last executing test programs: 2.215676379s ago: executing program 4 (id=2377): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'ipvlan0\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xff5f) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000000)={@broadcast, @remote, 0xfffe, "66c5aff8a7eb3af1f6cec2e74200", 0x7, 0xffffffff, 0x80}, 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) syz_read_part_table(0x104c, &(0x7f0000001080)="$eJzsz7sNwkAQBNAxP5sqaIWQBiwyiqIIAiqgKkTsZJHBckaIENJ7wWnmtBts+K1FhuraqVzG55Bk+6p1r8q6GePmw3q1/ZxPxyyn30q6fXbJKjknQ81DXXJ7vGOT/vqVmwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzzwDAAD//1ivELA=") 2.04978823s ago: executing program 4 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ustat(0x6, &(0x7f0000000340)) 2.00633559s ago: executing program 4 (id=2380): io_setup(0x40c, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x501400) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000d00)={'#! ', './file0', [{0x20, 'Bridge0\x00\x95\x13\xc3-\x02x\x91\xcb\x03%\aWo\x94\xfc\xb0%\xf4\xf0_\xea\xcd\xf3\xfa\xea\xd1\xa7n\x1es_|\f-\x9a\x14U\xf6]\xce|tJ\xb0\xc5 ,\xbc\xe3\xabYV\x9d\xe2\xf1\x93\xe8\xe0\xfe\x00\xf9iqO.\xcd\xc7\x97\xe5q\x19\xcc\x1a\xd8\x0f;\xbd\xb1\x1c\xb9\xc0\xfd\x8b*\xff%V\x96J\xc5hq\'km#\xa4*\xbd\x97\xb0\x96\x93W.\xe2I\xaa\x8fM\xf9\xcf\x000-#\x16Qt\x92\x82\x1d\xdeAX\x19\xacP\xe2\xeb\xb1Q\xfe\x04\x9e-\xd5\xd6\xa6\xd4\xbd`\xdc\x83m\xc2*\xd3\xccO\x86\x03gR!\xbex\xb1I\x9d\xeb\xba\xca'}, {0x20, '.\xf7\xff\xff'}, {0x20, '}^*'}], 0xa, "014e12e96ee94abf1d13e7d14152d22d9036e6891ca7211c3477275b9d10beeff066091b7d334ea298c807db85f91b57e1908fda0815"}, 0xf6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) gettid() capget(0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) pread64(r5, &(0x7f0000000300)=""/150, 0x96, 0x0) 2.0059685s ago: executing program 3 (id=2381): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.94507552s ago: executing program 3 (id=2382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x60) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bond\x00', 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="55ce23d22651e8e354a261119190a36180f9d150a765f686e3431862beb81fd1750284d9485e2fa38b54211a52fb06f6ab3dbdab8433a14fd2cbd4b53157255c0953000c19108bf2c4bee8ba854d2d71d03fa007cb688cc37d927fd1a06416da91a15c76174ce01bf8108b26aa0c1734e3a86a4529488b43482e06bee3368d8a916ea121d5a447fb727db761f50c47a7901fe03b5d509ac810bdeeb97bc63e72a016c0bdc4261340f1239b38bf76798fe79891e22d95ace3568d7375e22357f225dea7ddb3af00296306d1b4afa6b714a2f426a5a6cd015d2f0fb374d331d2ad028acf1b1aca39650cf4d6cee4f9cbad6d", 0xf1}, {&(0x7f0000000400)="5753a420b913f01c5e59a41f1f8b07fdc6e4143eb57baa0bf472fc293e6f04517b5058368b6948e3dc4d8bd0371bdb03aa21108de286b689e4de2fac601bdc4911162ced9b720db2ec71df719b8306885f5c5b911dca0332951b6b4c1c985ca971afbddb87091b159099bbb0bc0c4b1fd3e5cb6bf0e3f897f155bd4df48349", 0x7f}], 0x2}, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="18000000160015f9b15449765e2eb0a2670619a5086f00000000000000000a000000", @ANYRES32=0x0], 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0, 0x0, 0x3}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000004380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat(r4, &(0x7f00000043c0)='./file0\x00', 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x1, 0x0, 0x0) unshare(0x44040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000009c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000046c0)={0x10, 0x17, &(0x7f00000044c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6722}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x380000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x0, 0x0, 0x1, 0x4, 0x4, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f0000000980)='syzkaller\x00', 0x8, 0x68, &(0x7f0000004580)=""/104, 0x41100, 0x20, '\x00', r5, @sk_msg=0x7, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002e80)={0x0, 0xc, 0xfffffffa, 0x200}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000004600)=[0x1], &(0x7f0000004640)=[{0x2, 0x3, 0x0, 0xc}, {0x5, 0x3, 0x5, 0x6}, {0x0, 0x5, 0x3, 0x5}, {0x4, 0x4, 0x10, 0x7}, {0x1, 0x3, 0x5, 0xb}, {0x2, 0x1, 0xe, 0x6}], 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x7f, 0x0, @local, @private0, 0x40, 0x40, 0x8c, 0x3}}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7004ffdbdf250100000008000100000000000800020002"], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) sendmmsg$sock(r2, &(0x7f0000004140)=[{{&(0x7f0000000500)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="a07c7c4270b99777a68c6dc383f86acb90abe5ae537d2a07468c376211408420c9efcd113275b57a5011021ac135c6ff974541a4438d0b09e6e2b1f683be2c9b422d73dd754dcea74bad60c06dd59741cd4b1b166a9e9e5d308e516877e8d65d9f73fee8c963f13ae8b155e42c9f1af5b2d95096c5d652ac91a6d8f1bef8158bb489374eab9a97d48658002b1f539ffe7e1cc64a4472f412df7c3493b01c646cad1694edabdb5a7f37d5a33a4c301f90e7d3528f1e7cc6cdf7fa300432578591071496584e35659229", 0xc9}, {&(0x7f0000000780)="874e2cc26ea81f413d4f13f13b6159ac1c346cc18396436585fbbbad9fee0c9de5e7f3a528c63f1740582c233f86fae70e0979fbd4c282f7c8209ba080d996d0a5afd0a5ee9fcf2e5fa45614ac3192953efcad1efdaa09d154a91e7333b2d07a5ebc3df5cf9079203626dda783313cf055ba4714feab05522e00707f75be7b96acd6475c3769a51ce9c7494efdda4db0c0f23cf99b3856693ab200f407080e234b76dc21e3b532f7e6e2bef6f55ae26bcaf0d80e9c8e0d1fb314416e1f", 0xbd}, {&(0x7f0000000840)="5d9c761ceb510d61811a26cebbb6dd3e317df3556db130d6752cbf5f0c56cf3e05000000000000000c3114661d085f4e2d9d3c2cdf20681a2f563a3bd23bb79f49a1f1438ff0b43b1953d6c3c7a746ac840775f5e39732d94633d13781aff2e90a8b1b9d40328ca415fa3f1d54b0fbcdb82452769f825952952a73d9c97281", 0x7f}, {&(0x7f00000008c0)="656c819e2e31a6d06551f09100c9201e0c62984241ac349ef3468ee8b243fb7620e806d1133a89cfb4f014837b1e115a7454770b4ac83144d5cbe6b983391e32bb24ca8a8342f5378ff358f96fa61dbea0e8d9b4ab15d5803ff0db6b9dd1a82abecca480e7aae765ba47803f6b1f64d096a611b0c6656d9c5c0f07f775a3a190ef6f54de3350adbf1e2850d00b0c3d8a37b9495e2f83ae4fc2727b", 0x9b}, {&(0x7f0000002e00)="13c8bfc0a188c89a74138aefed5ebe4626998da79c67544555fe6bfc1873ed8ced4793ef052fb72ef18102cbe2aa2d75975f2ca6cdc63e60d6b1285c1cc8d365ff2305f412a9e176ef3a45", 0x4b}, {&(0x7f0000000a00)="43a2066ff7c8b3d420377f707a77f3f8eb48fdd8b53949f21177ce5cf76ad4f977b38d162d6d8117f67d660b628fe66f4e87184de07a0bb7847ffc47902ea7e794ce786738a37e4a379936447c54df2021600604009d1bb7228b205e681452e0a19242972e90e74c824c6290d80fccefc91456ee648e88a8e20ab92b95eb216d01dbcd5649bc77ae513c5306d8edf951bac9dba2c665378bd1fc8b4b43df4044e8cb5ee8a4ee1b593061511d3e93e6cc67b7e285e66f", 0xb6}], 0x7, &(0x7f0000000b40)=[@mark={{0x14}}], 0x18}}, {{&(0x7f0000000c40)=@ll={0x11, 0x1b, r6, 0x1, 0x6}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="e53904955ab10d40cd0898c9a58b99c1557e5abc5d35530f", 0x18}, {&(0x7f0000000d00)="29362c1cd38e8e43c3113e35cab3cd7f12dd99d19f59930578d60aee4d937662d104dbedda85587aa01f740ab7b593373187d316322ea803af2e167e291cc8e1c8a0ccb8ea326251fcd1ca5516a8ac7123d4d3b1fc52ed3e4f8e8ae9db0c07f7ed717470cb2450f63e718153024160162999c47d06fd1a0d6f799f9b2599e010978d56738576836dbf23cd044f9889e8792bea9b7561fc1c66dae1a1d96708bc88d0621ae5da53a8cd212234ccd78423fc58cc9e7f486b36ab0eb063fc2a615c41f2eb7767154ac7c476265ed7103d", 0xcf}], 0x2, &(0x7f0000000e40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x90}}, {{&(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e21, 0x100, @private0}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[@mark={{0x14, 0x1, 0x24, 0x2de3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f0000001040)=@phonet={0x23, 0xd2, 0x6, 0x2}, 0x80, &(0x7f0000001200)=[{&(0x7f00000010c0)="895cd60d93d576d024ed12f5930c7360aa74690a3b57bf9d2caaf4bcfbebfeb5", 0x20}, {&(0x7f0000001100)="87566ac973da11f56805d7bd7b2e7509e72dc568cbaab993152c1ef5df40f6b5d98a2cf687a0b9df58f21fc0171a6463404197fc68ed5a52043e12b41a69f4420e59a35aecfbb9eab3f13ea9cfaefdbdc5cdc083698ffcad12ed702b6871be968332cf861e5bd1120327c39d2f2035e7eaea245bfbb7a8a61d147c2231b3f2b4e59e5f133f9b991c02ab5c112741ddabe5f80f750e70072898ec4a58d39f4b84b6bd260ee6a6b190e91324ab0194a66da810080925b7d0ec759f72b9e0ab76a397c4bfdc22a21872ba1a34642104a88ef453c3e3607ad6ee9be920fd1e", 0xdd}], 0x2}}, {{&(0x7f0000001240)=@isdn={0x22, 0x2, 0x9, 0x0, 0x1}, 0x80, &(0x7f0000002480)=[{&(0x7f00000012c0)="c40c86ff4ac10698dbfc3d216d8567a1dbd80a3a2408c6973991aa40419d2bc4d7e3bfbd1c806aec514adc9929185609fa471dff072afdd72d672a495651477edf2a61abf561202e44fd28", 0x4b}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="13b8cd9a58790ea454270c1d4a41f64e9fa554111c672c39b16021e4b0af4c3adb53d101966694818c5cf46c8101d100e26ac7568d14f30cf51f1f3f1be8", 0x3e}, {&(0x7f0000002380)="1474a25e745dd7da4d51e67e9fb10977c495a5d2012f963551bf3a5f44eb3bf42588692db22a42d571821df9ee00", 0x2e}, {&(0x7f00000023c0)="64c8cf635a5efe5d7f1fae339c110cd51b3d6c17663205f359e8c3ae91ce600984495588defa0984e23a3695eac01a3fb4b79ff951e3e47866cc7cab8b52a1d7963bc9253d0a9850e7ddf2390979c108f51b76211f7e9e698efcf384dff03db5ea00c35c3fbadc672280720a94c15324f0b455b70f3facabe277da2e1608429cf2ab", 0x82}], 0x5, &(0x7f0000002500)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xe7e8}}, @mark={{0x14, 0x1, 0x24, 0x2c5}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0xa95}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xc0}}, {{&(0x7f00000025c0)=@generic={0xb, "ceb7e4e87bf28cc0683d99e6f5e978f6a6fd9d9a0115d1797f651e519ce308981de5a4a0cdf62384fa2273bccdd2d9c63bdc056f43b5ae699dc9d64d61cca1507108558de9421d7bf3ade090febb27f58f91e6fea827a573d530a66d84c9ea0a1b6ae33cd0970e16f18e7d04e02ed9c08b23cc619671c6a9e6db6af0e44a"}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002640)="5ad1782e3bc6a2d77ddcca67c5cd426df4ca28c8c0d0887abee2f3b6ac5d37e3a4e29e35de1aeb937a6a1cff7ec40640aaf426668b05c9453c7466679c49b38d6afb676b2c8d4c797d6a2926d54fab81537074146156837f98189edd2b1db6587011ff18ae517fad1f7a45959359f55882e0f2280c239bd77176841196fb6f0369c6e7c941ac0ad3c8cdd9d4ba9b5af9c0e2a4b49ec9ed3168c819da5f", 0x9d}, {&(0x7f0000002700)="b3aa07c2108c3832b8aa15f1aded45f1c2eb0eed71239f7684d835fe13789bfee91ff202e845f19bd8e4c76122dccdfcc20feb141e5d5d75361d12af34eaafb0261a90e927a2e9a448cbf826c2e569bbcabb7049188eb52322d7e25e70f6dde306c0da5c029e0b64d31e967415d658bfba53bf79921d4807a04c3f25c6c32bc28da3fdc4dacda6a4b82bf959e8b15091cb67912f033f236fdcd0f3fafa8849e87ae18a1127a5447dfddb", 0xaa}, {&(0x7f00000027c0)="80c11959e6a7f3bece64e3b4469067316ea0925f46aa7e8d225f789a0e39be5cca8644556395df08eb066aade3d7844f70c117d9f4ea86e960478c8bc72e935143a6527b43f4fdd28348fc", 0x4b}, {&(0x7f0000002840)="ffac8f0dad7f6e60c10c5c748ed80c0ca904a04b57334b89ea700f2919db6477c130ae2ecedfaf73bedd1022db97dd915407510594b5e61c5256d3a4b36f62ea0430dac1b677b49cac7d5cf6436a1f960955318849b23beb09698dc13b402cd49143a78a0989c0def5443a0172f1f4b1a8994dfb4c26bc6e44facc7558c5a0bfe7e51e2be6a8fd703a6c40fed8055c7434b557aa296ab54871990a7414288216047553958d626376a82092bc27500baab4861d54ab7feca734f70310", 0xbc}, {&(0x7f0000002900)="af6f9f881e1cebd215e2b961a5e2bf7fad563474dc945d870e6b4f169d1e5b8ec5e61b93ae2b27f39973f9f47f81d4cae2554956b06c0b005b768bb3a58301f12ecadd04d0114d", 0x47}, {&(0x7f0000002980)="8a1ffcc667a88b914e5811601ef482c11790db0da677e937c7bbf8bb683363373b", 0x21}, {&(0x7f00000029c0)="9420f90a1b2506b0aed2d780e179e894521bee274f76556e5a9cb05dff60a66c804936a5a08ad381991c693a756a8e5e0c83faf65f14db3cf3b9fefc96a1c07ae5561d817e89994c", 0x48}, {&(0x7f0000002a40)="5019e3b1864a26f3c421344be56b19be5789ec674d3d8d02e2c4b31aeef594118f97c9b535f6180ba81f6407d043fb9e701483aebddf21a8d8e9de0e5f48d2ad8e36d6b5dfff326a1aaa63015a6c5a49aad30267e453f9bbc545f847d86faa4ba7000269462ffea4741a5f3669385b4ce938f5bb554954e7ae986c257993b9229db31c645b51c7c4dcdd923f2a4d9611821cd030a25f70aa7a4b9f1e29f8f5d66eefef02b00cf80fbdffeeeb71", 