7e67de19c6eaf8496eb73f774a776026d539684b6e7d5b576a0c30d32ee7e12789d506312c69e7f13646b58509e0000000000000000"], 0x48) io_setup(0xa, &(0x7f0000000000)=0x0) r2 = eventfd2(0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xb6, r2, 0x0, 0x0, 0x1, 0x0, 0x1, r2}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sched_process_fork\x00', r3, 0x0, 0x8000}, 0x18) inotify_init1(0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 1.681372755s ago: executing program 3 (id=1156): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x4c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) lseek(0xffffffffffffffff, 0x4, 0x1) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.589221013s ago: executing program 1 (id=1158): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x4c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) lseek(0xffffffffffffffff, 0x4, 0x1) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.574899075s ago: executing program 3 (id=1159): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x4c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r10, 0x4, 0x1) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r12}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.424224449s ago: executing program 3 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000780)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.388466122s ago: executing program 3 (id=1162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fc981bfc1be056580e25b367871fe4b295e352790ff4d39f79a108bf00a390ce23dcf1f334ad278534482e14ff31cbc3a95dc1528dd663aaf4bde4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 1.387213962s ago: executing program 1 (id=1163): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close(0xffffffffffffffff) r0 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x2, 0x5004) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="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"/274], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.381157023s ago: executing program 3 (id=1164): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x200) 1.095882339s ago: executing program 0 (id=1166): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x254101, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = memfd_secret(0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2284, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x20004, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x8}, 0xc) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="c26c14e8a9000000b71000040000060000000000002d4e3ad3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYRES64=r5], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.042534663s ago: executing program 4 (id=1167): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close(r0) r1 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/274], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 434.99003ms ago: executing program 1 (id=1168): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00']) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone3(&(0x7f0000000700)={0x3020a0480, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffe3c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a01"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000080022ed6ff2c4dabd172d5de2b282c708e86fdf309ec2a9000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) 433.81599ms ago: executing program 0 (id=1178): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$selinux_validatetrans(r0, 0x0, 0x4c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r9, 0x4, 0x1) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 361.002796ms ago: executing program 1 (id=1169): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000580)='./file1\x00') close(r0) r1 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 263.056045ms ago: executing program 0 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 240.450937ms ago: executing program 0 (id=1171): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00']) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone3(&(0x7f0000000700)={0x3020a0480, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffe3c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a01"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000080022ed6ff2c4dabd172d5de2b282c708e86fdf309ec2a9000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syslog(0x3, &(0x7f0000001780)=""/4096, 0x1000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) 131.701538ms ago: executing program 0 (id=1172): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x4c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000b40)="139dad8d3abc4d5a8140e400d337900cfe682496570a168a3ee30274d3dde3bd3145533ce42bb853015f81ef98728b202494b4e135e24454dfbb8fbf26592ae9a86eb6029f9625a5f2c240af0e9eac051aa86d1182d2f54a91bbc2541da786883ac1482fe2fafd12518689473023e37f103bc2ae7971200124e7c572a3814cf3d1c3607eb00192f5c4404015b9df72e55a9ea46a45ce4eda62cb27fb5e1a93384dc6c1985310bcc9343220818a0f46542a6b33e3b85f7881dbc2b08c4a0cd213c3c3f6eb3f8101", 0xc7, 0xfffffffffffffffb) keyctl$negate(0xd, 0x0, 0x9, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071"], 0xe0}}, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r10, 0x4, 0x1) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "004eefbf2d478aa0ae61ae0a7d9cae3284be9aceb82370d1925b2aeef35856c6", "64f7c893d33ade1318d9dbeca1fe60b432f6a03c24be091ba75532594058839b", "d2f34863ddd22d3447e616bce9e3f90000737bb04375cf73bf00", "6f759d52def2c22b4d23dbb9a99bbc2a1993fadb41f9568ff3886b6701bce76b", "493050f92c7969d1bce8aac35fd0536ed40ad2faeeb524458020feb700", "2d9f57283827076dcd154678", 0x6, 0xa, 0x51e4f2cc, 0x9, 0x1}}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r12}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000000000000000070000d5a6f4e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 21.958998ms ago: executing program 4 (id=1173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000780)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 651.3µs ago: executing program 4 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = creat(0x0, 0x22) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c0000000000000056000000000000000000000000000000000000000000000000000000000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e000000000000558d7a2006c2257800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4f500000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000040f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000080000001567cc0fb18ebd10677f000000000000000000000000b038562daba737bd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1000000000000000000000000000000000000000000c50000000000000000000000000011000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce113362da06ccfa83f39b50390000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d659920000000000e5c7ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff80000ff0f000000000000000000000000000000000000deffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002292091a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000f5000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000008000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000df0000ecffffff0000000000000000000000000000000010be099dac2faa3c6cb226eccfecd203000072656469726563740000697456a100"/2376]}, 0x9c0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001680)={0x0, r3}, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000000440)=""/41, 0x29, 0x0, &(0x7f00000012c0)=""/40, 0x28}}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) ioctl$TCXONC(r5, 0x540a, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)="01bccda593c8b53e133b64c214fd9ff57d267b1cedf216fcff579e69c8c48218eaaa801fe1c7aa48fff56704717b4c04c956eab3c3e2dcc4219f905f04f9d2330cc13491742bac1e68f46037d1d96a508aae7bf06c19474e232903e7b1be47f8f789b6ecf551ee7e9e20a63cec1b0005e6b0a7fc3950797d4854d9cc1cba92", 0x7f}], 0x1, 0x0, 0x0, 0x8084}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x10) unshare(0x40000000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x1f000000, 0x0, {0x0, 0x0, 0x0, r1, {0x4}}}, 0x24}}, 0x0) r6 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) name_to_handle_at(r7, &(0x7f0000000080)='.\x00', &(0x7f0000000180)=@reiserfs_5={0x14, 0x5, {0x0, 0x0, 0x2}}, &(0x7f0000000140), 0x1200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000001380)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001400)='GPL\x00', 0x3, 0xbe, &(0x7f0000001440)=""/190, 0x40f00, 0x49, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000001500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x0, 0x10001}, 0x10, 0xe999, r2, 0x0, &(0x7f0000001580)=[r4, r7, r4, r4, r4], 0x0, 0x10, 0x1, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "ba51e7ad079edbdc"}}}]}, 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x110, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x9, "fbe862097484516a818e357131a8f5cb24e9e93476a9332e55dfe7261377"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'hsr0\x00', {0xff}, {}, 0x21, 0x5, 0x0, 0x21}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xba, 0x2, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010100, [0xff, 0xffffffff], 0x4e24, 0x4e24, 0x4e20, 0x4e23, 0xffffffff, 0x96, 0x1, 0x7, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 0s ago: executing program 0 (id=1175): socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9d}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000680), 0x78}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff035}, {0x40, 0x0, 0x0, 0x3}, {0x6, 0xfc}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563018270001406"], 0xffdd) kernel console output (not intermixed with test programs): 0622-gaa486552a110 #0 [ 62.976469][ T4678] Tainted: [W]=WARN [ 62.980297][ T4678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.990526][ T4678] Call Trace: [ 62.993833][ T4678] [ 62.996783][ T4678] dump_stack_lvl+0xf2/0x150 [ 63.001416][ T4678] dump_stack+0x15/0x20 [ 63.005644][ T4678] should_fail_ex+0x223/0x230 [ 63.010440][ T4678] should_fail+0xb/0x10 [ 63.014712][ T4678] should_fail_usercopy+0x1a/0x20 [ 63.019939][ T4678] _copy_from_user+0x1e/0xd0 [ 63.024715][ T4678] memdup_user+0x64/0xc0 [ 63.028992][ T4678] strndup_user+0x68/0xa0 [ 63.033454][ T4678] __se_sys_mount+0x4e/0x2d0 [ 63.038090][ T4678] ? fput+0x14e/0x190 [ 63.042110][ T4678] ? ksys_write+0x17a/0x1b0 [ 63.046656][ T4678] __x64_sys_mount+0x67/0x80 [ 63.051293][ T4678] x64_sys_call+0x203e/0x2d60 [ 63.056036][ T4678] do_syscall_64+0xc9/0x1c0 [ 63.060681][ T4678] ? clear_bhb_loop+0x55/0xb0 [ 63.065399][ T4678] ? clear_bhb_loop+0x55/0xb0 [ 63.070185][ T4678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.076128][ T4678] RIP: 0033:0x7f75106ddf39 [ 63.080600][ T4678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.100325][ T4678] RSP: 002b:00007f750f357038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.108846][ T4678] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 63.116961][ T4678] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 63.124946][ T4678] RBP: 00007f750f357090 R08: 0000000020001340 R09: 0000000000000000 [ 63.133024][ T4678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.141000][ T4678] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 63.149094][ T4678] [ 63.229501][ T4680] loop1: detected capacity change from 0 to 512 [ 63.287673][ T4680] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.357012][ T4699] loop4: detected capacity change from 0 to 512 [ 63.383476][ T4703] loop3: detected capacity change from 0 to 512 [ 63.428904][ T4703] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.492521][ T4699] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.543165][ T4714] Invalid ELF header magic: != ELF [ 63.562033][ T4714] ieee802154 phy1 wpan1: encryption failed: -22 [ 63.681701][ T4739] loop4: detected capacity change from 0 to 2048 [ 63.715290][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 63.715308][ T29] audit: type=1326 audit(1727329735.917:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.745028][ T29] audit: type=1326 audit(1727329735.917:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.819953][ T4748] loop3: detected capacity change from 0 to 512 [ 63.827244][ T4748] ======================================================= [ 63.827244][ T4748] WARNING: The mand mount option has been deprecated and [ 63.827244][ T4748] and is ignored by this kernel. Remove the mand [ 63.827244][ T4748] option from the mount to silence this warning. [ 63.827244][ T4748] ======================================================= [ 63.835415][ T29] audit: type=1326 audit(1727329735.917:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.885580][ T29] audit: type=1326 audit(1727329735.917:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.909057][ T29] audit: type=1326 audit(1727329735.917:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.932426][ T29] audit: type=1326 audit(1727329735.917:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.955967][ T29] audit: type=1326 audit(1727329735.917:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 63.979468][ T29] audit: type=1326 audit(1727329735.917:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 64.002794][ T29] audit: type=1326 audit(1727329735.917:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 64.026190][ T29] audit: type=1326 audit(1727329735.917:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 64.067446][ T4748] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.082429][ T4748] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 64.116670][ T4745] Process accounting resumed [ 64.155531][ T4761] loop2: detected capacity change from 0 to 512 [ 64.182524][ T4763] loop3: detected capacity change from 0 to 512 [ 64.193400][ T4761] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.206840][ T4761] __nla_validate_parse: 44 callbacks suppressed [ 64.206931][ T4761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.231754][ T4763] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.249900][ T4761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.258905][ T4763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 64.281131][ T4763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 64.310957][ T4761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.340240][ T4763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.392'. [ 64.365522][ T4780] loop4: detected capacity change from 0 to 512 [ 64.387810][ T4780] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.402210][ T4780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 64.436273][ T4780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 64.470205][ T4789] FAULT_INJECTION: forcing a failure. [ 64.470205][ T4789] name failslab, interval 1, probability 0, space 0, times 0 [ 64.482966][ T4789] CPU: 0 UID: 0 PID: 4789 Comm: syz.3.397 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 64.494835][ T4789] Tainted: [W]=WARN [ 64.498779][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.508977][ T4789] Call Trace: [ 64.512272][ T4789] [ 64.515295][ T4789] dump_stack_lvl+0xf2/0x150 [ 64.519969][ T4789] dump_stack+0x15/0x20 [ 64.524331][ T4789] should_fail_ex+0x223/0x230 [ 64.529049][ T4789] ? io_queue_rsrc_removal+0x103/0x280 [ 64.534615][ T4789] should_failslab+0x8f/0xb0 [ 64.539254][ T4789] __kmalloc_cache_noprof+0x4b/0x2a0 [ 64.544690][ T4789] io_queue_rsrc_removal+0x103/0x280 [ 64.550058][ T4789] __io_register_rsrc_update+0x42f/0xb30 [ 64.555713][ T4789] ? should_fail_ex+0xd7/0x230 [ 64.560504][ T4789] io_register_rsrc_update+0x108/0x120 [ 64.566045][ T4789] __se_sys_io_uring_register+0xb87/0x1280 [ 64.571873][ T4789] __x64_sys_io_uring_register+0x55/0x70 [ 64.577527][ T4789] x64_sys_call+0x202/0x2d60 [ 64.582215][ T4789] do_syscall_64+0xc9/0x1c0 [ 64.586734][ T4789] ? clear_bhb_loop+0x55/0xb0 [ 64.591429][ T4789] ? clear_bhb_loop+0x55/0xb0 [ 64.596186][ T4789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.602186][ T4789] RIP: 0033:0x7f6410c1df39 [ 64.606656][ T4789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.626362][ T4789] RSP: 002b:00007f640f897038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 64.634798][ T4789] RAX: ffffffffffffffda RBX: 00007f6410dd5f80 RCX: 00007f6410c1df39 [ 64.642773][ T4789] RDX: 0000000020007cc0 RSI: 0000000000000010 RDI: 0000000000000003 [ 64.650749][ T4789] RBP: 00007f640f897090 R08: 0000000000000000 R09: 0000000000000000 [ 64.658746][ T4789] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 64.666743][ T4789] R13: 0000000000000000 R14: 00007f6410dd5f80 R15: 00007ffe2a05cff8 [ 64.674805][ T4789] [ 64.703079][ T4795] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 64.726677][ T4780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 64.970193][ T4811] loop0: detected capacity change from 0 to 512 [ 65.053588][ T4817] loop3: detected capacity change from 0 to 2048 [ 65.209330][ T4811] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.308562][ T4825] FAULT_INJECTION: forcing a failure. [ 65.308562][ T4825] name failslab, interval 1, probability 0, space 0, times 0 [ 65.321427][ T4825] CPU: 1 UID: 0 PID: 4825 Comm: syz.4.406 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 65.334006][ T4825] Tainted: [W]=WARN [ 65.337895][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 65.348088][ T4825] Call Trace: [ 65.351389][ T4825] [ 65.354333][ T4825] dump_stack_lvl+0xf2/0x150 [ 65.360532][ T4825] dump_stack+0x15/0x20 [ 65.364759][ T4825] should_fail_ex+0x223/0x230 [ 65.369756][ T4825] ? __alloc_skb+0x10b/0x310 [ 65.374375][ T4825] should_failslab+0x8f/0xb0 [ 65.378995][ T4825] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 65.384902][ T4825] __alloc_skb+0x10b/0x310 [ 65.389341][ T4825] netlink_alloc_large_skb+0xad/0xe0 [ 65.394834][ T4825] netlink_sendmsg+0x3b4/0x6e0 [ 65.399755][ T4825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.405151][ T4825] __sock_sendmsg+0x140/0x180 [ 65.409892][ T4825] ____sys_sendmsg+0x312/0x410 [ 65.414675][ T4825] __sys_sendmmsg+0x259/0x500 [ 65.419486][ T4825] __x64_sys_sendmmsg+0x57/0x70 [ 65.424440][ T4825] x64_sys_call+0xa49/0x2d60 [ 65.429123][ T4825] do_syscall_64+0xc9/0x1c0 [ 65.433733][ T4825] ? clear_bhb_loop+0x55/0xb0 [ 65.438429][ T4825] ? clear_bhb_loop+0x55/0xb0 [ 65.443148][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.449132][ T4825] RIP: 0033:0x7f759adddf39 [ 65.453554][ T4825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.473174][ T4825] RSP: 002b:00007f7599a51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.481646][ T4825] RAX: ffffffffffffffda RBX: 00007f759af95f80 RCX: 00007f759adddf39 [ 65.489627][ T4825] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 65.497603][ T4825] RBP: 00007f7599a51090 R08: 0000000000000000 R09: 0000000000000000 [ 65.505581][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.513583][ T4825] R13: 0000000000000000 R14: 00007f759af95f80 R15: 00007fffacf8f298 [ 65.521591][ T4825] [ 65.602882][ T4835] loop0: detected capacity change from 0 to 512 [ 65.621085][ T4836] loop3: detected capacity change from 0 to 512 [ 65.641971][ T4835] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.665082][ T4843] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 65.665082][ T4843] program syz.1.411 not setting count and/or reply_len properly [ 65.685754][ T4835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'. [ 65.700630][ T4836] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.810011][ T4832] loop2: detected capacity change from 0 to 164 [ 65.898415][ T4868] loop2: detected capacity change from 0 to 2048 [ 65.933006][ T4871] loop1: detected capacity change from 0 to 512 [ 65.993266][ T4871] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.223546][ T4895] loop1: detected capacity change from 0 to 512 [ 66.238774][ T4889] netlink: 'syz.3.422': attribute type 3 has an invalid length. [ 66.249523][ T4895] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.426829][ T4911] loop0: detected capacity change from 0 to 2048 [ 66.509615][ T4911] Alternate GPT is invalid, using primary GPT. [ 66.516038][ T4911] loop0: p2 p3 p7 [ 66.528080][ T4924] loop1: detected capacity change from 0 to 512 [ 66.564015][ T4927] loop2: detected capacity change from 0 to 2048 [ 66.595841][ T4924] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.824382][ T4953] loop2: detected capacity change from 0 to 512 [ 66.838786][ T4953] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.977239][ T3274] EXT4-fs unmount: 64 callbacks suppressed [ 66.977298][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.149302][ T4981] loop1: detected capacity change from 0 to 512 [ 67.179637][ T4981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.182622][ T4984] loop3: detected capacity change from 0 to 2048 [ 67.192520][ T4981] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.261844][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.272466][ T4984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.442637][ T3910] udevd[3910]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 67.637538][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.674922][ T5006] loop1: detected capacity change from 0 to 512 [ 67.718216][ T5006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.740069][ T5006] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.782813][ T5013] loop3: detected capacity change from 0 to 1024 [ 67.795121][ T5013] EXT4-fs: Ignoring removed orlov option [ 67.818165][ T5013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.856788][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.876884][ T5013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 67.885199][ T5013] System zones: 0-1, 3-12 [ 67.898371][ T5013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.002771][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.021042][ T5030] loop2: detected capacity change from 0 to 512 [ 68.149058][ T5041] loop4: detected capacity change from 0 to 512 [ 68.164096][ T5030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.176888][ T5030] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.198683][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.218696][ T5041] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.304196][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.384332][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.399815][ T5070] loop4: detected capacity change from 0 to 1024 [ 68.407647][ T5070] EXT4-fs: Ignoring removed orlov option [ 68.417830][ T5070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.733134][ T5070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 68.770255][ T5070] System zones: 0-1, 3-12 [ 68.813694][ T5070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.990023][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.143931][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 69.144023][ T29] audit: type=1326 audit(1727329997.339:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 69.180050][ T29] audit: type=1326 audit(1727329997.379:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 69.205613][ T29] audit: type=1326 audit(1727329997.409:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 69.229151][ T29] audit: type=1326 audit(1727329997.409:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 69.332391][ T5101] loop4: detected capacity change from 0 to 512 [ 69.342431][ T29] audit: type=1326 audit(1727329997.459:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 69.389003][ T5101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.405508][ T5101] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.421536][ T5101] __nla_validate_parse: 29 callbacks suppressed [ 69.421611][ T5101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 69.450918][ T5101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 69.460381][ T29] audit: type=1400 audit(1727329997.669:1848): avc: denied { read } for pid=3008 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.485532][ T29] audit: type=1400 audit(1727329997.669:1849): avc: denied { search } for pid=3008 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.506942][ T29] audit: type=1400 audit(1727329997.669:1850): avc: denied { read } for pid=3008 comm="dhcpcd" name="n25" dev="tmpfs" ino=3354 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.528675][ T29] audit: type=1400 audit(1727329997.669:1851): avc: denied { open } for pid=3008 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3354 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.551647][ T29] audit: type=1400 audit(1727329997.669:1852): avc: denied { getattr } for pid=3008 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3354 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.576042][ T5101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 69.601684][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.735450][ T5129] loop2: detected capacity change from 0 to 512 [ 69.871788][ T5129] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 70.302896][ T5162] loop0: detected capacity change from 0 to 1024 [ 70.329521][ T5162] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.397692][ T5162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.602030][ T5181] loop3: detected capacity change from 0 to 512 [ 70.665693][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.679127][ T5198] serio: Serial port ptm0 [ 70.684888][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.700814][ T5197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.511'. [ 70.723772][ T5181] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.737607][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 70.795041][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 70.831520][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 70.859826][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.010016][ T5226] loop1: detected capacity change from 0 to 512 [ 71.021523][ T5226] EXT4-fs: Ignoring removed orlov option [ 71.027924][ T5226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.037509][ T5226] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 71.091745][ T5229] loop1: detected capacity change from 0 to 1024 [ 71.182033][ T5229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.249221][ T5229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.438504][ T5235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 71.447501][ T5235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 71.468764][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.502758][ T5240] hub 9-0:1.0: USB hub found [ 71.532676][ T5242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.524'. [ 71.538233][ T5240] hub 9-0:1.0: 8 ports detected [ 71.618769][ T5252] loop2: detected capacity change from 0 to 512 [ 71.720295][ T5252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.737722][ T5252] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.044388][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.115453][ T5279] loop3: detected capacity change from 0 to 512 [ 72.151319][ T5279] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.175385][ T5279] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 72.186327][ T5279] EXT4-fs (loop3): group descriptors corrupted! [ 72.248415][ T5288] serio: Serial port ptm0 [ 72.372738][ T5298] loop1: detected capacity change from 0 to 2048 [ 72.390429][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.397218][ T5302] loop0: detected capacity change from 0 to 512 [ 72.427480][ T5302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.440110][ T5302] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.493878][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.586321][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.635870][ T5324] FAULT_INJECTION: forcing a failure. [ 72.635870][ T5324] name failslab, interval 1, probability 0, space 0, times 0 [ 72.648701][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.553 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 72.660462][ T5324] Tainted: [W]=WARN [ 72.665055][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.675338][ T5324] Call Trace: [ 72.678627][ T5324] [ 72.681560][ T5324] dump_stack_lvl+0xf2/0x150 [ 72.686177][ T5324] dump_stack+0x15/0x20 [ 72.690451][ T5324] should_fail_ex+0x223/0x230 [ 72.695145][ T5324] ? kvasprintf_const+0x5d/0x100 [ 72.700123][ T5324] should_failslab+0x8f/0xb0 [ 72.704776][ T5324] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 72.711132][ T5324] kvasprintf+0x8c/0x110 [ 72.715382][ T5324] ? string+0x1ee/0x210 [ 72.719656][ T5324] kvasprintf_const+0x5d/0x100 [ 72.724438][ T5324] kobject_set_name_vargs+0x44/0xe0 [ 72.729642][ T5324] dev_set_name+0x84/0xb0 [ 72.734048][ T5324] ? hrtimer_init+0x104/0x1f0 [ 72.738771][ T5324] ? swiotlb_dev_init+0x19/0x30 [ 72.743712][ T5324] ? swiotlb_dev_init+0x19/0x30 [ 72.748632][ T5324] ? device_initialize+0x1fe/0x210 [ 72.753772][ T5324] __serio_register_port+0xfb/0x1d0 [ 72.759058][ T5324] serport_ldisc_read+0x1e4/0x2e0 [ 72.764090][ T5324] tty_read+0x155/0x460 [ 72.768279][ T5324] ? __import_iovec+0x40a/0x520 [ 72.773199][ T5324] do_iter_readv_writev+0x394/0x450 [ 72.778432][ T5324] vfs_readv+0x1df/0x660 [ 72.782749][ T5324] do_readv+0xf8/0x220 [ 72.786826][ T5324] __x64_sys_readv+0x45/0x50 [ 72.791460][ T5324] x64_sys_call+0x2bd9/0x2d60 [ 72.796219][ T5324] do_syscall_64+0xc9/0x1c0 [ 72.800824][ T5324] ? clear_bhb_loop+0x55/0xb0 [ 72.805546][ T5324] ? clear_bhb_loop+0x55/0xb0 [ 72.810284][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.816196][ T5324] RIP: 0033:0x7fa35171df39 [ 72.820641][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.840457][ T5324] RSP: 002b:00007fa350397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 72.848877][ T5324] RAX: ffffffffffffffda RBX: 00007fa3518d5f80 RCX: 00007fa35171df39 [ 72.856856][ T5324] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 72.864842][ T5324] RBP: 00007fa350397090 R08: 0000000000000000 R09: 0000000000000000 [ 72.872854][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.880896][ T5324] R13: 0000000000000000 R14: 00007fa3518d5f80 R15: 00007ffd05fa0998 [ 72.888895][ T5324] [ 72.892105][ T5324] serio: Serial port ptm1 [ 72.897597][ T9] serio (null): device_add() failed for ptm1/serio0 (Serial port), error: -22 [ 72.949012][ T5331] loop1: detected capacity change from 0 to 512 [ 72.988588][ T5331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.001833][ T5331] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.063232][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.165724][ T5351] loop2: detected capacity change from 0 to 2048 [ 73.174675][ T5353] process 'syz.3.561' launched './file0' with NULL argv: empty string added [ 73.206429][ T5351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.557434][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.604855][ T5377] loop2: detected capacity change from 0 to 512 [ 73.637599][ T5377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.656943][ T5377] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.710770][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.841263][ T5402] loop2: detected capacity change from 0 to 2048 [ 73.878574][ T5402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.998760][ T5418] loop4: detected capacity change from 0 to 512 [ 74.028644][ T5418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.044422][ T5418] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.116216][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.133353][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.170646][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 74.170661][ T29] audit: type=1400 audit(1727330002.369:2298): avc: denied { ioctl } for pid=5431 comm="syz.2.587" path="socket:[10350]" dev="sockfs" ino=10350 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.204807][ T5433] FAULT_INJECTION: forcing a failure. [ 74.204807][ T5433] name failslab, interval 1, probability 0, space 0, times 0 [ 74.217562][ T5433] CPU: 0 UID: 0 PID: 5433 Comm: syz.2.587 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 74.229314][ T5433] Tainted: [W]=WARN [ 74.233135][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.243205][ T5433] Call Trace: [ 74.246499][ T5433] [ 74.249444][ T5433] dump_stack_lvl+0xf2/0x150 [ 74.254117][ T5433] dump_stack+0x15/0x20 [ 74.258434][ T5433] should_fail_ex+0x223/0x230 [ 74.263130][ T5433] ? __alloc_skb+0x10b/0x310 [ 74.267731][ T5433] should_failslab+0x8f/0xb0 [ 74.272361][ T5433] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 74.278299][ T5433] __alloc_skb+0x10b/0x310 [ 74.282853][ T5433] netlink_alloc_large_skb+0xad/0xe0 [ 74.288208][ T5433] netlink_sendmsg+0x3b4/0x6e0 [ 74.293044][ T5433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.298363][ T5433] __sock_sendmsg+0x140/0x180 [ 74.303081][ T5433] ____sys_sendmsg+0x312/0x410 [ 74.307936][ T5433] __sys_sendmsg+0x1d9/0x270 [ 74.312600][ T5433] __x64_sys_sendmsg+0x46/0x50 [ 74.317381][ T5433] x64_sys_call+0x2689/0x2d60 [ 74.322190][ T5433] do_syscall_64+0xc9/0x1c0 [ 74.326711][ T5433] ? clear_bhb_loop+0x55/0xb0 [ 74.331423][ T5433] ? clear_bhb_loop+0x55/0xb0 [ 74.336119][ T5433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.342025][ T5433] RIP: 0033:0x7f75106ddf39 [ 74.346485][ T5433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.366112][ T5433] RSP: 002b:00007f750f357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.374670][ T5433] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 74.382721][ T5433] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 74.390858][ T5433] RBP: 00007f750f357090 R08: 0000000000000000 R09: 0000000000000000 [ 74.398840][ T5433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.406871][ T5433] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 74.414866][ T5433] [ 74.419145][ T29] audit: type=1400 audit(1727330002.389:2299): avc: denied { sys_module } for pid=5431 comm="syz.2.587" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.440167][ T29] audit: type=1326 audit(1727330002.419:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.463679][ T29] audit: type=1326 audit(1727330002.419:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.487085][ T29] audit: type=1326 audit(1727330002.419:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.510478][ T29] audit: type=1326 audit(1727330002.419:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.533841][ T29] audit: type=1326 audit(1727330002.419:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.557403][ T29] audit: type=1326 audit(1727330002.419:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.580808][ T29] audit: type=1326 audit(1727330002.419:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.604074][ T29] audit: type=1326 audit(1727330002.419:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5430 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 74.782309][ T5457] loop3: detected capacity change from 0 to 512 [ 74.801048][ T5460] loop1: detected capacity change from 0 to 2048 [ 74.810378][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.823084][ T5457] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.836465][ T5460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.838497][ T5457] __nla_validate_parse: 15 callbacks suppressed [ 74.838563][ T5457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 74.880122][ T5457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 74.905373][ T5457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 74.924879][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.949506][ T5466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 74.958537][ T5466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 75.071679][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.155189][ T5495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 75.164271][ T5495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 75.356351][ T5515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.615'. [ 75.370639][ T5519] loop0: detected capacity change from 0 to 2048 [ 75.415464][ T5519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.460005][ T5527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 75.468953][ T5527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 75.598447][ T5541] loop2: detected capacity change from 0 to 1024 [ 75.606267][ T5541] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.642145][ T5541] EXT4-fs (loop2): mounted filesystem 00000003-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.656489][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.837581][ T5556] loop3: detected capacity change from 0 to 512 [ 75.864726][ T5556] ext2: Unknown parameter 'fsuuid' [ 75.964698][ T5556] loop3: detected capacity change from 0 to 128 [ 76.052772][ T5569] FAULT_INJECTION: forcing a failure. [ 76.052772][ T5569] name failslab, interval 1, probability 0, space 0, times 0 [ 76.065799][ T5569] CPU: 0 UID: 0 PID: 5569 Comm: syz.4.636 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 76.077587][ T5569] Tainted: [W]=WARN [ 76.081486][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.091780][ T5569] Call Trace: [ 76.095146][ T5569] [ 76.098111][ T5569] dump_stack_lvl+0xf2/0x150 [ 76.102766][ T5569] dump_stack+0x15/0x20 [ 76.107456][ T5569] should_fail_ex+0x223/0x230 [ 76.112276][ T5569] ? __alloc_skb+0x10b/0x310 [ 76.117036][ T5569] should_failslab+0x8f/0xb0 [ 76.121724][ T5569] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 76.127588][ T5569] __alloc_skb+0x10b/0x310 [ 76.132114][ T5569] netlink_alloc_large_skb+0xad/0xe0 [ 76.137555][ T5569] netlink_sendmsg+0x3b4/0x6e0 [ 76.142372][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.147715][ T5569] __sock_sendmsg+0x140/0x180 [ 76.152408][ T5569] ____sys_sendmsg+0x312/0x410 [ 76.157265][ T5569] __sys_sendmsg+0x1d9/0x270 [ 76.162051][ T5569] __x64_sys_sendmsg+0x46/0x50 [ 76.166836][ T5569] x64_sys_call+0x2689/0x2d60 [ 76.171535][ T5569] do_syscall_64+0xc9/0x1c0 [ 76.176093][ T5569] ? clear_bhb_loop+0x55/0xb0 [ 76.180901][ T5569] ? clear_bhb_loop+0x55/0xb0 [ 76.185608][ T5569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.191642][ T5569] RIP: 0033:0x7f759adddf39 [ 76.196353][ T5569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.216067][ T5569] RSP: 002b:00007f7599a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.224494][ T5569] RAX: ffffffffffffffda RBX: 00007f759af95f80 RCX: 00007f759adddf39 [ 76.232556][ T5569] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 76.240621][ T5569] RBP: 00007f7599a51090 R08: 0000000000000000 R09: 0000000000000000 [ 76.248656][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.256634][ T5569] R13: 0000000000000000 R14: 00007f759af95f80 R15: 00007fffacf8f298 [ 76.264637][ T5569] [ 76.381030][ T5575] loop0: detected capacity change from 0 to 512 [ 76.406406][ T5575] EXT4-fs: Ignoring removed orlov option [ 76.414483][ T5575] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.440573][ T5575] EXT4-fs (loop0): 1 orphan inode deleted [ 76.446406][ T5575] EXT4-fs (loop0): 1 truncate cleaned up [ 76.463025][ T5575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.515118][ T5583] loop3: detected capacity change from 0 to 2048 [ 76.642259][ T5583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.730409][ T5541] syz.2.623 (5541) used greatest stack depth: 7296 bytes left [ 76.783292][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.802004][ T3274] EXT4-fs (loop2): unmounting filesystem 00000003-0000-0000-0000-000000000000. [ 76.992793][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.256640][ T5564] coredump: 287(syz.3.630): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 77.480253][ T5640] FAULT_INJECTION: forcing a failure. [ 77.480253][ T5640] name failslab, interval 1, probability 0, space 0, times 0 [ 77.493257][ T5640] CPU: 0 UID: 0 PID: 5640 Comm: syz.2.657 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 77.505014][ T5640] Tainted: [W]=WARN [ 77.508832][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.518902][ T5640] Call Trace: [ 77.522195][ T5640] [ 77.525198][ T5640] dump_stack_lvl+0xf2/0x150 [ 77.529832][ T5640] dump_stack+0x15/0x20 [ 77.534020][ T5640] should_fail_ex+0x223/0x230 [ 77.538764][ T5640] ? dup_task_struct+0x6c/0x710 [ 77.543670][ T5640] should_failslab+0x8f/0xb0 [ 77.548363][ T5640] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 77.554213][ T5640] dup_task_struct+0x6c/0x710 [ 77.559102][ T5640] ? _parse_integer+0x27/0x30 [ 77.563875][ T5640] copy_process+0x3a9/0x1f90 [ 77.568548][ T5640] ? kstrtouint+0x77/0xc0 [ 77.572908][ T5640] ? kstrtouint_from_user+0xb0/0xe0 [ 77.578140][ T5640] ? 