0xad}, {&(0x7f0000002b00)="10e47709761ce03646024d004d1ffe136b23425a6b2b6ba4497bdc3ddfa59959c1e02805735b80af3f6af6c8d0b24f9983e0485d25d13d48e335ad3853eff9dd7596eaf8666a182dff96ab6c0f877da46e0cc0bb9bde5c174e30ad5779fc68568a603bbf4864db7afb1626c900cb876c142b", 0x72}], 0x9, &(0x7f0000002c40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xe0}}, @txtime={{0x18, 0x1, 0x3d, 0x4c78}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x78}}, {{&(0x7f0000002cc0)=@pppoe={0x18, 0x0, {0x1, @empty, 'xfrm0\x00'}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002d40)="db0367a5af2716db9f4377485b2d8513e0a1e370def0d5e0e5b7e7feda6ea2a33259cbc589a11e80cce6f3ac09e4d75f585d022ef987dd0961432f6f44b467fb7b4afa323ebe16f5ca08852c0693ea0edf49026abb09fb0dd790d095d1c12fba4e4431dc8348f9b633c12781956404e2c751dab0792841b9710c5fa2c32f350ec1ee9f2b4849df0010e57485ac07658a4b8c443a0716b3627024a2dc0ec4cd5dce973b460e564772bbf50571f79fde54", 0xb0}, {&(0x7f0000004400)="8f67d443eab4df5ec9094fbbd8673374375e064bd4e8380449cf11645303ca716b95239d7ce46b74d19a2020e6cd33bd900603af0bccb6f979ed19a350838075b5e4a2730b2c9ba9bd4fa3450735317519c0dd30cd77e1d57abf93cdc875fc38b38a1a41d532282fde9698bb88f5a455fd5fd485e76f7d819c34d187ad4c52bed296cd9cbdf0e16aa269e9058037423b108d425a8a97981ae54e44e7d11626adfb8daa195fa09d0bed11598da6d324414a422ab447b5d89239db", 0xba}, {&(0x7f0000002ec0)="2e69a46845bba3469f6cb7e2d6deb8ec905fbeff2a0ce163572429c4fd15f7f9eb9e81df5696dff1832cb5a5280b770f04972b6364000b8ad16013a58d1bbcdd1ace8627b8b61fb9839f6c0fe81380149a5242bbdc86d25656d722b83435ba6022e20fb116039fa496c86009bc2a9113936ec03a3b48723700c5b3d1f66c5d69ca02e1f5e3f6fd8d8163a0f1e05732d04f192be1c46c1f1879385c64582e005d5565dfcd92bd458758d81c94c3236f47c38b2301b456a2aee95d56cfb646c04ebab22abf900166c5765b0b8ebc895ea80e27fa6c", 0xd4}, {&(0x7f0000002fc0)="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", 0xfc}, {&(0x7f00000030c0)="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", 0x1000}], 0x5}}], 0x7, 0x4010) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000004300), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000004340), 0x9) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000440)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x80, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x17, 0x81, 0x0, @empty}}}}}, 0x0) 1.622509172s ago: executing program 3 (id=2385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.354224233s ago: executing program 3 (id=2394): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0}]) 1.311278133s ago: executing program 2 (id=2395): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000004) 1.293013693s ago: executing program 2 (id=2396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_type(r2, 0x0, 0x0) socketpair(0x29, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x3, 0xffff8001, 0x117, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.261914874s ago: executing program 2 (id=2397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) pause() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0xfc, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0xffff, 0xffffffff, 0xfffffffe, 0x2009, 0x1, 0xfffffffd, '\x00', 0x0, r3, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0xffffffffffffffdf}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_clone(0x10000000, &(0x7f0000000300)="d51ef53efaac912e161a0d43e10d5c0b080e15bdc5a8256a51199edce8b705e558bca3bf4251f2aabe3ac4e612510c99c60f994012c891f8a1b345a3e1d33ea4ad779d6e319e4f890a2286e0da11b81274ef1e89e004edde16a80e51eaa37d9cd5842ae90a0d8737f9ed00aafb684c07b27685f3e5a0b37f670b76e42b0f", 0x7e, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480)="a6e7f5794ba2b8ececb51f888eb4116ce9d1ccb69522fe3a95a2a9f2f360a280f5") get_mempolicy(&(0x7f0000000080), &(0x7f0000000040), 0xfffffffffffffff4, &(0x7f0000ffd000/0x3000)=nil, 0x4) 1.261448363s ago: executing program 3 (id=2398): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000001140)={[{@dioread_lock}, {@oldalloc}, {@nogrpid}, {@nolazytime}, {@data_err_ignore, 0x0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe924}}, {@orlov}, {@minixdf}, {@errors_continue}, {@debug}, {@dax}, {@sysvgroups}], [{@obj_type={'obj_type', 0x3d, '$-L^+%'}}, {@seclabel}], 0x2c}, 0x2, 0x502, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000031400078008001140000000000500150083000000050005000a000000050001000700000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x80) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) rename(&(0x7f0000000100)='./file1/file3\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_socket_connect_nvme_tcp() syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000001440)=ANY=[@ANYBLOB="12011003000000ff2505a8a440000102030109021b000101058026f21782024d65ec4c020904000601070101830976ca4bd2267a3eb25fffb5"], &(0x7f00000013c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xd, 0x8, 0x2, 0x8, 0x2}, 0x50, &(0x7f0000001200)=ANY=[@ANYBLOB="050f5000050a1003000000040408000a1003000e000409090020e469049e45ff03fff4e9ef121c279e5cf45e3d03100b20102705e5ff00000f00fe0fc000ff00813f00000fc0000000000000c0ffff00"], 0x5, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x142b}}, {0x69, &(0x7f0000001280)=@string={0x69, 0x3, "daa4f222c3581ad3ee81a4bc055f04c679cac7fdf5a3bc3911fb814263260d2305010205673c098b6a73e67249b17b9531f35ea9fec29c9365690e52aec511904e051d2c013298f3e5137bbb230060d9c96396bd89e2ecd11bfb1a788815268625ced2c65f00be"}}, {0x2a, &(0x7f0000001340)=ANY=[@ANYBLOB="2a0391aef6374e4e3423a3a948c5bff7c355dbfc86486d580014ded4b600"/42]}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x422}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180), 0x25, 0x4b6, &(0x7f0000000540)="$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") truncate(&(0x7f0000000200)='./file1\x00', 0x87e) 1.045068264s ago: executing program 1 (id=2402): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 994.717835ms ago: executing program 4 (id=2403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 981.318635ms ago: executing program 4 (id=2404): syz_io_uring_setup(0x3a96, &(0x7f00000000c0)={0x0, 0xf7af, 0x2, 0x0, 0x223}, &(0x7f0000000000), &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f0000001a80)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 758.366716ms ago: executing program 4 (id=2405): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x4) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000001d00fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x80000000, 0x0, {{0x1e, 0x4, 0x1, 0x4, 0x78, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @rr={0x7, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}]}, @lsrr={0x83, 0x7, 0x3f, [@multicast1]}, @ssrr={0x89, 0x7, 0x46, [@loopback]}, @generic={0xc2, 0xe, "49aa6786e308ca3bf7bb2e38"}, @timestamp_addr={0x44, 0x24, 0x5b, 0x1, 0x7, [{@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x6f}, {@local, 0x3}, {@remote, 0x2}]}, @noop]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="56dc50af652203d228265e53a122f5f67b4b9ba3b914a529c9092871b72b45ee8221b4e48accf22d8e2075cf62b43af3a64dce2af2cbc9f8d8839b248d1382c90a8a5a9f19baa791c1f19d5c11e036cfe575c0abce4ff5fe9b904272145ec542720df9276f127f6877ab59037bdaf49a0ac71ccacc513c6d4930087b11d7f5f8ff274a0681b102001982ce03105d170d30fd6d937d256bb3b8", 0x99, 0x4, &(0x7f00000004c0)={0x11, 0xf7, r2, 0x1, 0x80, 0x6, @remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = socket(0x25, 0x1, 0x3) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="823da46e47", 0x5}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 693.797066ms ago: executing program 1 (id=2406): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'ipvlan0\x00'}) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) syz_read_part_table(0x104c, &(0x7f0000001080)="$eJzsz7sNwkAQBNAxP5sqaIWQBiwyiqIIAiqgKkTsZJHBckaIENJ7wWnmtBts+K1FhuraqVzG55Bk+6p1r8q6GePmw3q1/ZxPxyyn30q6fXbJKjknQ81DXXJ7vGOT/vqVmwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzzwDAAD//1ivELA=") 546.358717ms ago: executing program 1 (id=2407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 514.947917ms ago: executing program 1 (id=2408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_type(r2, 0x0, 0x0) socketpair(0x29, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x3, 0xffff8001, 0x117, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 465.044018ms ago: executing program 1 (id=2409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0}]) 442.643808ms ago: executing program 0 (id=2410): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") 422.166808ms ago: executing program 0 (id=2411): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0xca9a3b00000000, &(0x7f0000001100), 0x1) 407.020308ms ago: executing program 0 (id=2412): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 317.689438ms ago: executing program 1 (id=2413): io_setup(0x40c, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x501400) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000d00)={'#! ', './file0', [{0x20, 'Bridge0\x00\x95\x13\xc3-\x02x\x91\xcb\x03%\aWo\x94\xfc\xb0%\xf4\xf0_\xea\xcd\xf3\xfa\xea\xd1\xa7n\x1es_|\f-\x9a\x14U\xf6]\xce|tJ\xb0\xc5 ,\xbc\xe3\xabYV\x9d\xe2\xf1\x93\xe8\xe0\xfe\x00\xf9iqO.\xcd\xc7\x97\xe5q\x19\xcc\x1a\xd8\x0f;\xbd\xb1\x1c\xb9\xc0\xfd\x8b*\xff%V\x96J\xc5hq\'km#\xa4*\xbd\x97\xb0\x96\x93W.\xe2I\xaa\x8fM\xf9\xcf\x000-#\x16Qt\x92\x82\x1d\xdeAX\x19\xacP\xe2\xeb\xb1Q\xfe\x04\x9e-\xd5\xd6\xa6\xd4\xbd`\xdc\x83m\xc2*\xd3\xccO\x86\x03gR!\xbex\xb1I\x9d\xeb\xba\xca'}, {0x20, '.\xf7\xff\xff'}, {0x20, '}^*'}], 0xa, "014e12e96ee94abf1d13e7d14152d22d9036e6891ca7211c3477275b9d10beeff066091b7d334ea298c807db85f91b57e1908fda0815"}, 0xf6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) gettid() capget(0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) pread64(r5, &(0x7f0000000300)=""/150, 0x96, 0x0) 317.450378ms ago: executing program 2 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ustat(0x6, &(0x7f0000000340)) 241.298809ms ago: executing program 2 (id=2415): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0}]) 233.105109ms ago: executing program 0 (id=2416): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 127.72781ms ago: executing program 2 (id=2417): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x40}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) 63.76617ms ago: executing program 0 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 44.76753ms ago: executing program 0 (id=2419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_type(r2, 0x0, 0x0) socketpair(0x29, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x3, 0xffff8001, 0x117, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 0s ago: executing program 3 (id=2420): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'ipvlan0\x00'}) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) syz_read_part_table(0x104c, &(0x7f0000001080)="$eJzsz7sNwkAQBNAxP5sqaIWQBiwyiqIIAiqgKkTsZJHBckaIENJ7wWnmtBts+K1FhuraqVzG55Bk+6p1r8q6GePmw3q1/ZxPxyyn30q6fXbJKjknQ81DXXJ7vGOT/vqVmwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzzwDAAD//1ivELA=") kernel console output (not intermixed with test programs): 0 [ 117.147626][T15261] __se_sys_mremap+0xbbe/0xec0 [ 117.152382][T15261] ? fput+0x14e/0x190 [ 117.156360][T15261] __x64_sys_mremap+0x67/0x80 [ 117.161053][T15261] x64_sys_call+0x2747/0x2d60 [ 117.165779][T15261] do_syscall_64+0xc9/0x1c0 [ 117.170280][T15261] ? clear_bhb_loop+0x55/0xb0 [ 117.174965][T15261] ? clear_bhb_loop+0x55/0xb0 [ 117.179670][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.185603][T15261] RIP: 0033:0x7f03273ae719 [ 