0xffffffff81000000 [ 77.582313][ T5640] kernel_clone+0x167/0x5e0 [ 77.587008][ T5640] ? vfs_write+0x580/0x910 [ 77.591537][ T5640] __x64_sys_clone+0xe8/0x120 [ 77.596362][ T5640] x64_sys_call+0x2d23/0x2d60 [ 77.601056][ T5640] do_syscall_64+0xc9/0x1c0 [ 77.605602][ T5640] ? clear_bhb_loop+0x55/0xb0 [ 77.610310][ T5640] ? clear_bhb_loop+0x55/0xb0 [ 77.615022][ T5640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.620944][ T5640] RIP: 0033:0x7f75106ddf39 [ 77.625374][ T5640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.645510][ T5640] RSP: 002b:00007f750f356fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 77.654006][ T5640] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 77.662047][ T5640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 77.670085][ T5640] RBP: 00007f750f357090 R08: 0000000000000000 R09: 0000000000000000 [ 77.678089][ T5640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 77.686112][ T5640] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 77.694199][ T5640] [ 77.730605][ T5642] loop1: detected capacity change from 0 to 2048 [ 77.748879][ T5644] FAULT_INJECTION: forcing a failure. [ 77.748879][ T5644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.762109][ T5644] CPU: 1 UID: 0 PID: 5644 Comm: syz.4.662 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 77.773919][ T5644] Tainted: [W]=WARN [ 77.777728][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.787788][ T5644] Call Trace: [ 77.791092][ T5644] [ 77.794027][ T5644] dump_stack_lvl+0xf2/0x150 [ 77.798700][ T5644] dump_stack+0x15/0x20 [ 77.802930][ T5644] should_fail_ex+0x223/0x230 [ 77.807686][ T5644] should_fail+0xb/0x10 [ 77.811879][ T5644] should_fail_usercopy+0x1a/0x20 [ 77.816994][ T5644] _copy_to_user+0x1e/0xa0 [ 77.821462][ T5644] simple_read_from_buffer+0xa0/0x110 [ 77.826849][ T5644] proc_fail_nth_read+0xf9/0x140 [ 77.831842][ T5644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.837415][ T5644] vfs_read+0x195/0x720 [ 77.841589][ T5644] ? __rcu_read_unlock+0x4e/0x70 [ 77.846585][ T5644] ? __fget_files+0x1d4/0x210 [ 77.851362][ T5644] ksys_read+0xeb/0x1b0 [ 77.855536][ T5644] __x64_sys_read+0x42/0x50 [ 77.860098][ T5644] x64_sys_call+0x27d3/0x2d60 [ 77.864871][ T5644] do_syscall_64+0xc9/0x1c0 [ 77.869423][ T5644] ? clear_bhb_loop+0x55/0xb0 [ 77.874116][ T5644] ? clear_bhb_loop+0x55/0xb0 [ 77.878885][ T5644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.884878][ T5644] RIP: 0033:0x7f759addc97c [ 77.889323][ T5644] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 77.908952][ T5644] RSP: 002b:00007f7599a51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.917537][ T5644] RAX: ffffffffffffffda RBX: 00007f759af95f80 RCX: 00007f759addc97c [ 77.925516][ T5644] RDX: 000000000000000f RSI: 00007f7599a510a0 RDI: 0000000000000009 [ 77.933495][ T5644] RBP: 00007f7599a51090 R08: 0000000000000000 R09: 0000000000000000 [ 77.941727][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.949739][ T5644] R13: 0000000000000000 R14: 00007f759af95f80 R15: 00007fffacf8f298 [ 77.957730][ T5644] [ 77.982215][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.204109][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.485813][ T5702] loop4: detected capacity change from 0 to 2048 [ 78.498354][ T5700] IPVS: Error joining to the multicast group [ 78.540109][ T5710] FAULT_INJECTION: forcing a failure. [ 78.540109][ T5710] name failslab, interval 1, probability 0, space 0, times 0 [ 78.552856][ T5710] CPU: 1 UID: 0 PID: 5710 Comm: +}[@ Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 78.564189][ T5710] Tainted: [W]=WARN [ 78.568070][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.578234][ T5710] Call Trace: [ 78.581678][ T5710] [ 78.584615][ T5710] dump_stack_lvl+0xf2/0x150 [ 78.589221][ T5710] dump_stack+0x15/0x20 [ 78.593423][ T5710] should_fail_ex+0x223/0x230 [ 78.598122][ T5710] ? audit_log_start+0x34c/0x6b0 [ 78.603184][ T5710] should_failslab+0x8f/0xb0 [ 78.607857][ T5710] kmem_cache_alloc_noprof+0x4c/0x290 [ 78.613343][ T5710] audit_log_start+0x34c/0x6b0 [ 78.618131][ T5710] audit_seccomp+0x4b/0x130 [ 78.622661][ T5710] __seccomp_filter+0x6fa/0x1180 [ 78.627726][ T5710] ? proc_fail_nth_write+0x12a/0x150 [ 78.633082][ T5710] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.638740][ T5710] ? vfs_write+0x580/0x910 [ 78.643192][ T5710] ? __fget_files+0x1d4/0x210 [ 78.647985][ T5710] __secure_computing+0x9f/0x1c0 [ 78.652961][ T5710] syscall_trace_enter+0xd1/0x1f0 [ 78.658017][ T5710] ? fpregs_assert_state_consistent+0x83/0xa0 [ 78.664113][ T5710] do_syscall_64+0xaa/0x1c0 [ 78.668727][ T5710] ? clear_bhb_loop+0x55/0xb0 [ 78.673489][ T5710] ? clear_bhb_loop+0x55/0xb0 [ 78.678181][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.684135][ T5710] RIP: 0033:0x7f75106ddf39 [ 78.688553][ T5710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.708299][ T5710] RSP: 002b:00007f750f357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 78.716719][ T5710] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 78.724724][ T5710] RDX: 0000000000000004 RSI: 0000000008000001 RDI: ffffffffffffffff [ 78.732719][ T5710] RBP: 00007f750f357090 R08: 0000000000000000 R09: 0000000000000000 [ 78.740756][ T5710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.748731][ T5710] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 78.757110][ T5710] [ 78.767071][ T5702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.804598][ T5714] ref_ctr_offset mismatch. inode: 0x299 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 78.978054][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.113792][ T5749] FAULT_INJECTION: forcing a failure. [ 79.113792][ T5749] name failslab, interval 1, probability 0, space 0, times 0 [ 79.127515][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz.4.703 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 79.139553][ T5749] Tainted: [W]=WARN [ 79.143397][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 79.153479][ T5749] Call Trace: [ 79.156806][ T5749] [ 79.159750][ T5749] dump_stack_lvl+0xf2/0x150 [ 79.164532][ T5749] dump_stack+0x15/0x20 [ 79.168774][ T5749] should_fail_ex+0x223/0x230 [ 79.173494][ T5749] ? __alloc_skb+0x10b/0x310 [ 79.178220][ T5749] should_failslab+0x8f/0xb0 [ 79.182839][ T5749] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 79.188724][ T5749] __alloc_skb+0x10b/0x310 [ 79.193178][ T5749] netlink_alloc_large_skb+0xad/0xe0 [ 79.198574][ T5749] netlink_sendmsg+0x3b4/0x6e0 [ 79.203812][ T5749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.209853][ T5749] __sock_sendmsg+0x140/0x180 [ 79.214868][ T5749] ____sys_sendmsg+0x312/0x410 [ 79.220005][ T5749] __sys_sendmsg+0x1d9/0x270 [ 79.224718][ T5749] __x64_sys_sendmsg+0x46/0x50 [ 79.229709][ T5749] x64_sys_call+0x2689/0x2d60 [ 79.234432][ T5749] do_syscall_64+0xc9/0x1c0 [ 79.239074][ T5749] ? clear_bhb_loop+0x55/0xb0 [ 79.243955][ T5749] ? clear_bhb_loop+0x55/0xb0 [ 79.248917][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.255053][ T5749] RIP: 0033:0x7f759adddf39 [ 79.259555][ T5749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.279826][ T5749] RSP: 002b:00007f7599a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.288752][ T5749] RAX: ffffffffffffffda RBX: 00007f759af95f80 RCX: 00007f759adddf39 [ 79.297268][ T5749] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 79.305856][ T5749] RBP: 00007f7599a51090 R08: 0000000000000000 R09: 0000000000000000 [ 79.314027][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.322069][ T5749] R13: 0000000000000000 R14: 00007f759af95f80 R15: 00007fffacf8f298 [ 79.330195][ T5749] [ 79.386409][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 79.386428][ T29] audit: type=1400 audit(1727330007.579:2739): avc: denied { create } for pid=5747 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.595252][ T5762] loop4: detected capacity change from 0 to 512 [ 79.654416][ T29] audit: type=1326 audit(1727330007.849:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.680246][ T29] audit: type=1326 audit(1727330007.869:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.703621][ T29] audit: type=1326 audit(1727330007.869:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.727036][ T29] audit: type=1326 audit(1727330007.869:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.750340][ T29] audit: type=1326 audit(1727330007.869:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.773741][ T29] audit: type=1326 audit(1727330007.869:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.801282][ T5762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.814044][ T5762] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.848326][ T5768] loop0: detected capacity change from 0 to 2048 [ 79.858430][ T5762] __nla_validate_parse: 7 callbacks suppressed [ 79.858447][ T5762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'. [ 79.875522][ T29] audit: type=1326 audit(1727330007.889:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.898950][ T29] audit: type=1326 audit(1727330007.889:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.922486][ T29] audit: type=1326 audit(1727330008.059:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a0b2df39 code=0x7ffc0000 [ 79.988640][ T5772] loop1: detected capacity change from 0 to 512 [ 80.010900][ T5762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'. [ 80.031980][ T5768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.046804][ T5772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.069636][ T5772] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.088578][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 80.108048][ T5762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'. [ 80.138857][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 80.151091][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.181991][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.709'. [ 80.232138][ T5791] loop4: detected capacity change from 0 to 512 [ 80.254560][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.283354][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.314957][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.328895][ T5791] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.342980][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 80.362435][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 80.461032][ T5808] loop3: detected capacity change from 0 to 1024 [ 80.477672][ T5808] EXT4-fs: Ignoring removed orlov option [ 80.483571][ T5808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.491744][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 80.515897][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.525604][ T5808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 80.534752][ T5808] System zones: 0-1, 3-12 [ 80.539781][ T5808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.542771][ T5816] loop0: detected capacity change from 0 to 512 [ 80.598478][ T5816] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.624857][ T5816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'. [ 80.782889][ T5831] loop3: detected capacity change from 0 to 2048 [ 80.813427][ T5841] loop4: detected capacity change from 0 to 2048 [ 80.852746][ T5845] loop2: detected capacity change from 0 to 512 [ 80.863657][ T5831] Alternate GPT is invalid, using primary GPT. [ 80.870059][ T5831] loop3: p2 p3 p7 [ 80.890918][ T5849] loop0: detected capacity change from 0 to 512 [ 80.923807][ T5845] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.947822][ T5849] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.261523][ T5867] loop0: detected capacity change from 0 to 1024 [ 81.270062][ T5867] EXT4-fs: Ignoring removed orlov option [ 81.284376][ T5867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.348854][ T5867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 81.361308][ T5867] System zones: 0-1, 3-12 [ 81.448573][ T5879] loop1: detected capacity change from 0 to 512 [ 81.469070][ T5879] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.474797][ T5876] ebt_among: src integrity fail: 100 [ 81.631705][ T5900] loop2: detected capacity change from 0 to 512 [ 81.639956][ T5902] loop3: detected capacity change from 0 to 512 [ 81.677721][ T5902] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.685428][ T5904] loop1: detected capacity change from 0 to 2048 [ 81.692553][ T5900] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.702886][ T5910] loop0: detected capacity change from 0 to 1024 [ 81.712239][ T5910] EXT4-fs: Ignoring removed orlov option [ 81.718090][ T5910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.732708][ T5910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 81.753581][ T5910] System zones: 0-1, 3-12 [ 82.053562][ T5941] loop0: detected capacity change from 0 to 512 [ 82.080934][ T5941] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.217619][ T5946] loop3: detected capacity change from 0 to 2048 [ 82.294952][ T5946] Alternate GPT is invalid, using primary GPT. [ 82.301453][ T5946] loop3: p2 p3 p7 [ 82.329901][ T5952] netlink: 'syz.0.752': attribute type 3 has an invalid length. [ 82.346708][ T2970] Alternate GPT is invalid, using primary GPT. [ 82.353111][ T2970] loop3: p2 p3 p7 [ 82.402295][ T5960] loop4: detected capacity change from 0 to 512 [ 82.438707][ T5962] loop1: detected capacity change from 0 to 1024 [ 82.455085][ T5960] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.497200][ T5962] EXT4-fs: Ignoring removed orlov option [ 82.499559][ T5967] loop0: detected capacity change from 0 to 512 [ 82.503028][ T5962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.553338][ T5967] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.587560][ T5962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 82.596628][ T5962] System zones: 0-1, 3-12 [ 82.730767][ T5987] loop1: detected capacity change from 0 to 512 [ 82.798540][ T5987] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.921701][ T6003] ebt_among: src integrity fail: 100 [ 83.016428][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 83.016884][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 83.069393][ T6014] netlink: 'syz.2.768': attribute type 3 has an invalid length. [ 83.163629][ T6020] loop1: detected capacity change from 0 to 1024 [ 83.170360][ T6020] EXT4-fs: Ignoring removed orlov option [ 83.177640][ T6020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.187037][ T6020] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 83.195586][ T6020] System zones: 0-1, 3-12 [ 83.231501][ T6024] loop1: detected capacity change from 0 to 512 [ 83.247791][ T6024] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.286780][ T6029] loop2: detected capacity change from 0 to 512 [ 83.309725][ T6029] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.453459][ T6045] loop2: detected capacity change from 0 to 512 [ 83.468471][ T6045] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.744105][ T6063] ebt_among: src integrity fail: 100 [ 83.776484][ T6060] loop2: detected capacity change from 0 to 2048 [ 83.823353][ T6060] Alternate GPT is invalid, using primary GPT. [ 83.829725][ T6060] loop2: p2 p3 p7 [ 83.911705][ T6070] loop3: detected capacity change from 0 to 1024 [ 83.928523][ T6070] EXT4-fs: Ignoring removed orlov option [ 83.943543][ T6070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.968982][ T6070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 83.995120][ T6070] System zones: 0-1, 3-12 [ 84.075780][ T6077] loop3: detected capacity change from 0 to 512 [ 84.097004][ T6077] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.223547][ T6087] loop3: detected capacity change from 0 to 512 [ 84.224009][ T6082] netlink: 'syz.4.784': attribute type 3 has an invalid length. [ 84.274687][ T6087] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.307318][ T6096] loop1: detected capacity change from 0 to 512 [ 84.318486][ T6096] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.364709][ T6107] loop3: detected capacity change from 0 to 512 [ 84.401703][ T6113] loop4: detected capacity change from 0 to 512 [ 84.452928][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 84.452997][ T29] audit: type=1400 audit(1727330012.649:2900): avc: denied { create } for pid=6093 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.483330][ T29] audit: type=1400 audit(1727330012.689:2901): avc: denied { setopt } for pid=6093 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.550100][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.565310][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 84.575467][ T3910] udevd[3910]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 84.605259][ T6122] loop4: detected capacity change from 0 to 1024 [ 84.614004][ T6122] EXT4-fs: Ignoring removed orlov option [ 84.621772][ T6122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.638371][ T6122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 84.648764][ T6122] System zones: 0-1, 3-12 [ 84.687985][ T6130] ebt_among: src integrity fail: 100 [ 84.773522][ T6135] loop4: detected capacity change from 0 to 512 [ 84.787712][ T6135] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.938905][ T6145] netlink: 'syz.1.798': attribute type 3 has an invalid length. [ 84.975006][ T6150] loop1: detected capacity change from 0 to 512 [ 84.987476][ T6150] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.002444][ T6150] __nla_validate_parse: 54 callbacks suppressed [ 85.002459][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 85.041466][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 85.186471][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 85.353993][ T6161] loop3: detected capacity change from 0 to 512 [ 85.371812][ T6161] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.389740][ T29] audit: type=1400 audit(1727330013.589:2902): avc: denied { setopt } for pid=6162 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.396324][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 85.455236][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 85.467093][ T29] audit: type=1400 audit(1727330013.669:2903): avc: denied { write } for pid=2952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.471165][ T6174] loop2: detected capacity change from 0 to 1024 [ 85.488891][ T29] audit: type=1400 audit(1727330013.669:2904): avc: denied { remove_name } for pid=2952 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.517908][ T29] audit: type=1400 audit(1727330013.669:2905): avc: denied { rename } for pid=2952 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.518256][ T6174] EXT4-fs: Ignoring removed orlov option [ 85.540278][ T29] audit: type=1400 audit(1727330013.669:2906): avc: denied { add_name } for pid=2952 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.568554][ T29] audit: type=1400 audit(1727330013.669:2907): avc: denied { unlink } for pid=2952 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.569361][ T6174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.591023][ T29] audit: type=1400 audit(1727330013.669:2908): avc: denied { create } for pid=2952 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.637327][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 85.646933][ T6174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 85.655223][ T6174] System zones: 0-1, 3-12 [ 85.702131][ T6176] loop1: detected capacity change from 0 to 2048 [ 85.717933][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 85.744827][ T6176] Alternate GPT is invalid, using primary GPT. [ 85.751475][ T6176] loop1: p2 p3 p7 [ 85.777796][ T2970] Alternate GPT is invalid, using primary GPT. [ 85.784207][ T2970] loop1: p2 p3 p7 [ 85.855060][ T6189] loop0: detected capacity change from 0 to 512 [ 85.904763][ T6193] ebt_among: src integrity fail: 100 [ 85.912476][ T6189] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.930746][ T6201] loop2: detected capacity change from 0 to 512 [ 85.934921][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.808'. [ 85.960194][ T6201] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.964288][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.808'. [ 85.973326][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'. [ 85.984591][ T6200] netlink: 'syz.3.811': attribute type 3 has an invalid length. [ 86.141595][ T29] audit: type=1400 audit(1727330014.329:2909): avc: denied { ioctl } for pid=6220 comm="syz.0.814" path="socket:[11627]" dev="sockfs" ino=11627 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.207056][ T6226] loop0: detected capacity change from 0 to 512 [ 86.211941][ T6228] loop2: detected capacity change from 0 to 1024 [ 86.223354][ T6228] EXT4-fs: Ignoring removed orlov option [ 86.230396][ T6228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.238430][ T6226] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.271188][ T6228] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 86.280458][ T6228] System zones: 0-1, 3-12 [ 86.317875][ T6240] FAULT_INJECTION: forcing a failure. [ 86.317875][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.331351][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.2.820 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 86.343105][ T6240] Tainted: [W]=WARN [ 86.346943][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.357075][ T6240] Call Trace: [ 86.360472][ T6240] [ 86.363425][ T6240] dump_stack_lvl+0xf2/0x150 [ 86.368098][ T6240] dump_stack+0x15/0x20 [ 86.372285][ T6240] should_fail_ex+0x223/0x230 [ 86.377090][ T6240] should_fail+0xb/0x10 [ 86.381268][ T6240] should_fail_usercopy+0x1a/0x20 [ 86.386352][ T6240] _copy_from_user+0x1e/0xd0 [ 86.390966][ T6240] memdup_user_nul+0x65/0xd0 [ 86.395674][ T6240] sel_commit_bools_write+0xcd/0x260 [ 86.400974][ T6240] vfs_writev+0x3fb/0x880 [ 86.405452][ T6240] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 86.411353][ T6240] ? mutex_lock+0xd/0x40 [ 86.415648][ T6240] do_writev+0xf8/0x220 [ 86.419807][ T6240] __x64_sys_writev+0x45/0x50 [ 86.424520][ T6240] x64_sys_call+0x1f18/0x2d60 [ 86.429257][ T6240] do_syscall_64+0xc9/0x1c0 [ 86.433835][ T6240] ? clear_bhb_loop+0x55/0xb0 [ 86.438590][ T6240] ? clear_bhb_loop+0x55/0xb0 [ 86.443269][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.449163][ T6240] RIP: 0033:0x7f75106ddf39 [ 86.453579][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.473197][ T6240] RSP: 002b:00007f750f357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 86.481639][ T6240] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 86.489627][ T6240] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000003 [ 86.497587][ T6240] RBP: 00007f750f357090 R08: 0000000000000000 R09: 0000000000000000 [ 86.505601][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.513567][ T6240] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 86.521541][ T6240] [ 87.072823][ T6255] loop3: detected capacity change from 0 to 512 [ 87.098639][ T6258] netlink: 'syz.2.824': attribute type 3 has an invalid length. [ 87.121189][ T6262] ebt_among: src integrity fail: 100 [ 87.147356][ T6255] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.205661][ T6268] loop2: detected capacity change from 0 to 512 [ 87.221832][ T6268] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.354960][ T6282] loop2: detected capacity change from 0 to 512 [ 87.384120][ T6284] loop3: detected capacity change from 0 to 1024 [ 87.400827][ T6282] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.426710][ T6284] EXT4-fs: Ignoring removed orlov option [ 87.432587][ T6284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.498009][ T6284] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 87.506463][ T6284] System zones: 0-1, 3-12 [ 87.635128][ T6298] loop1: detected capacity change from 0 to 2048 [ 87.686820][ T6298] Alternate GPT is invalid, using primary GPT. [ 87.693178][ T6298] loop1: p2 p3 p7 [ 87.714185][ T6305] FAULT_INJECTION: forcing a failure. [ 87.714185][ T6305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.727503][ T6305] CPU: 1 UID: 0 PID: 6305 Comm: syz.2.835 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 87.739313][ T6305] Tainted: [W]=WARN [ 87.743124][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.753192][ T6305] Call Trace: [ 87.756488][ T6305] [ 87.759522][ T6305] dump_stack_lvl+0xf2/0x150 [ 87.764262][ T6305] dump_stack+0x15/0x20 [ 87.768553][ T6305] should_fail_ex+0x223/0x230 [ 87.773339][ T6305] should_fail+0xb/0x10 [ 87.777576][ T6305] should_fail_usercopy+0x1a/0x20 [ 87.782620][ T6305] _copy_from_user+0x1e/0xd0 [ 87.787233][ T6305] move_addr_to_kernel+0x82/0x120 [ 87.792430][ T6305] copy_msghdr_from_user+0x271/0x2a0 [ 87.797745][ T6305] __sys_sendmsg+0x171/0x270 [ 87.802553][ T6305] __x64_sys_sendmsg+0x46/0x50 [ 87.807435][ T6305] x64_sys_call+0x2689/0x2d60 [ 87.812224][ T6305] do_syscall_64+0xc9/0x1c0 [ 87.816796][ T6305] ? clear_bhb_loop+0x55/0xb0 [ 87.821503][ T6305] ? clear_bhb_loop+0x55/0xb0 [ 87.826543][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.832463][ T6305] RIP: 0033:0x7f75106ddf39 [ 87.837043][ T6305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.856744][ T6305] RSP: 002b:00007f750f357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.865227][ T6305] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 87.873208][ T6305] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 87.881184][ T6305] RBP: 00007f750f357090 R08: 0000000000000000 R09: 0000000000000000 [ 87.889163][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.897181][ T6305] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 87.905188][ T6305] [ 88.008272][ T2970] Alternate GPT is invalid, using primary GPT. [ 88.014682][ T2970] loop1: p2 p3 p7 [ 88.231701][ T6318] loop4: detected capacity change from 0 to 512 [ 88.268433][ T6318] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.330292][ T6325] loop4: detected capacity change from 0 to 512 [ 88.358582][ T6325] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.425263][ T6329] netlink: 'syz.1.841': attribute type 3 has an invalid length. [ 88.467734][ T6337] loop1: detected capacity change from 0 to 1024 [ 88.475384][ T6337] EXT4-fs: Ignoring removed orlov option [ 88.488437][ T6337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.506946][ T6337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 88.515141][ T6337] System zones: 0-1, 3-12 [ 88.682133][ T6348] ebt_among: src integrity fail: 100 [ 88.706714][ T6349] loop3: detected capacity change from 0 to 512 [ 88.758652][ T6349] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.068183][ T6364] FAULT_INJECTION: forcing a failure. [ 89.068183][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 89.081186][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.2.849 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 89.093007][ T6364] Tainted: [W]=WARN [ 89.096836][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 89.107022][ T6364] Call Trace: [ 89.110296][ T6364] [ 89.113222][ T6364] dump_stack_lvl+0xf2/0x150 [ 89.117825][ T6364] dump_stack+0x15/0x20 [ 89.122008][ T6364] should_fail_ex+0x223/0x230 [ 89.126694][ T6364] ? __alloc_skb+0x10b/0x310 [ 89.131284][ T6364] should_failslab+0x8f/0xb0 [ 89.135899][ T6364] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 89.141793][ T6364] __alloc_skb+0x10b/0x310 [ 89.146291][ T6364] netlink_alloc_large_skb+0xad/0xe0 [ 89.151649][ T6364] netlink_sendmsg+0x3b4/0x6e0 [ 89.156437][ T6364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.161767][ T6364] __sock_sendmsg+0x140/0x180 [ 89.166484][ T6364] ____sys_sendmsg+0x312/0x410 [ 89.171345][ T6364] __sys_sendmsg+0x1d9/0x270 [ 89.176012][ T6364] __x64_sys_sendmsg+0x46/0x50 [ 89.180935][ T6364] x64_sys_call+0x2689/0x2d60 [ 89.185618][ T6364] do_syscall_64+0xc9/0x1c0 [ 89.190251][ T6364] ? clear_bhb_loop+0x55/0xb0 [ 89.194938][ T6364] ? clear_bhb_loop+0x55/0xb0 [ 89.199624][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.205582][ T6364] RIP: 0033:0x7f75106ddf39 [ 89.209989][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.229597][ T6364] RSP: 002b:00007f750f357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.238016][ T6364] RAX: ffffffffffffffda RBX: 00007f7510895f80 RCX: 00007f75106ddf39 [ 89.245990][ T6364] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 89.253961][ T6364] RBP: 00007f750f357090 R08: 0000000000000000 R09: 0000000000000000 [ 89.261951][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.270018][ T6364] R13: 0000000000000000 R14: 00007f7510895f80 R15: 00007fffb2cd8718 [ 89.278084][ T6364] [ 89.394644][ T6374] loop0: detected capacity change from 0 to 512 [ 89.469759][ T6378] loop1: detected capacity change from 0 to 512 [ 89.504327][ T6374] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.566716][ T6372] loop4: detected capacity change from 0 to 2048 [ 89.568193][ T6378] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.586746][ T6392] netlink: 'syz.2.854': attribute type 3 has an invalid length. [ 89.608809][ T6372] Alternate GPT is invalid, using primary GPT. [ 89.615228][ T6372] loop4: p2 p3 p7 [ 89.641808][ T6394] loop0: detected capacity change from 0 to 1024 [ 89.654426][ T6394] EXT4-fs: Ignoring removed orlov option [ 89.661426][ T6394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.691092][ T6394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 89.705804][ T6394] System zones: 0-1, 3-12 [ 89.801094][ T6407] ebt_among: src integrity fail: 100 [ 89.957177][ T6415] loop1: detected capacity change from 0 to 512 [ 89.969177][ T6415] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.013970][ T6415] __nla_validate_parse: 41 callbacks suppressed [ 90.013985][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.859'. [ 90.110423][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 90.110459][ T29] audit: type=1400 audit(1727330018.309:2967): avc: denied { create } for pid=6423 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 90.111433][ T6424] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 90.143805][ T6424] audit: out of memory in audit_log_start [ 90.322163][ T29] audit: type=1326 audit(1727330018.519:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.351929][ T29] audit: type=1326 audit(1727330018.539:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.375332][ T29] audit: type=1326 audit(1727330018.549:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.398712][ T29] audit: type=1326 audit(1727330018.549:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.422128][ T29] audit: type=1326 audit(1727330018.549:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.445587][ T29] audit: type=1326 audit(1727330018.549:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.468956][ T29] audit: type=1326 audit(1727330018.549:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 90.579169][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.865'. [ 90.710276][ T6439] loop0: detected capacity change from 0 to 512 [ 90.728012][ T6441] loop3: detected capacity change from 0 to 1024 [ 90.734777][ T6441] EXT4-fs: Ignoring removed orlov option [ 90.743237][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 90.752215][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 90.761727][ T6441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.775340][ T6439] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.788932][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 90.816125][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 90.825892][ T6441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 90.894763][ T6441] System zones: 0-1, 3-12 [ 90.924941][ T6457] loop2: detected capacity change from 0 to 512 [ 90.935001][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.866'. [ 90.965776][ T6457] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.033610][ T6464] loop0: detected capacity change from 0 to 512 [ 91.040716][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.869'. [ 91.044971][ T6462] ebt_among: src integrity fail: 100 [ 91.068453][ T6464] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.071863][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.869'. [ 91.088637][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 91.284598][ T6488] loop3: detected capacity change from 0 to 1024 [ 91.296284][ T6488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.433488][ T6490] loop1: detected capacity change from 0 to 2048 [ 91.491405][ T6490] Alternate GPT is invalid, using primary GPT. [ 91.497841][ T6490] loop1: p2 p3 p7 [ 92.460855][ T6507] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 92.502427][ T6513] loop3: detected capacity change from 0 to 1024 [ 92.525063][ T6513] EXT4-fs: Ignoring removed orlov option [ 92.599662][ T6513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.609548][ T6515] loop1: detected capacity change from 0 to 512 [ 92.650958][ T6513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 92.661479][ T6515] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.672588][ T6513] System zones: 0-1, 3-12 [ 92.781872][ T6526] loop1: detected capacity change from 0 to 512 [ 92.797946][ T6526] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.885757][ T6534] loop1: detected capacity change from 0 to 512 [ 92.908718][ T6534] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.069481][ T6545] loop2: detected capacity change from 0 to 1024 [ 93.102857][ T6545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.300802][ T6550] loop1: detected capacity change from 0 to 2048 [ 93.399252][ T6550] Alternate GPT is invalid, using primary GPT. [ 93.405600][ T6550] loop1: p2 p3 p7 [ 93.612030][ T6563] loop3: detected capacity change from 0 to 1024 [ 93.618754][ T6563] EXT4-fs: Ignoring removed orlov option [ 93.624621][ T6563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.637116][ T6563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 93.645411][ T6563] System zones: 0-1, 3-12 [ 93.675580][ T6568] loop3: detected capacity change from 0 to 512 [ 93.688053][ T6568] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.764983][ T6577] loop3: detected capacity change from 0 to 512 [ 93.788308][ T6577] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.848754][ T6584] loop3: detected capacity change from 0 to 512 [ 93.859060][ T6584] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.202417][ T6598] loop2: detected capacity change from 0 to 1024 [ 94.393652][ T6598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.531005][ T6606] loop0: detected capacity change from 0 to 1024 [ 94.537809][ T6606] EXT4-fs: Ignoring removed orlov option [ 94.543605][ T6606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.651289][ T6606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 94.661718][ T6615] loop4: detected capacity change from 0 to 512 [ 94.664239][ T6606] System zones: 0-1, 3-12 [ 94.681172][ T6615] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.716762][ T6621] loop0: detected capacity change from 0 to 512 [ 94.799717][ T6621] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.837957][ T6629] loop4: detected capacity change from 0 to 512 [ 94.972641][ T6629] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.071782][ T6629] __nla_validate_parse: 32 callbacks suppressed [ 95.071796][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.909'. [ 95.165371][ T6650] netlink: 'syz.4.912': attribute type 3 has an invalid length. [ 95.243821][ T6651] loop0: detected capacity change from 0 to 2048 [ 95.244630][ T6655] loop4: detected capacity change from 0 to 1024 [ 95.272551][ T6655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.287541][ T6651] Alternate GPT is invalid, using primary GPT. [ 95.294326][ T6651] loop0: p2 p3 p7 [ 95.377543][ T2970] Alternate GPT is invalid, using primary GPT. [ 95.384016][ T2970] loop0: p2 p3 p7 [ 95.590334][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 95.590352][ T29] audit: type=1326 audit(1727330023.789:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.621343][ T29] audit: type=1326 audit(1727330023.789:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.644815][ T29] audit: type=1326 audit(1727330023.789:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.668583][ T29] audit: type=1326 audit(1727330023.789:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.692412][ T29] audit: type=1326 audit(1727330023.789:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.715650][ T29] audit: type=1326 audit(1727330023.789:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.739018][ T29] audit: type=1326 audit(1727330023.789:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.762334][ T29] audit: type=1326 audit(1727330023.789:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.785815][ T29] audit: type=1326 audit(1727330023.789:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.809315][ T29] audit: type=1326 audit(1727330023.849:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75106ddf39 code=0x7ffc0000 [ 95.861791][ T6666] loop2: detected capacity change from 0 to 1024 [ 95.868999][ T6666] EXT4-fs: Ignoring removed orlov option [ 95.886397][ T6666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.900998][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 95.910698][ T6666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 95.920379][ T6666] System zones: 0-1, 3-12 [ 96.081321][ T6677] loop0: detected capacity change from 0 to 512 [ 96.091323][ T6680] loop3: detected capacity change from 0 to 512 [ 96.112123][ T6677] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.112289][ T6680] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.125596][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 96.138520][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 96.165850][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 96.189853][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 96.310700][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 96.355487][ T6695] loop4: detected capacity change from 0 to 512 [ 96.388091][ T6695] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.423722][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 96.470624][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.923'. [ 96.494983][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.923'. [ 96.617041][ T6707] loop3: detected capacity change from 0 to 1024 [ 96.625079][ T6707] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.663850][ T6705] netlink: 'syz.0.925': attribute type 3 has an invalid length. [ 97.075598][ T3268] EXT4-fs unmount: 138 callbacks suppressed [ 97.075613][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.101075][ T6723] loop2: detected capacity change from 0 to 1024 [ 97.170736][ T6723] EXT4-fs: Ignoring removed orlov option [ 97.192606][ T6723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.232881][ T6723] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 97.251715][ T6723] System zones: 0-1, 3-12 [ 97.259641][ T6723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.287623][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.390779][ T6742] ebt_among: src integrity fail: 100 [ 97.407984][ T6733] loop3: detected capacity change from 0 to 2048 [ 97.425676][ T6744] loop1: detected capacity change from 0 to 512 [ 97.448305][ T6744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.450977][ T6733] Alternate GPT is invalid, using primary GPT. [ 97.461087][ T6744] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.467112][ T6733] loop3: p2 p3 p7 [ 97.539640][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.581585][ T6752] loop2: detected capacity change from 0 to 512 [ 97.615458][ T6758] loop1: detected capacity change from 0 to 512 [ 97.621251][ T6752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.668304][ T6752] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.692559][ T6758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.705256][ T6758] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.783581][ T6762] netlink: 'syz.4.939': attribute type 3 has an invalid length. [ 97.814433][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.833955][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.876841][ T6778] loop1: detected capacity change from 0 to 1024 [ 97.884075][ T6778] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.948854][ T6778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.035320][ T6786] loop2: detected capacity change from 0 to 1024 [ 98.231107][ T6786] EXT4-fs: Ignoring removed orlov option [ 98.240181][ T6786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.269191][ T6786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 98.280461][ T6786] System zones: 0-1, 3-12 [ 98.285283][ T6786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.317491][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.338484][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.384623][ T6799] loop2: detected capacity change from 0 to 512 [ 98.425068][ T6797] ebt_among: src integrity fail: 100 [ 98.479705][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.492398][ T6799] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.541655][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.667087][ T6817] loop0: detected capacity change from 0 to 512 [ 98.733013][ T6817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.863009][ T6817] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.010532][ T6828] loop1: detected capacity change from 0 to 512 [ 99.058511][ T6828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.072478][ T6828] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.096802][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.159448][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.184687][ T6844] loop1: detected capacity change from 0 to 1024 [ 99.191447][ T6844] EXT4-fs: Ignoring removed orlov option [ 99.197412][ T6844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.207401][ T6844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 99.215679][ T6844] System zones: 0-1, 3-12 [ 99.220673][ T6844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.242515][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.278800][ T6849] loop1: detected capacity change from 0 to 1024 [ 99.291421][ T6849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.305902][ T6849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.323187][ T6847] loop0: detected capacity change from 0 to 2048 [ 99.412574][ T6847] Alternate GPT is invalid, using primary GPT. [ 99.419161][ T6847] loop0: p2 p3 p7 [ 99.465739][ T2970] Alternate GPT is invalid, using primary GPT. [ 99.472087][ T2970] loop0: p2 p3 p7 [ 99.491115][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.545439][ T6862] loop1: detected capacity change from 0 to 512 [ 99.590026][ T6862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.604808][ T6862] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.670187][ T6871] netlink: 'syz.2.964': attribute type 3 has an invalid length. [ 99.679513][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.828293][ T6878] ebt_among: src integrity fail: 100 [ 100.004312][ T6881] loop2: detected capacity change from 0 to 512 [ 100.028927][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.042629][ T6881] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.077523][ T6881] __nla_validate_parse: 24 callbacks suppressed [ 100.077541][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 100.154297][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 100.156475][ T6894] loop0: detected capacity change from 0 to 1024 [ 100.170112][ T6894] EXT4-fs: Ignoring removed orlov option [ 100.176011][ T6894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.192384][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.202483][ T6894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 100.210884][ T6894] System zones: 0-1, 3-12 [ 100.224266][ T6894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.231692][ T6899] loop2: detected capacity change from 0 to 512 [ 100.249695][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.284445][ T6903] loop0: detected capacity change from 0 to 1024 [ 100.286466][ T6899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.295731][ T6903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.312738][ T6899] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.329456][ T6903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.331723][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 100.393589][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 100.440467][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 100.479564][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.490194][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.563338][ T6919] loop3: detected capacity change from 0 to 512 [ 100.578288][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.596752][ T6919] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.624460][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.976'. [ 100.649600][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.976'. [ 100.674555][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.976'. [ 100.710136][ T6924] netlink: 'syz.0.977': attribute type 3 has an invalid length. [ 100.719898][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.915215][ T6940] ebt_among: src integrity fail: 100 [ 101.023386][ T6941] loop4: detected capacity change from 0 to 512 [ 101.065730][ T6939] loop0: detected capacity change from 0 to 2048 [ 101.109175][ T6941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.123181][ T6941] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.124819][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 101.143410][ T6939] Alternate GPT is invalid, using primary GPT. [ 101.146311][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.980'. [ 101.149901][ T6939] loop0: p2 p3 p7 [ 101.164451][ T6948] loop1: detected capacity change from 0 to 1024 [ 101.179510][ T6948] EXT4-fs: Ignoring removed orlov option [ 101.185367][ T6948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.207237][ T6948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 101.211096][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 101.211187][ T29] audit: type=1326 audit(1727330029.409:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.224414][ T6948] System zones: 0-1, 3-12 [ 101.252357][ T6948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.261643][ T29] audit: type=1326 audit(1727330029.459:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.287749][ T29] audit: type=1326 audit(1727330029.459:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.311213][ T29] audit: type=1326 audit(1727330029.459:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.330285][ T6960] loop3: detected capacity change from 0 to 1024 [ 101.334701][ T29] audit: type=1326 audit(1727330029.459:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.342847][ T6960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.364288][ T29] audit: type=1326 audit(1727330029.459:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.380866][ T6960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.396139][ T29] audit: type=1326 audit(1727330029.459:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.396176][ T29] audit: type=1326 audit(1727330029.459:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.455427][ T29] audit: type=1326 audit(1727330029.459:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.478815][ T29] audit: type=1326 audit(1727330029.459:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6951 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6410c1df39 code=0x7ffc0000 [ 101.503097][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.559077][ T6964] loop2: detected capacity change from 0 to 512 [ 101.580340][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.609992][ T6964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.638854][ T6964] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.698183][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.714122][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.787362][ T6982] team0: Device ipvlan1 failed to register rx_handler [ 101.851931][ T6988] loop0: detected capacity change from 0 to 1024 [ 101.858902][ T6988] EXT4-fs: Ignoring removed orlov option [ 101.865637][ T6988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.937124][ T6991] ebt_among: src integrity fail: 100 [ 101.965385][ T6988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 101.973756][ T6988] System zones: 0-1, 3-12 [ 101.978818][ T6988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.004883][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.017179][ T7003] loop3: detected capacity change from 0 to 512 [ 102.093390][ T7003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.143451][ T7013] loop2: detected capacity change from 0 to 1024 [ 102.150760][ T7013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.159827][ T7003] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.223366][ T7016] loop4: detected capacity change from 0 to 512 [ 102.281156][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.323179][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.369780][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.545252][ T7016] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.609914][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.712854][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.725733][ T7045] loop1: detected capacity change from 0 to 2048 [ 102.750714][ T7047] loop4: detected capacity change from 0 to 1024 [ 102.759674][ T7047] EXT4-fs: Ignoring removed orlov option [ 102.765458][ T7047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.784075][ T7047] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 102.786202][ T7045] Alternate GPT is invalid, using primary GPT. [ 102.795101][ T7047] System zones: 0-1, 3-12 [ 102.798620][ T7045] loop1: p2 p3 p7 [ 102.804005][ T7047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.862981][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.943562][ T7059] loop0: detected capacity change from 0 to 1024 [ 102.956772][ T7059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.983421][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.018132][ T7062] ebt_among: src integrity fail: 100 [ 103.142881][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.280610][ T7077] loop0: detected capacity change from 0 to 512 [ 103.325503][ T7077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.387857][ T7082] team0: Device ipvlan1 failed to register rx_handler [ 103.517819][ T7077] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.563793][ T7088] loop3: detected capacity change from 0 to 512 [ 103.613193][ T7088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.625881][ T7088] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.627512][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.719028][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.730395][ T7107] 9pnet_fd: Insufficient options for proto=fd [ 103.766228][ T7113] loop2: detected capacity change from 0 to 1024 [ 103.787620][ T7113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.814361][ T7113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.859161][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.963630][ T7127] ebt_among: src integrity fail: 100 [ 104.166113][ T7136] loop0: detected capacity change from 0 to 512 [ 104.348705][ T7137] loop4: detected capacity change from 0 to 2048 [ 104.385540][ T7136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.398334][ T7136] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.413743][ T7137] Alternate GPT is invalid, using primary GPT. [ 104.420193][ T7137] loop4: p2 p3 p7 [ 104.480790][ T7154] loop1: detected capacity change from 0 to 512 [ 104.508291][ T3276] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.523386][ T7154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.538097][ T7154] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.555651][ T7161] loop2: detected capacity change from 0 to 1024 [ 104.564338][ T7161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.827662][ T7180] ebt_among: src integrity fail: 100 [ 105.108388][ T7196] loop3: detected capacity change from 0 to 512 [ 105.145768][ T7196] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.305458][ T7196] __nla_validate_parse: 28 callbacks suppressed [ 105.305477][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 105.328923][ T7203] loop4: detected capacity change from 0 to 512 [ 105.331100][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 105.353369][ T7206] loop1: detected capacity change from 0 to 1024 [ 105.361260][ T7206] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.366866][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 105.373091][ T7203] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.064941][ T7234] loop0: detected capacity change from 0 to 2048 [ 106.132346][ T7242] ebt_among: src integrity fail: 100 [ 106.150955][ T7248] loop1: detected capacity change from 0 to 512 [ 106.161121][ T7234] Alternate GPT is invalid, using primary GPT. [ 106.167556][ T7234] loop0: p2 p3 p7 [ 106.179559][ T7248] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.192918][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'. [ 106.211033][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'. [ 106.235328][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'. [ 106.270207][ T7257] loop1: detected capacity change from 0 to 512 [ 106.288272][ T7257] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.295089][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 106.492062][ T7271] loop1: detected capacity change from 0 to 1024 [ 106.500299][ T7271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.857214][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 106.880738][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 106.880754][ T29] audit: type=1326 audit(1727330035.079:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 106.886376][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 106.889361][ T29] audit: type=1326 audit(1727330035.089:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 106.934853][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 106.948266][ T29] audit: type=1326 audit(1727330035.089:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 106.976787][ T29] audit: type=1326 audit(1727330035.089:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.001623][ T29] audit: type=1326 audit(1727330035.119:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.025071][ T29] audit: type=1326 audit(1727330035.119:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.048469][ T29] audit: type=1326 audit(1727330035.119:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.071931][ T29] audit: type=1326 audit(1727330035.119:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.095992][ T29] audit: type=1326 audit(1727330035.119:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.119437][ T29] audit: type=1326 audit(1727330035.119:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35171df39 code=0x7ffc0000 [ 107.166375][ T7289] loop4: detected capacity change from 0 to 512 [ 107.178270][ T7289] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.217956][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1075'. [ 107.243800][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1077'. [ 107.265351][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1075'. [ 107.300721][ T7301] ebt_among: src integrity fail: 100 [ 108.670625][ T7351] loop1: detected capacity change from 0 to 1024 [ 108.679541][ T7351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.834269][ T7343] loop4: detected capacity change from 0 to 2048 [ 108.843406][ T7359] loop2: detected capacity change from 0 to 164 [ 108.918841][ T7359] pim6reg1: entered promiscuous mode [ 108.924184][ T7359] pim6reg1: entered allmulticast mode [ 109.052146][ T7343] Alternate GPT is invalid, using primary GPT. [ 109.058812][ T7343] loop4: p2 p3 p7 [ 109.082854][ T7362] loop1: detected capacity change from 0 to 512 [ 109.109522][ T7362] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.661636][ T7386] ebt_among: src integrity fail: 100 [ 109.813557][ T7397] loop0: detected capacity change from 0 to 1024 [ 109.821658][ T7397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.844393][ T7400] loop3: detected capacity change from 0 to 512 [ 109.884217][ T7400] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.612301][ T7432] loop1: detected capacity change from 0 to 2048 [ 110.719691][ T7432] Alternate GPT is invalid, using primary GPT. [ 110.726135][ T7432] loop1: p2 p3 p7 [ 110.739394][ T7444] ebt_among: src integrity fail: 100 [ 110.767127][ T2970] Alternate GPT is invalid, using primary GPT. [ 110.773478][ T2970] loop1: p2 p3 p7 [ 110.892251][ T7444] __nla_validate_parse: 21 callbacks suppressed [ 110.892267][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 110.918431][ T7451] loop4: detected capacity change from 0 to 1024 [ 110.925573][ T7451] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.956643][ T7455] loop0: detected capacity change from 0 to 512 [ 110.974617][ T7455] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.989697][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 111.012070][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 111.043873][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 111.136507][ T7468] loop0: detected capacity change from 0 to 512 [ 111.188261][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 111.207691][ T7468] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.210533][ T7474] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 111.221894][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 111.249420][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 111.424760][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 111.855543][ T7496] loop1: detected capacity change from 0 to 1024 [ 111.876391][ T7496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.110655][ T7503] ebt_among: src integrity fail: 100 [ 112.274816][ T7508] loop1: detected capacity change from 0 to 512 [ 112.300164][ T7508] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.311740][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 112.316640][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1130'. [ 112.517930][ T7525] loop4: detected capacity change from 0 to 512 [ 112.547176][ T7525] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.628882][ T7528] loop1: detected capacity change from 0 to 2048 [ 112.640523][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 112.640539][ T29] audit: type=1326 audit(1727330040.839:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.675306][ T29] audit: type=1326 audit(1727330040.879:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.698829][ T29] audit: type=1326 audit(1727330040.879:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.713318][ T7528] Alternate GPT is invalid, using primary GPT. [ 112.722578][ T29] audit: type=1326 audit(1727330040.879:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.728740][ T7528] loop1: p2 p3 p7 [ 112.751902][ T29] audit: type=1326 audit(1727330040.879:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.779120][ T29] audit: type=1326 audit(1727330040.879:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.802620][ T29] audit: type=1326 audit(1727330040.879:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.826123][ T29] audit: type=1326 audit(1727330040.879:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.849708][ T29] audit: type=1326 audit(1727330040.879:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.873277][ T29] audit: type=1326 audit(1727330040.879:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759adddf39 code=0x7ffc0000 [ 112.921879][ T7539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.991837][ T7539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.075605][ T7539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.149191][ T7539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.314962][ T7539] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.329715][ T7539] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.344939][ T7539] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.359580][ T7539] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.532740][ T7552] loop1: detected capacity change from 0 to 1024 [ 113.558450][ T7552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.598889][ T7557] ebt_among: src integrity fail: 100 [ 113.683857][ T7562] loop3: detected capacity change from 0 to 512 [ 113.698635][ T7562] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.171379][ T7586] loop4: detected capacity change from 0 to 512 [ 114.228851][ T7586] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.448268][ T7600] ebt_among: src integrity fail: 100 [ 114.521557][ T7603] loop4: detected capacity change from 0 to 2048 [ 114.571380][ T7603] Alternate GPT is invalid, using primary GPT. [ 114.577765][ T7603] loop4: p2 p3 p7 [ 114.709703][ T7611] loop3: detected capacity change from 0 to 512 [ 114.729835][ T7611] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.800445][ T7621] loop1: detected capacity change from 0 to 512 [ 114.838863][ T7624] loop3: detected capacity change from 0 to 512 [ 114.846078][ T7621] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.874376][ T7624] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.095086][ T7648] loop0: detected capacity change from 0 to 512 [ 115.107956][ T7648] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.444332][ T4935] udevd[4935]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 115.562914][ T3910] udevd[3910]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 115.574968][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 115.603438][ T7661] loop0: detected capacity change from 0 to 764 [ 115.641207][ T7661] No such timeout policy "syz0" [ 115.992990][ T7667] loop0: detected capacity change from 0 to 512 [ 116.018157][ T7667] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.031350][ T7667] __nla_validate_parse: 26 callbacks suppressed [ 116.031386][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'. [ 116.059416][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'. [ 116.091407][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'. [ 116.258902][ T7685] loop0: detected capacity change from 0 to 512 [ 116.287831][ T7685] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.304776][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1172'. [ 116.323590][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1172'. [ 116.352893][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1172'. [ 116.407157][ T7696] ebt_among: src integrity fail: 100 [ 116.467572][ T1963] ================================================================== [ 116.475665][ T1963] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 116.482872][ T1963] [ 116.485187][ T1963] race at unknown origin, with assert no writes to 0xffff8881001cb1e8 of 4 bytes by task 1963 on cpu 1: [ 116.496387][ T1963] dequeue_entities+0x6df/0x760 [ 116.501248][ T1963] pick_next_task_fair+0x7d/0x410 [ 116.506270][ T1963] __schedule+0x284/0x940 [ 116.510594][ T1963] schedule+0x55/0xc0 [ 116.514832][ T1963] synchronize_rcu_expedited+0x611/0x7a0 [ 116.520469][ T1963] synchronize_rcu+0x46/0x320 [ 116.525144][ T1963] synchronize_net+0x3d/0x50 [ 116.529737][ T1963] tipc_sk_rht_destroy+0x58/0x70 [ 116.534673][ T1963] tipc_exit_net+0x8a/0x130 [ 116.539174][ T1963] cleanup_net+0x475/0x810 [ 116.543583][ T1963] process_scheduled_works+0x483/0x9a0 [ 116.549046][ T1963] worker_thread+0x51d/0x6f0 [ 116.553625][ T1963] kthread+0x1d1/0x210 [ 116.557775][ T1963] ret_from_fork+0x4b/0x60 [ 116.562201][ T1963] ret_from_fork_asm+0x1a/0x30 [ 116.566966][ T1963] [ 116.569300][ T1963] value changed: 0x00000000 -> 0x00000001 [ 116.575006][ T1963] [ 116.577319][ T1963] Reported by Kernel Concurrency Sanitizer on: [ 116.583478][ T1963] CPU: 1 UID: 0 PID: 1963 Comm: kworker/u8:8 Tainted: G W 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 116.595541][ T1963] Tainted: [W]=WARN [ 116.599335][ T1963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.609383][ T1963] Workqueue: netns cleanup_net [ 116.614150][ T1963] ================================================================== [ 116.652801][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'.