117.190006][T15261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.209607][T15261] RSP: 002b:00007f0326027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 117.218024][T15261] RAX: ffffffffffffffda RBX: 00007f0327565f80 RCX: 00007f03273ae719 [ 117.226024][T15261] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 117.233990][T15261] RBP: 00007f0326027090 R08: 0000000020000000 R09: 0000000000000000 [ 117.241952][T15261] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 117.249915][T15261] R13: 0000000000000000 R14: 00007f0327565f80 R15: 00007fff6e1c3298 [ 117.257882][T15261] [ 117.371243][T15292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.379816][T15292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.446273][T15292] loop2: detected capacity change from 0 to 512 [ 117.473911][T15292] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.548868][T15324] loop4: detected capacity change from 0 to 128 [ 117.638701][ T28] kworker/u8:1: attempt to access beyond end of device [ 117.638701][ T28] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 117.727721][T15328] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 117.736094][T15328] team0: left promiscuous mode [ 117.740932][T15328] team_slave_0: left promiscuous mode [ 117.746580][T15328] team_slave_1: left promiscuous mode [ 117.755476][T15328] batman_adv: batadv0: Adding interface: team0 [ 117.761726][T15328] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.786913][T15328] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 117.797115][T15331] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 117.805040][T15331] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1831'. [ 117.814273][T15331] team0: entered promiscuous mode [ 117.819373][T15331] team_slave_0: entered promiscuous mode [ 117.825248][T15331] team_slave_1: entered promiscuous mode [ 117.832094][T15331] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.839465][T15331] batman_adv: batadv0: Interface activated: team0 [ 117.845963][T15331] batman_adv: batadv0: Interface deactivated: team0 [ 117.852748][T15331] batman_adv: batadv0: Removing interface: team0 [ 117.894476][T15343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1837'. [ 117.916302][T15347] capability: warning: `syz.3.1839' uses deprecated v2 capabilities in a way that may be insecure [ 117.953275][T15349] loop3: detected capacity change from 0 to 128 [ 118.037222][ T11] kworker/u8:0: attempt to access beyond end of device [ 118.037222][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 118.078872][T15361] loop3: detected capacity change from 0 to 128 [ 118.279149][T15371] loop3: detected capacity change from 0 to 8192 [ 118.326991][T15371] loop3: p1[EZD] p2 p4 [ 118.331249][T15371] loop3: p1 size 1465778176 extends beyond EOD, truncated [ 118.339813][T15371] loop3: p2 start 65535 is beyond EOD, truncated [ 118.346199][T15371] loop3: p4 size 65536 extends beyond EOD, truncated [ 118.419303][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.428152][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.494804][T15388] loop3: detected capacity change from 0 to 512 [ 118.520670][T15388] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.822872][T15418] loop1: detected capacity change from 0 to 128 [ 118.833268][T15425] loop4: detected capacity change from 0 to 512 [ 118.840998][T15425] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.847886][T15425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1866: bg 0: block 248: padding at end of block bitmap is not set [ 118.862393][T15425] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1866: Failed to acquire dquot type 1 [ 118.874241][T15425] EXT4-fs (loop4): 1 truncate cleaned up [ 118.900805][T15418] syz.1.1864: attempt to access beyond end of device [ 118.900805][T15418] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 119.053397][T15448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1876'. [ 119.241490][T15460] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 119.250258][ T29] kauditd_printk_skb: 1640 callbacks suppressed [ 119.250275][ T29] audit: type=1326 audit(1731675151.499:23578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9d5db56e7 code=0x7ffc0000 [ 119.280418][ T29] audit: type=1326 audit(1731675151.499:23579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9d5d5a099 code=0x7ffc0000 [ 119.281294][T15460] team0: left promiscuous mode [ 119.303952][ T29] audit: type=1326 audit(1731675151.499:23580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff9d5dbe719 code=0x7ffc0000 [ 119.303983][ T29] audit: type=1326 audit(1731675151.499:23581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9d5db56e7 code=0x7ffc0000 [ 119.308731][T15460] team_slave_0: left promiscuous mode [ 119.332341][ T29] audit: type=1326 audit(1731675151.499:23582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9d5d5a099 code=0x7ffc0000 [ 119.355791][T15460] team_slave_1: left promiscuous mode [ 119.361113][ T29] audit: type=1326 audit(1731675151.499:23583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff9d5dbe719 code=0x7ffc0000 [ 119.361141][ T29] audit: type=1326 audit(1731675151.499:23584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9d5db56e7 code=0x7ffc0000 [ 119.387094][T15460] batman_adv: batadv0: Adding interface: team0 [ 119.390030][ T29] audit: type=1326 audit(1731675151.499:23585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9d5d5a099 code=0x7ffc0000 [ 119.413571][T15460] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.436919][ T29] audit: type=1326 audit(1731675151.499:23586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff9d5dbe719 code=0x7ffc0000 [ 119.436941][ T29] audit: type=1326 audit(1731675151.499:23587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15441 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9d5db56e7 code=0x7ffc0000 [ 119.443132][T15460] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 119.444145][T15461] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 119.550205][T15463] loop2: detected capacity change from 0 to 128 [ 119.556461][T15461] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1880'. [ 119.572129][T15461] team0: entered promiscuous mode [ 119.577176][T15461] team_slave_0: entered promiscuous mode [ 119.582998][T15461] team_slave_1: entered promiscuous mode [ 119.589696][T15461] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.596620][T15461] batman_adv: batadv0: Interface activated: team0 [ 119.603197][T15461] batman_adv: batadv0: Interface deactivated: team0 [ 119.609820][T15461] batman_adv: batadv0: Removing interface: team0 [ 119.648683][T15463] syz.2.1881: attempt to access beyond end of device [ 119.648683][T15463] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 119.958288][T15496] loop2: detected capacity change from 0 to 128 [ 119.999294][T15500] netlink: 'syz.4.1894': attribute type 10 has an invalid length. [ 120.007525][T15500] team0: left promiscuous mode [ 120.012317][T15500] team_slave_0: left promiscuous mode [ 120.017785][T15500] team_slave_1: left promiscuous mode [ 120.025200][T15500] batman_adv: batadv0: Adding interface: team0 [ 120.031433][T15500] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.056958][T15500] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.061466][T15501] loop1: detected capacity change from 0 to 8192 [ 120.068647][T15502] netlink: 'syz.4.1894': attribute type 10 has an invalid length. [ 120.080953][T15502] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1894'. [ 120.090029][T15502] team0: entered promiscuous mode [ 120.091142][ T87] kworker/u8:4: attempt to access beyond end of device [ 120.091142][ T87] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 120.095128][T15502] team_slave_0: entered promiscuous mode [ 120.114677][T15502] team_slave_1: entered promiscuous mode [ 120.121491][T15502] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.128346][T15502] batman_adv: batadv0: Interface activated: team0 [ 120.134912][T15502] batman_adv: batadv0: Interface deactivated: team0 [ 120.136150][T15501] loop1: p1[EZD] p2 p4 [ 120.141606][T15502] batman_adv: batadv0: Removing interface: team0 [ 120.145956][T15501] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 120.165582][T15501] loop1: p2 start 65535 is beyond EOD, truncated [ 120.172121][T15501] loop1: p4 size 65536 extends beyond EOD, truncated [ 120.418759][T15525] team0: left promiscuous mode [ 120.423716][T15525] team_slave_0: left promiscuous mode [ 120.429167][T15525] team_slave_1: left promiscuous mode [ 120.436570][T15525] batman_adv: batadv0: Adding interface: team0 [ 120.442718][T15525] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.467974][T15525] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.478000][T15526] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1904'. [ 120.487075][T15526] team0: entered promiscuous mode [ 120.492126][T15526] team_slave_0: entered promiscuous mode [ 120.498075][T15526] team_slave_1: entered promiscuous mode [ 120.504757][T15526] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.511829][T15526] batman_adv: batadv0: Interface activated: team0 [ 120.518461][T15526] batman_adv: batadv0: Interface deactivated: team0 [ 120.525080][T15526] batman_adv: batadv0: Removing interface: team0 [ 120.594698][T15538] loop3: detected capacity change from 0 to 512 [ 120.602177][T15538] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.610241][T15538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1909: bg 0: block 248: padding at end of block bitmap is not set [ 120.626397][T15538] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1909: Failed to acquire dquot type 1 [ 120.641262][T15538] EXT4-fs (loop3): 1 truncate cleaned up [ 120.713079][T15553] FAULT_INJECTION: forcing a failure. [ 120.713079][T15553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.726164][T15553] CPU: 0 UID: 0 PID: 15553 Comm: syz.3.1916 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 120.736984][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.747047][T15553] Call Trace: [ 120.750331][T15553] [ 120.753284][T15553] dump_stack_lvl+0xf2/0x150 [ 120.757893][T15553] dump_stack+0x15/0x20 [ 120.762049][T15553] should_fail_ex+0x223/0x230 [ 120.766762][T15553] should_fail+0xb/0x10 [ 120.770959][T15553] should_fail_usercopy+0x1a/0x20 [ 120.776171][T15553] _copy_from_iter+0xd5/0xd00 [ 120.780846][T15553] ? kmalloc_reserve+0x16e/0x190 [ 120.785852][T15553] ? __build_skb_around+0x196/0x1f0 [ 120.791118][T15553] ? __alloc_skb+0x21f/0x310 [ 120.795793][T15553] ? __virt_addr_valid+0x1ed/0x250 [ 120.800990][T15553] ? __check_object_size+0x364/0x520 [ 120.806298][T15553] netlink_sendmsg+0x460/0x6e0 [ 120.811081][T15553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.816365][T15553] __sock_sendmsg+0x140/0x180 [ 120.821057][T15553] ____sys_sendmsg+0x312/0x410 [ 120.825816][T15553] __sys_sendmsg+0x1d9/0x270 [ 120.830403][T15553] __x64_sys_sendmsg+0x46/0x50 [ 120.835175][T15553] x64_sys_call+0x2689/0x2d60 [ 120.839845][T15553] do_syscall_64+0xc9/0x1c0 [ 120.844341][T15553] ? clear_bhb_loop+0x55/0xb0 [ 120.849048][T15553] ? clear_bhb_loop+0x55/0xb0 [ 120.853771][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.859690][T15553] RIP: 0033:0x7fef5042e719 [ 120.864161][T15553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.883974][T15553] RSP: 002b:00007fef4f0a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.892380][T15553] RAX: ffffffffffffffda RBX: 00007fef505e5f80 RCX: 00007fef5042e719 [ 120.900399][T15553] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 120.908377][T15553] RBP: 00007fef4f0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.916388][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.924348][T15553] R13: 0000000000000000 R14: 00007fef505e5f80 R15: 00007fffb5eafc38 [ 120.932313][T15553] [ 120.955285][T15555] loop2: detected capacity change from 0 to 512 [ 120.971936][T15555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.005110][T15555] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.042474][T15569] loop1: detected capacity change from 0 to 128 [ 121.071271][ T50] kworker/u8:3: attempt to access beyond end of device [ 121.071271][ T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 121.118914][T15600] FAULT_INJECTION: forcing a failure. [ 121.118914][T15600] name failslab, interval 1, probability 0, space 0, times 0 [ 121.131589][T15600] CPU: 1 UID: 0 PID: 15600 Comm: syz.3.1926 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 121.142370][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.152433][T15600] Call Trace: [ 121.155729][T15600] [ 121.158666][T15600] dump_stack_lvl+0xf2/0x150 [ 121.163268][T15600] dump_stack+0x15/0x20 [ 121.167436][T15600] should_fail_ex+0x223/0x230 [ 121.172173][T15600] ? dst_alloc+0xc0/0x100 [ 121.176659][T15600] should_failslab+0x8f/0xb0 [ 121.181259][T15600] kmem_cache_alloc_noprof+0x4c/0x290 [ 121.186774][T15600] dst_alloc+0xc0/0x100 [ 121.190946][T15600] ? ip_rt_send_redirect+0x2a2/0x660 [ 121.196242][T15600] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 121.202234][T15600] ? __rcu_read_unlock+0x4e/0x70 [ 121.207261][T15600] ip_route_output_key_hash+0x7b/0xb0 [ 121.212681][T15600] tcp_v4_connect+0x3c4/0xad0 [ 121.217420][T15600] __inet_stream_connect+0x162/0x790 [ 121.222794][T15600] ? should_fail_ex+0xd7/0x230 [ 121.227594][T15600] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 121.233044][T15600] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 121.238600][T15600] tcp_sendmsg_fastopen+0x40e/0x4f0 [ 121.243812][T15600] tcp_sendmsg_locked+0x2513/0x2700 [ 121.249082][T15600] ? mntput+0x49/0x70 [ 121.253076][T15600] ? __rcu_read_unlock+0x4e/0x70 [ 121.258027][T15600] ? avc_has_perm_noaudit+0x1cc/0x210 [ 121.263467][T15600] ? avc_has_perm+0xd4/0x160 [ 121.268166][T15600] ? _raw_spin_unlock_bh+0x36/0x40 [ 121.273276][T15600] ? __pfx_tcp_sendmsg+0x10/0x10 [ 121.278204][T15600] tcp_sendmsg+0x30/0x50 [ 121.282526][T15600] inet_sendmsg+0x77/0xd0 [ 121.286906][T15600] __sock_sendmsg+0x102/0x180 [ 121.291610][T15600] __sys_sendto+0x1d6/0x260 [ 121.296119][T15600] __x64_sys_sendto+0x78/0x90 [ 121.300798][T15600] x64_sys_call+0x2959/0x2d60 [ 121.305470][T15600] do_syscall_64+0xc9/0x1c0 [ 121.310028][T15600] ? clear_bhb_loop+0x55/0xb0 [ 121.314724][T15600] ? clear_bhb_loop+0x55/0xb0 [ 121.319393][T15600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.325286][T15600] RIP: 0033:0x7fef5042e719 [ 121.329738][T15600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.349336][T15600] RSP: 002b:00007fef4f0a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 121.357741][T15600] RAX: ffffffffffffffda RBX: 00007fef505e5f80 RCX: 00007fef5042e719 [ 121.365787][T15600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 121.373757][T15600] RBP: 00007fef4f0a7090 R08: 0000000020000040 R09: 0000000000000010 [ 121.381714][T15600] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 121.389675][T15600] R13: 0000000000000000 R14: 00007fef505e5f80 R15: 00007fffb5eafc38 [ 121.397680][T15600] [ 121.425294][T15619] loop4: detected capacity change from 0 to 512 [ 121.441196][T15619] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.450081][T15619] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1930: bg 0: block 248: padding at end of block bitmap is not set [ 121.468227][T15611] loop1: detected capacity change from 0 to 8192 [ 121.486493][T15619] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1930: Failed to acquire dquot type 1 [ 121.507120][T15619] EXT4-fs (loop4): 1 truncate cleaned up [ 121.523756][T15611] loop1: p1[EZD] p2 p4 [ 121.528918][T15611] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 121.537375][T15611] loop1: p2 start 65535 is beyond EOD, truncated [ 121.543736][T15611] loop1: p4 size 65536 extends beyond EOD, truncated [ 121.670382][T15670] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1945'. [ 121.698548][T15677] loop2: detected capacity change from 0 to 512 [ 121.717976][T15677] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.725726][T15677] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1946: bg 0: block 248: padding at end of block bitmap is not set [ 121.742488][T15677] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1946: Failed to acquire dquot type 1 [ 121.754897][T15677] EXT4-fs (loop2): 1 truncate cleaned up [ 121.899946][T15697] loop2: detected capacity change from 0 to 8192 [ 121.951317][T15697] loop2: p1[EZD] p2 p4 [ 121.956038][T15697] loop2: p1 size 1465778176 extends beyond EOD, truncated [ 121.964552][T15697] loop2: p2 start 65535 is beyond EOD, truncated [ 121.970913][T15697] loop2: p4 size 65536 extends beyond EOD, truncated [ 121.980574][T15716] loop3: detected capacity change from 0 to 128 [ 122.038189][T15727] loop2: detected capacity change from 0 to 128 [ 122.066081][T15716] syz.3.1952: attempt to access beyond end of device [ 122.066081][T15716] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 122.151169][T15727] syz.2.1953: attempt to access beyond end of device [ 122.151169][T15727] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 122.282954][T15784] loop3: detected capacity change from 0 to 1024 [ 122.290023][T15784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.310926][T15784] EXT4-fs: Cannot change quota options when quota turned on [ 122.531888][T15801] loop2: detected capacity change from 0 to 512 [ 122.536511][T15820] loop1: detected capacity change from 0 to 128 [ 122.551327][T15801] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.561854][T15831] loop3: detected capacity change from 0 to 512 [ 122.569362][T15831] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.576879][T15831] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1968: bg 0: block 248: padding at end of block bitmap is not set [ 122.591447][T15831] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1968: Failed to acquire dquot type 1 [ 122.605320][T15831] EXT4-fs (loop3): 1 truncate cleaned up [ 122.636887][T15836] loop2: detected capacity change from 0 to 512 [ 122.644780][T15836] EXT4-fs: Ignoring removed oldalloc option [ 122.645699][T15839] loop1: detected capacity change from 0 to 512 [ 122.652446][T15836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 122.667788][T15836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 122.675708][T15836] System zones: 1-12 [ 122.677891][T15839] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.679926][T15836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.687018][T15839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1969: bg 0: block 248: padding at end of block bitmap is not set [ 122.707352][T15839] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1969: Failed to acquire dquot type 1 [ 122.719276][T15836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1970: invalid indirect mapped block 12 (level 1) [ 122.720777][T15839] EXT4-fs (loop1): 1 truncate cleaned up [ 122.739545][T15836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1970: invalid indirect mapped block 2 (level 2) [ 122.756788][T15836] EXT4-fs (loop2): 1 truncate cleaned up [ 122.765509][T15848] validate_nla: 2 callbacks suppressed [ 122.765538][T15848] netlink: 'syz.3.1975': attribute type 10 has an invalid length. [ 122.770873][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 122.792937][T15848] team0: left promiscuous mode [ 122.793030][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 122.797758][T15848] team_slave_0: left promiscuous mode [ 122.813873][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 122.815746][T15848] team_slave_1: left promiscuous mode [ 122.830516][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 122.840236][T15848] batman_adv: batadv0: Adding interface: team0 [ 122.849661][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 122.853677][T15848] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.853700][T15848] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 122.868702][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 122.892911][T15851] netlink: 'syz.3.1975': attribute type 10 has an invalid length. [ 122.906366][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 122.915056][T15851] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1975'. [ 122.924109][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 122.940278][T15851] team0: entered promiscuous mode [ 122.949276][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 122.958160][T15851] team_slave_0: entered promiscuous mode [ 122.958277][T15851] team_slave_1: entered promiscuous mode [ 122.963674][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 122.978209][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.991097][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 123.001402][T15851] batman_adv: batadv0: Interface activated: team0 [ 123.009767][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 123.021484][T15851] batman_adv: batadv0: Interface deactivated: team0 [ 123.031956][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 123.040488][T15851] batman_adv: batadv0: Removing interface: team0 [ 123.048303][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 123.082125][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 123.106304][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 123.119408][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 123.133262][T15860] FAULT_INJECTION: forcing a failure. [ 123.133262][T15860] name failslab, interval 1, probability 0, space 0, times 0 [ 123.134710][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 123.145944][T15860] CPU: 1 UID: 0 PID: 15860 Comm: syz.3.1978 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 123.169194][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.179252][T15860] Call Trace: [ 123.182531][T15860] [ 123.185497][T15860] dump_stack_lvl+0xf2/0x150 [ 123.190102][T15860] dump_stack+0x15/0x20 [ 123.194350][T15860] should_fail_ex+0x223/0x230 [ 123.199054][T15860] ? nd_alloc_stack+0x4e/0x90 [ 123.204573][T15860] should_failslab+0x8f/0xb0 [ 123.209248][T15860] __kmalloc_cache_noprof+0x4b/0x2a0 [ 123.214535][T15860] nd_alloc_stack+0x4e/0x90 [ 123.219089][T15860] pick_link+0x745/0x7e0 [ 123.223341][T15860] ? selinux_inode_permission+0x341/0x410 [ 123.229060][T15860] step_into+0x725/0x810 [ 123.233360][T15860] link_path_walk+0x54c/0x820 [ 123.238029][T15860] path_lookupat+0x72/0x2b0 [ 123.242617][T15860] filename_lookup+0x127/0x300 [ 123.247380][T15860] user_path_at+0x3c/0x110 [ 123.251910][T15860] __se_sys_mount+0x248/0x2d0 [ 123.256591][T15860] ? fput+0x14e/0x190 [ 123.260574][T15860] __x64_sys_mount+0x67/0x80 [ 123.265185][T15860] x64_sys_call+0x203e/0x2d60 [ 123.269857][T15860] do_syscall_64+0xc9/0x1c0 [ 123.274484][T15860] ? clear_bhb_loop+0x55/0xb0 [ 123.279158][T15860] ? clear_bhb_loop+0x55/0xb0 [ 123.283823][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.289751][T15860] RIP: 0033:0x7fef5042e719 [ 123.294211][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.313832][T15860] RSP: 002b:00007fef4f0a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.322241][T15860] RAX: ffffffffffffffda RBX: 00007fef505e5f80 RCX: 00007fef5042e719 [ 123.330214][T15860] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 123.338176][T15860] RBP: 00007fef4f0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.346169][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.354127][T15860] R13: 0000000000000000 R14: 00007fef505e5f80 R15: 00007fffb5eafc38 [ 123.362129][T15860] [ 123.367658][T15836] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.1970: lblock 0 mapped to illegal pblock 5 (length 1) [ 123.382043][T15836] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1970: error -117 reading directory block [ 123.397327][T15836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.412347][T15836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.458999][T15864] loop3: detected capacity change from 0 to 8192 [ 123.503278][T15864] loop3: p1[EZD] p2 p4 [ 123.513732][T15864] loop3: p1 size 1465778176 extends beyond EOD, truncated [ 123.522449][T15864] loop3: p2 start 65535 is beyond EOD, truncated [ 123.528822][T15864] loop3: p4 size 65536 extends beyond EOD, truncated [ 123.566723][T15879] netlink: 'syz.0.1987': attribute type 10 has an invalid length. [ 123.574824][T15879] team0: left promiscuous mode [ 123.579641][T15879] team_slave_0: left promiscuous mode [ 123.585120][T15879] team_slave_1: left promiscuous mode [ 123.594693][T15879] batman_adv: batadv0: Adding interface: team0 [ 123.600938][T15879] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.626184][T15879] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 123.644747][T15889] netlink: 'syz.0.1987': attribute type 10 has an invalid length. [ 123.652595][T15889] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1987'. [ 123.670444][T15889] team0: entered promiscuous mode [ 123.675557][T15889] team_slave_0: entered promiscuous mode [ 123.681288][T15889] team_slave_1: entered promiscuous mode [ 123.702475][T15889] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.715789][T15889] batman_adv: batadv0: Interface activated: team0 [ 123.722344][T15889] batman_adv: batadv0: Interface deactivated: team0 [ 123.729011][T15889] batman_adv: batadv0: Removing interface: team0 [ 123.767860][T15903] loop1: detected capacity change from 0 to 128 [ 123.913991][T15958] FAULT_INJECTION: forcing a failure. [ 123.913991][T15958] name failslab, interval 1, probability 0, space 0, times 0 [ 123.926655][T15958] CPU: 1 UID: 0 PID: 15958 Comm: syz.3.2000 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 123.937500][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.947570][T15958] Call Trace: [ 123.950855][T15958] [ 123.953791][T15958] dump_stack_lvl+0xf2/0x150 [ 123.958389][T15958] dump_stack+0x15/0x20 [ 123.962555][T15958] should_fail_ex+0x223/0x230 [ 123.967362][T15958] ? __d_alloc+0x3d/0x340 [ 123.971774][T15958] should_failslab+0x8f/0xb0 [ 123.976386][T15958] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 123.982207][T15958] __d_alloc+0x3d/0x340 [ 123.986386][T15958] ? shmem_get_inode+0x481/0x710 [ 123.991348][T15958] d_alloc_pseudo+0x1e/0x80 [ 123.995863][T15958] alloc_file_pseudo+0x70/0x140 [ 124.000742][T15958] __shmem_file_setup+0x1bb/0x1f0 [ 124.005817][T15958] shmem_file_setup+0x3b/0x50 [ 124.010588][T15958] __se_sys_memfd_create+0x31d/0x5c0 [ 124.016045][T15958] __x64_sys_memfd_create+0x31/0x40 [ 124.021339][T15958] x64_sys_call+0x2891/0x2d60 [ 124.026048][T15958] do_syscall_64+0xc9/0x1c0 [ 124.030677][T15958] ? clear_bhb_loop+0x55/0xb0 [ 124.035362][T15958] ? clear_bhb_loop+0x55/0xb0 [ 124.040048][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.046037][T15958] RIP: 0033:0x7fef5042e719 [ 124.050497][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.070113][T15958] RSP: 002b:00007fef4f0a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 124.078568][T15958] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007fef5042e719 [ 124.086690][T15958] RDX: 00007fef4f0a6ef0 RSI: 0000000000000000 RDI: 00007fef504a1fca [ 124.094670][T15958] RBP: 00000000200005c0 R08: 00007fef4f0a6bb7 R09: 00007fef4f0a6e40 [ 124.102652][T15958] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000000 [ 124.110637][T15958] R13: 00007fef4f0a6ef0 R14: 00007fef4f0a6eb0 R15: 00000000200001c0 [ 124.118635][T15958] [ 124.180726][T15952] loop1: detected capacity change from 0 to 8192 [ 124.217332][T15952] loop1: p1[EZD] p2 p4 [ 124.221721][T15952] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 124.237863][T15952] loop1: p2 start 65535 is beyond EOD, truncated [ 124.244279][T15952] loop1: p4 size 65536 extends beyond EOD, truncated [ 124.415155][T16040] loop2: detected capacity change from 0 to 512 [ 124.432194][T16040] EXT4-fs: Ignoring removed oldalloc option [ 124.438095][T16033] loop3: detected capacity change from 0 to 128 [ 124.440135][T16040] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.462229][T16040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 124.470220][T16040] System zones: 1-12 [ 124.474311][T16040] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.483875][T16040] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2011: invalid indirect mapped block 12 (level 1) [ 124.502720][T16040] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2011: invalid indirect mapped block 2 (level 2) [ 124.516590][T16040] EXT4-fs (loop2): 1 truncate cleaned up [ 124.524583][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.538959][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.552120][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.567582][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.594061][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.609701][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.622937][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.637447][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.650598][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.670066][T16074] loop3: detected capacity change from 0 to 8192 [ 124.676520][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.689578][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.703740][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.717222][T16074] loop3: p1[EZD] p2 p4 [ 124.722442][T16074] loop3: p1 size 1465778176 extends beyond EOD, truncated [ 124.729957][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.745201][T16074] loop3: p2 start 65535 is beyond EOD, truncated [ 124.751651][T16074] loop3: p4 size 65536 extends beyond EOD, truncated [ 124.759845][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.776113][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.798159][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.812186][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.830841][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.844080][T16040] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2011: lblock 0 mapped to illegal pblock 5 (length 1) [ 124.867770][T16040] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2011: error -117 reading directory block [ 124.885475][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.894307][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.028333][ T29] kauditd_printk_skb: 973 callbacks suppressed [ 125.028359][ T29] audit: type=1326 audit(1731675156.896:24551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.058350][ T29] audit: type=1326 audit(1731675156.896:24552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.081971][ T29] audit: type=1326 audit(1731675156.896:24553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.105521][ T29] audit: type=1326 audit(1731675156.906:24554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.129137][ T29] audit: type=1326 audit(1731675156.906:24555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.152785][ T29] audit: type=1326 audit(1731675156.906:24556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.176320][ T29] audit: type=1326 audit(1731675156.906:24557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.199852][ T29] audit: type=1326 audit(1731675156.906:24558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.223836][ T29] audit: type=1326 audit(1731675156.906:24559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.247406][ T29] audit: type=1326 audit(1731675156.906:24560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.3.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 125.450142][T16136] netlink: 'syz.0.2025': attribute type 10 has an invalid length. [ 125.459094][T16136] team0: left promiscuous mode [ 125.463871][T16136] team_slave_0: left promiscuous mode [ 125.469376][T16136] team_slave_1: left promiscuous mode [ 125.476431][T16136] batman_adv: batadv0: Adding interface: team0 [ 125.482693][T16136] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.507943][T16136] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.509696][T16145] loop4: detected capacity change from 0 to 512 [ 125.525535][T16146] netlink: 'syz.0.2025': attribute type 10 has an invalid length. [ 125.533508][T16146] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2025'. [ 125.543071][T16146] team0: entered promiscuous mode [ 125.548121][T16146] team_slave_0: entered promiscuous mode [ 125.551453][T16145] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.553941][T16146] team_slave_1: entered promiscuous mode [ 125.564982][T16145] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2028: bg 0: block 248: padding at end of block bitmap is not set [ 125.582547][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.589617][T16146] batman_adv: batadv0: Interface activated: team0 [ 125.596089][T16146] batman_adv: batadv0: Interface deactivated: team0 [ 125.599597][T16145] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2028: Failed to acquire dquot type 1 [ 125.602823][T16146] batman_adv: batadv0: Removing interface: team0 [ 125.614978][T16145] EXT4-fs (loop4): 1 truncate cleaned up [ 125.786799][T16193] loop3: detected capacity change from 0 to 512 [ 125.794274][T16193] EXT4-fs: Ignoring removed oldalloc option [ 125.800733][T16193] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 125.811732][T16193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 125.819691][T16193] System zones: 1-12 [ 125.828400][T16193] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.838530][T16193] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2040: invalid indirect mapped block 12 (level 1) [ 125.860343][T16193] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2040: invalid indirect mapped block 2 (level 2) [ 125.874033][T16205] FAULT_INJECTION: forcing a failure. [ 125.874033][T16205] name failslab, interval 1, probability 0, space 0, times 0 [ 125.875123][T16193] EXT4-fs (loop3): 1 truncate cleaned up [ 125.886679][T16205] CPU: 0 UID: 0 PID: 16205 Comm: syz.0.2042 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 125.896515][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 125.903016][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.903031][T16205] Call Trace: [ 125.903037][T16205] [ 125.918191][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 125.927016][T16205] dump_stack_lvl+0xf2/0x150 [ 125.933315][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 125.933493][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 125.945809][T16205] dump_stack+0x15/0x20 [ 125.945836][T16205] should_fail_ex+0x223/0x230 [ 125.945865][T16205] ? skb_clone+0x154/0x1f0 [ 125.954276][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 125.964332][T16205] should_failslab+0x8f/0xb0 [ 125.964366][T16205] kmem_cache_alloc_noprof+0x4c/0x290 [ 125.978118][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 125.981002][T16205] skb_clone+0x154/0x1f0 [ 125.988254][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 125.990095][T16205] __netlink_deliver_tap+0x2bd/0x4c0 [ 126.005282][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.008544][T16205] __netlink_sendskb+0xda/0xe0 [ 126.015755][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 126.026371][T16205] netlink_dump+0x673/0x760 [ 126.026400][T16205] __netlink_dump_start+0x433/0x520 [ 126.026443][T16205] nf_tables_getchain+0x11c/0x480 [ 126.026468][T16205] ? __pfx_nf_tables_dump_chains+0x10/0x10 [ 126.031938][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.044583][T16205] ? __pfx_nf_tables_getchain+0x10/0x10 [ 126.044616][T16205] nfnetlink_rcv_msg+0x3c5/0x570 [ 126.044652][T16205] netlink_rcv_skb+0x12c/0x230 [ 126.053286][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 126.062401][T16205] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 126.062453][T16205] nfnetlink_rcv+0x16c/0x15c0 [ 126.068698][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.081056][T16205] ? kmem_cache_free+0xdc/0x2d0 [ 126.081091][T16205] ? nlmon_xmit+0x51/0x60 [ 126.081107][T16205] ? __kfree_skb+0x102/0x150 [ 126.089304][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 126.090776][T16205] ? consume_skb+0x49/0x160 [ 126.095917][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.101640][T16205] ? nlmon_xmit+0x51/0x60 [ 126.101682][T16205] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 126.117445][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 126.119707][T16205] ? __dev_queue_xmit+0xb4c/0x2040 [ 126.124974][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.129368][T16205] ? ref_tracker_free+0x3a5/0x410 [ 126.146333][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 126.148677][T16205] ? __dev_queue_xmit+0x161/0x2040 [ 126.153536][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.165802][T16205] ? ref_tracker_alloc+0x1f5/0x2f0 [ 126.165877][T16205] ? __netlink_deliver_tap+0x495/0x4c0 [ 126.174110][T16193] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2040: lblock 0 mapped to illegal pblock 5 (length 1) [ 126.175023][T16205] netlink_unicast+0x599/0x670 [ 126.179735][T16193] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2040: error -117 reading directory block [ 126.193507][T16205] netlink_sendmsg+0x5cc/0x6e0 [ 126.193540][T16205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.193559][T16205] __sock_sendmsg+0x140/0x180 [ 126.193592][T16205] ____sys_sendmsg+0x312/0x410 [ 126.203322][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.210554][T16205] __sys_sendmsg+0x1d9/0x270 [ 126.210591][T16205] __x64_sys_sendmsg+0x46/0x50 [ 126.210610][T16205] x64_sys_call+0x2689/0x2d60 [ 126.215093][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.220194][T16205] do_syscall_64+0xc9/0x1c0 [ 126.384624][T16205] ? clear_bhb_loop+0x55/0xb0 [ 126.389331][T16205] ? clear_bhb_loop+0x55/0xb0 [ 126.394019][T16205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.400036][T16205] RIP: 0033:0x7f03273ae719 [ 126.404499][T16205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.424202][T16205] RSP: 002b:00007f0326027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.432632][T16205] RAX: ffffffffffffffda RBX: 00007f0327565f80 RCX: 00007f03273ae719 [ 126.440614][T16205] RDX: 0000000000040040 RSI: 00000000200003c0 RDI: 0000000000000003 [ 126.448595][T16205] RBP: 00007f0326027090 R08: 0000000000000000 R09: 0000000000000000 [ 126.456584][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.464617][T16205] R13: 0000000000000000 R14: 00007f0327565f80 R15: 00007fff6e1c3298 [ 126.472679][T16205] [ 126.534397][T16253] FAULT_INJECTION: forcing a failure. [ 126.534397][T16253] name failslab, interval 1, probability 0, space 0, times 0 [ 126.547131][T16253] CPU: 0 UID: 0 PID: 16253 Comm: syz.1.2046 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 126.557908][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.557920][T16253] Call Trace: [ 126.557926][T16253] [ 126.557932][T16253] dump_stack_lvl+0xf2/0x150 [ 126.557960][T16253] dump_stack+0x15/0x20 [ 126.558002][T16253] should_fail_ex+0x223/0x230 [ 126.558031][T16253] ? skb_clone+0x154/0x1f0 [ 126.592098][T16253] should_failslab+0x8f/0xb0 [ 126.596715][T16253] kmem_cache_alloc_noprof+0x4c/0x290 [ 126.602129][T16253] skb_clone+0x154/0x1f0 [ 126.606376][T16253] __netlink_deliver_tap+0x2bd/0x4c0 [ 126.611793][T16253] netlink_unicast+0x64a/0x670 [ 126.616631][T16253] netlink_sendmsg+0x5cc/0x6e0 [ 126.621441][T16253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.626736][T16253] __sock_sendmsg+0x140/0x180 [ 126.631483][T16253] ____sys_sendmsg+0x312/0x410 [ 126.636302][T16253] __sys_sendmmsg+0x259/0x500 [ 126.640998][T16253] __x64_sys_sendmmsg+0x57/0x70 [ 126.645939][T16253] x64_sys_call+0xa49/0x2d60 [ 126.650565][T16253] do_syscall_64+0xc9/0x1c0 [ 126.655069][T16253] ? clear_bhb_loop+0x55/0xb0 [ 126.659749][T16253] ? clear_bhb_loop+0x55/0xb0 [ 126.664433][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.670339][T16253] RIP: 0033:0x7ff9d5dbe719 [ 126.674749][T16253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.694386][T16253] RSP: 002b:00007ff9d4a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.702812][T16253] RAX: ffffffffffffffda RBX: 00007ff9d5f75f80 RCX: 00007ff9d5dbe719 [ 126.710866][T16253] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 126.718861][T16253] RBP: 00007ff9d4a37090 R08: 0000000000000000 R09: 0000000000000000 [ 126.726839][T16253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.734911][T16253] R13: 0000000000000000 R14: 00007ff9d5f75f80 R15: 00007ffed3943098 [ 126.742984][T16253] [ 126.821768][T16306] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2054'. [ 126.828825][T16300] loop1: detected capacity change from 0 to 512 [ 126.830837][T16306] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2054'. [ 126.851797][T16300] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.859887][T16300] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2053: bg 0: block 248: padding at end of block bitmap is not set [ 126.876036][T16300] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2053: Failed to acquire dquot type 1 [ 126.888890][T16300] EXT4-fs (loop1): 1 truncate cleaned up [ 126.940119][T16301] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2054'. [ 126.949243][T16301] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2054'. [ 127.051841][T16336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.061978][T16336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.318075][T16397] loop4: detected capacity change from 0 to 512 [ 127.336588][T16397] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.344180][T16397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2074: bg 0: block 248: padding at end of block bitmap is not set [ 127.358984][T16397] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2074: Failed to acquire dquot type 1 [ 127.371306][T16397] EXT4-fs (loop4): 1 truncate cleaned up [ 127.971964][T16427] loop3: detected capacity change from 0 to 128 [ 128.055695][T16427] syz.3.2081: attempt to access beyond end of device [ 128.055695][T16427] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 128.103584][T16441] loop2: detected capacity change from 0 to 512 [ 128.110117][T16443] loop3: detected capacity change from 0 to 128 [ 128.117304][T16441] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.124604][T16441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2086: bg 0: block 248: padding at end of block bitmap is not set [ 128.139740][T16441] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2086: Failed to acquire dquot type 1 [ 128.151707][T16441] EXT4-fs (loop2): 1 truncate cleaned up [ 128.174889][T16446] loop2: detected capacity change from 0 to 512 [ 128.181771][T16446] EXT4-fs: Ignoring removed oldalloc option [ 128.189189][T16446] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 128.210420][T16446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 128.218842][T16446] System zones: 1-12 [ 128.223246][T16446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.231194][T16446] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2088: invalid indirect mapped block 12 (level 1) [ 128.245878][ T11] kworker/u8:0: attempt to access beyond end of device [ 128.245878][ T11] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 128.247620][T16446] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2088: invalid indirect mapped block 2 (level 2) [ 128.273431][T16446] EXT4-fs (loop2): 1 truncate cleaned up [ 128.283074][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.297324][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.311925][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.329617][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.346843][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.361050][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.374665][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.389749][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.402924][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.417884][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.431623][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.446234][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.461182][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.484848][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.498872][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.513644][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.549206][T16493] loop4: detected capacity change from 0 to 2048 [ 128.555871][T16501] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.571668][T16501] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.589438][T16446] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.2088: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.605252][T16446] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2088: error -117 reading directory block [ 128.618179][T16493] loop4: p3 < > p4 < > [ 128.622373][T16493] loop4: partition table partially beyond EOD, truncated [ 128.629633][T16493] loop4: p3 start 4284289 is beyond EOD, truncated [ 128.640150][T16446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.648869][T16446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.665256][T16515] FAULT_INJECTION: forcing a failure. [ 128.665256][T16515] name failslab, interval 1, probability 0, space 0, times 0 [ 128.677935][T16515] CPU: 1 UID: 0 PID: 16515 Comm: syz.0.2097 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 128.688722][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.698838][T16515] Call Trace: [ 128.702122][T16515] [ 128.705051][T16515] dump_stack_lvl+0xf2/0x150 [ 128.709737][T16515] dump_stack+0x15/0x20 [ 128.713909][T16515] should_fail_ex+0x223/0x230 [ 128.718659][T16515] ? vm_area_dup+0x98/0x130 [ 128.723315][T16515] should_failslab+0x8f/0xb0 [ 128.727990][T16515] kmem_cache_alloc_noprof+0x4c/0x290 [ 128.733380][T16515] vm_area_dup+0x98/0x130 [ 128.737717][T16515] __split_vma+0xf7/0x6a0 [ 128.742050][T16515] ? walk_pgd_range+0xe6d/0xec0 [ 128.746968][T16515] vma_modify+0x2cb/0xcd0 [ 128.751481][T16515] vma_modify_policy+0xeb/0x120 [ 128.756391][T16515] mbind_range+0x1d8/0x490 [ 128.760833][T16515] __se_sys_mbind+0x915/0x1160 [ 128.765617][T16515] __x64_sys_mbind+0x78/0x90 [ 128.770220][T16515] x64_sys_call+0x2b4d/0x2d60 [ 128.774947][T16515] do_syscall_64+0xc9/0x1c0 [ 128.779524][T16515] ? clear_bhb_loop+0x55/0xb0 [ 128.784269][T16515] ? clear_bhb_loop+0x55/0xb0 [ 128.788953][T16515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.794869][T16515] RIP: 0033:0x7f03273ae719 [ 128.799319][T16515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.818934][T16515] RSP: 002b:00007f0326027038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 128.827379][T16515] RAX: ffffffffffffffda RBX: 00007f0327565f80 RCX: 00007f03273ae719 [ 128.835383][T16515] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000000020000000 [ 128.843420][T16515] RBP: 00007f0326027090 R08: 0000000000000000 R09: 0000000000000002 [ 128.851396][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.859399][T16515] R13: 0000000000000000 R14: 00007f0327565f80 R15: 00007fff6e1c3298 [ 128.867423][T16515] [ 128.931476][T16562] loop4: detected capacity change from 0 to 512 [ 128.950806][T16562] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.958455][T16562] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2100: bg 0: block 248: padding at end of block bitmap is not set [ 128.973930][T16562] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2100: Failed to acquire dquot type 1 [ 128.986109][T16562] EXT4-fs (loop4): 1 truncate cleaned up [ 129.214410][T16608] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 129.233451][T16608] team0: left promiscuous mode [ 129.238311][T16608] team_slave_0: left promiscuous mode [ 129.243833][T16608] team_slave_1: left promiscuous mode [ 129.280970][T16608] batman_adv: batadv0: Adding interface: team0 [ 129.287338][T16608] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.312587][T16608] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 129.342883][T16623] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 129.350779][T16623] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2108'. [ 129.367567][T16623] team0: entered promiscuous mode [ 129.372665][T16623] team_slave_0: entered promiscuous mode [ 129.378419][T16623] team_slave_1: entered promiscuous mode [ 129.401574][T16623] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.431517][T16623] batman_adv: batadv0: Interface activated: team0 [ 129.438093][T16623] batman_adv: batadv0: Interface deactivated: team0 [ 129.444726][T16623] batman_adv: batadv0: Removing interface: team0 [ 129.558852][T16668] loop3: detected capacity change from 0 to 512 [ 129.566448][T16668] EXT4-fs: Ignoring removed oldalloc option [ 129.572685][T16668] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 129.585345][T16668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 129.598766][T16668] System zones: 1-12 [ 129.602851][T16668] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.610835][T16668] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2123: invalid indirect mapped block 12 (level 1) [ 129.633449][T16668] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2123: invalid indirect mapped block 2 (level 2) [ 129.647979][T16668] EXT4-fs (loop3): 1 truncate cleaned up [ 129.655122][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.661057][T16676] loop2: detected capacity change from 0 to 128 [ 129.669405][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.690544][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.704754][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.707887][ T11] kworker/u8:0: attempt to access beyond end of device [ 129.707887][ T11] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 129.718546][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.750374][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.766847][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.770262][T16685] loop2: detected capacity change from 0 to 512 [ 129.785543][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.800531][T16685] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.800872][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.807488][T16685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2128: bg 0: block 248: padding at end of block bitmap is not set [ 129.835610][T16685] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2128: Failed to acquire dquot type 1 [ 129.847352][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.860166][T16693] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.861880][T16685] EXT4-fs (loop2): 1 truncate cleaned up [ 129.879085][T16693] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.900786][T16697] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 129.901956][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.923123][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.935985][T16697] team0: left promiscuous mode [ 129.940915][T16697] team_slave_0: left promiscuous mode [ 129.943859][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.946460][T16697] team_slave_1: left promiscuous mode [ 129.961952][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 129.973897][T16697] batman_adv: batadv0: Adding interface: team0 [ 129.983639][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 129.984438][T16697] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.999675][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 130.023412][T16697] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 130.039933][T16668] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2123: lblock 0 mapped to illegal pblock 5 (length 1) [ 130.059933][T16700] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 130.067826][T16700] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2134'. [ 130.069463][T16668] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2123: error -117 reading directory block [ 130.086278][T16700] team0: entered promiscuous mode [ 130.094327][T16700] team_slave_0: entered promiscuous mode [ 130.098779][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.100028][T16700] team_slave_1: entered promiscuous mode [ 130.102660][T16700] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.109036][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.123263][T16700] batman_adv: batadv0: Interface activated: team0 [ 130.134902][T16700] batman_adv: batadv0: Interface deactivated: team0 [ 130.141587][T16700] batman_adv: batadv0: Removing interface: team0 [ 130.282704][T16723] loop4: detected capacity change from 0 to 512 [ 130.291022][T16723] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.297748][T16723] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2145: bg 0: block 248: padding at end of block bitmap is not set [ 130.301512][T16725] loop2: detected capacity change from 0 to 128 [ 130.312813][T16723] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2145: Failed to acquire dquot type 1 [ 130.347525][T16723] EXT4-fs (loop4): 1 truncate cleaned up [ 130.357978][T16725] syz.2.2147: attempt to access beyond end of device [ 130.357978][T16725] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 130.376018][T16723] EXT4-fs mount: 47 callbacks suppressed [ 130.376031][T16723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.424744][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.456979][ T29] kauditd_printk_skb: 1110 callbacks suppressed [ 130.456992][ T29] audit: type=1400 audit(1731675161.976:25657): avc: denied { setcheckreqprot } for pid=16735 comm="syz.2.2149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 130.532420][ T29] audit: type=1326 audit(1731675162.041:25658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.570171][ T29] audit: type=1326 audit(1731675162.079:25659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.593960][ T29] audit: type=1326 audit(1731675162.079:25660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.617657][ T29] audit: type=1326 audit(1731675162.079:25661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.641516][ T29] audit: type=1326 audit(1731675162.079:25662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.665260][ T29] audit: type=1326 audit(1731675162.079:25663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.688957][ T29] audit: type=1326 audit(1731675162.079:25664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.712805][ T29] audit: type=1326 audit(1731675162.079:25665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.736444][ T29] audit: type=1326 audit(1731675162.079:25666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3baaae719 code=0x7ffc0000 [ 130.767419][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 130.779936][T16783] loop1: detected capacity change from 0 to 128 [ 130.826885][T16771] syz.1.2159: attempt to access beyond end of device [ 130.826885][T16771] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 131.015512][T16818] netlink: 'syz.1.2168': attribute type 10 has an invalid length. [ 131.038002][T16818] team0: left promiscuous mode [ 131.042806][T16818] team_slave_0: left promiscuous mode [ 131.048237][T16818] team_slave_1: left promiscuous mode [ 131.064301][T16818] batman_adv: batadv0: Adding interface: team0 [ 131.070504][T16818] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.095752][T16818] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 131.118245][T16831] netlink: 'syz.1.2168': attribute type 10 has an invalid length. [ 131.126116][T16831] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2168'. [ 131.146880][T16831] team0: entered promiscuous mode [ 131.151987][T16831] team_slave_0: entered promiscuous mode [ 131.157763][T16831] team_slave_1: entered promiscuous mode [ 131.167500][T16831] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.174649][T16831] batman_adv: batadv0: Interface activated: team0 [ 131.181273][T16831] batman_adv: batadv0: Interface deactivated: team0 [ 131.187959][T16831] batman_adv: batadv0: Removing interface: team0 [ 131.252649][T16849] loop2: detected capacity change from 0 to 128 [ 131.288597][T16849] syz.2.2173: attempt to access beyond end of device [ 131.288597][T16849] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 131.309632][T16861] loop1: detected capacity change from 0 to 2048 [ 131.333316][T16866] loop2: detected capacity change from 0 to 1024 [ 131.340415][T16866] ext4: Bad value for 'max_dir_size_kb' [ 131.397642][T16874] loop3: detected capacity change from 0 to 512 [ 131.405178][T16861] loop1: p3 < > p4 < > [ 131.409452][T16861] loop1: partition table partially beyond EOD, truncated [ 131.417523][T16861] loop1: p3 start 4284289 is beyond EOD, truncated [ 131.433649][T16874] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.450286][T16874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2178: bg 0: block 248: padding at end of block bitmap is not set [ 131.464927][T16874] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.2178: Failed to acquire dquot type 1 [ 131.476708][T16874] EXT4-fs (loop3): 1 truncate cleaned up [ 131.482975][T16874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.522997][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.568696][T16890] loop2: detected capacity change from 0 to 512 [ 131.629824][T16890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.673162][T16890] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.707759][T16911] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 131.710961][T16893] loop1: detected capacity change from 0 to 8192 [ 131.726988][T16911] team0: left promiscuous mode [ 131.731807][T16911] team_slave_0: left promiscuous mode [ 131.737457][T16911] team_slave_1: left promiscuous mode [ 131.744891][T16911] batman_adv: batadv0: Adding interface: team0 [ 131.751053][T16911] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.776197][T16911] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 131.787405][T16893] loop1: p1[EZD] p2 p4 [ 131.791893][T16920] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 131.799732][T16920] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2184'. [ 131.810393][T16893] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 131.830269][T16893] loop1: p2 start 65535 is beyond EOD, truncated [ 131.836639][T16893] loop1: p4 size 65536 extends beyond EOD, truncated [ 131.846682][T16920] team0: entered promiscuous mode [ 131.851778][T16920] team_slave_0: entered promiscuous mode [ 131.857615][T16920] team_slave_1: entered promiscuous mode [ 131.892492][T16920] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.907736][T16920] batman_adv: batadv0: Interface activated: team0 [ 131.914312][T16920] batman_adv: batadv0: Interface deactivated: team0 [ 131.921094][T16920] batman_adv: batadv0: Removing interface: team0 [ 132.086978][T16942] loop4: detected capacity change from 0 to 2048 [ 132.102856][T16947] loop1: detected capacity change from 0 to 512 [ 132.105564][T16942] EXT4-fs: Ignoring removed nobh option [ 132.126800][T16942] ext4: Unknown parameter 'subj_user' [ 132.136644][T16947] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.167506][T16947] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2190: bg 0: block 248: padding at end of block bitmap is not set [ 132.183029][T16947] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2190: Failed to acquire dquot type 1 [ 132.195378][T16947] EXT4-fs (loop1): 1 truncate cleaned up [ 132.215191][T16947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.282576][T16962] netlink: 'syz.4.2193': attribute type 10 has an invalid length. [ 132.296579][T16962] team0: left promiscuous mode [ 132.301413][T16962] team_slave_0: left promiscuous mode [ 132.306862][T16962] team_slave_1: left promiscuous mode [ 132.312908][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.321634][T16962] batman_adv: batadv0: Adding interface: team0 [ 132.328033][T16962] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.353245][T16962] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.384813][T16970] netlink: 'syz.4.2193': attribute type 10 has an invalid length. [ 132.392719][T16970] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2193'. [ 132.413969][T16970] team0: entered promiscuous mode [ 132.419135][T16970] team_slave_0: entered promiscuous mode [ 132.424872][T16970] team_slave_1: entered promiscuous mode [ 132.442764][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.454445][T16970] batman_adv: batadv0: Interface activated: team0 [ 132.460952][T16970] batman_adv: batadv0: Interface deactivated: team0 [ 132.467618][T16970] batman_adv: batadv0: Removing interface: team0 [ 132.542746][T16990] loop4: detected capacity change from 0 to 128 [ 132.597355][T16990] syz.4.2198: attempt to access beyond end of device [ 132.597355][T16990] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 132.613625][T16996] loop1: detected capacity change from 0 to 8192 [ 132.652658][T16996] loop1: p1[EZD] p2 p4 [ 132.659464][T16996] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 132.672883][T16996] loop1: p2 start 65535 is beyond EOD, truncated [ 132.679402][T16996] loop1: p4 size 65536 extends beyond EOD, truncated [ 132.687609][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.736554][T17023] loop4: detected capacity change from 0 to 512 [ 132.743099][T17023] EXT4-fs: Ignoring removed oldalloc option [ 132.749363][T17023] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 132.760498][T17023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 132.768475][T17023] System zones: 1-12 [ 132.772724][T17023] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.779385][T17023] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2204: invalid indirect mapped block 12 (level 1) [ 132.793528][T17023] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2204: invalid indirect mapped block 2 (level 2) [ 132.806928][T17023] EXT4-fs (loop4): 1 truncate cleaned up [ 132.814027][T17023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 132.829209][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 132.843425][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 132.858141][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 132.872481][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 132.885742][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 132.889336][T17028] loop1: detected capacity change from 0 to 512 [ 132.901012][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 132.923219][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 132.937503][T17028] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.944169][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 132.945271][T17028] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2205: bg 0: block 248: padding at end of block bitmap is not set [ 132.957567][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 132.971332][T17028] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2205: Failed to acquire dquot type 1 [ 132.986313][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 132.996679][T17028] EXT4-fs (loop1): 1 truncate cleaned up [ 133.016975][T17028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.018561][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 133.043652][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 133.043673][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.065616][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 133.080586][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 133.094233][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 133.109580][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 133.122911][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 133.137136][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 133.150307][T17023] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2204: lblock 0 mapped to illegal pblock 5 (length 1) [ 133.164417][T17023] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2204: error -117 reading directory block [ 133.180689][T17034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2207'. [ 133.180905][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.198204][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.311379][T17041] loop3: detected capacity change from 0 to 128 [ 133.406913][ T28] kworker/u8:1: attempt to access beyond end of device [ 133.406913][ T28] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 133.820097][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 133.862825][T17078] loop4: detected capacity change from 0 to 128 [ 133.872904][T17069] loop3: detected capacity change from 0 to 8192 [ 133.924602][T17069] loop3: p1[EZD] p2 p4 [ 133.928885][T17069] loop3: p1 size 1465778176 extends beyond EOD, truncated [ 133.936828][T17069] loop3: p2 start 65535 is beyond EOD, truncated [ 133.943198][T17069] loop3: p4 size 65536 extends beyond EOD, truncated [ 133.956920][ T50] kworker/u8:3: attempt to access beyond end of device [ 133.956920][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 134.219025][T17145] team0: left promiscuous mode [ 134.223889][T17145] team_slave_0: left promiscuous mode [ 134.229494][T17145] team_slave_1: left promiscuous mode [ 134.237396][T17145] batman_adv: batadv0: Adding interface: team0 [ 134.243579][T17145] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.268778][T17145] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 134.290084][T17157] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2229'. [ 134.305358][T17157] team0: entered promiscuous mode [ 134.310504][T17157] team_slave_0: entered promiscuous mode [ 134.316209][T17157] team_slave_1: entered promiscuous mode [ 134.323188][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.330197][T17157] batman_adv: batadv0: Interface activated: team0 [ 134.336745][T17157] batman_adv: batadv0: Interface deactivated: team0 [ 134.343541][T17157] batman_adv: batadv0: Removing interface: team0 [ 134.383133][T17175] loop4: detected capacity change from 0 to 512 [ 134.401731][T17175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 134.408684][T17175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2233: bg 0: block 248: padding at end of block bitmap is not set [ 134.423542][T17175] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2233: Failed to acquire dquot type 1 [ 134.435527][T17175] EXT4-fs (loop4): 1 truncate cleaned up [ 134.443093][T17175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.466874][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.490759][T17194] loop4: detected capacity change from 0 to 512 [ 134.497737][T17194] EXT4-fs: Ignoring removed orlov option [ 134.503928][T17194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.515775][T17194] EXT4-fs (loop4): 1 orphan inode deleted [ 134.521509][T17194] EXT4-fs (loop4): 1 truncate cleaned up [ 134.527853][T17194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.606871][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.632304][T17220] FAULT_INJECTION: forcing a failure. [ 134.632304][T17220] name failslab, interval 1, probability 0, space 0, times 0 [ 134.645006][T17220] CPU: 0 UID: 0 PID: 17220 Comm: syz.4.2235 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 134.655866][T17220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.665931][T17220] Call Trace: [ 134.669213][T17220] [ 134.672145][T17220] dump_stack_lvl+0xf2/0x150 [ 134.676827][T17220] dump_stack+0x15/0x20 [ 134.681004][T17220] should_fail_ex+0x223/0x230 [ 134.685729][T17220] ? __alloc_skb+0x10b/0x310 [ 134.690380][T17220] should_failslab+0x8f/0xb0 [ 134.695015][T17220] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 134.700922][T17220] __alloc_skb+0x10b/0x310 [ 134.705409][T17220] audit_log_start+0x368/0x6b0 [ 134.710205][T17220] audit_seccomp+0x4b/0x130 [ 134.714718][T17220] ? __rcu_read_unlock+0x4e/0x70 [ 134.719693][T17220] __seccomp_filter+0x6fa/0x1180 [ 134.724699][T17220] ? __fput+0x520/0x6d0 [ 134.728948][T17220] ? kmem_cache_free+0x1e8/0x2d0 [ 134.733964][T17220] ? percpu_counter_add_batch+0xc6/0x140 [ 134.739654][T17220] ? __fput+0x520/0x6d0 [ 134.743851][T17220] __secure_computing+0x9f/0x1c0 [ 134.748810][T17220] syscall_trace_enter+0xd1/0x1f0 [ 134.753909][T17220] do_syscall_64+0xaa/0x1c0 [ 134.758475][T17220] ? clear_bhb_loop+0x55/0xb0 [ 134.763168][T17220] ? clear_bhb_loop+0x55/0xb0 [ 134.767851][T17220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.773770][T17220] RIP: 0033:0x7f62f501d15c [ 134.778185][T17220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 134.797804][T17220] RSP: 002b:00007f62f3c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.806240][T17220] RAX: ffffffffffffffda RBX: 00007f62f51d5f80 RCX: 00007f62f501d15c [ 134.814268][T17220] RDX: 000000000000000f RSI: 00007f62f3c970a0 RDI: 0000000000000008 [ 134.822240][T17220] RBP: 00007f62f3c97090 R08: 0000000000000000 R09: 0000000000000000 [ 134.830262][T17220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.838301][T17220] R13: 0000000000000000 R14: 00007f62f51d5f80 R15: 00007ffe99ca7f68 [ 134.846260][T17220] [ 134.944294][T17264] validate_nla: 2 callbacks suppressed [ 134.944307][T17264] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 134.957879][T17264] team0: left promiscuous mode [ 134.962696][T17264] team_slave_0: left promiscuous mode [ 134.968100][T17264] team_slave_1: left promiscuous mode [ 134.974897][T17264] batman_adv: batadv0: Adding interface: team0 [ 134.981062][T17264] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.006176][T17264] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 135.016213][T17265] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 135.024157][T17265] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2242'. [ 135.033128][T17265] team0: entered promiscuous mode [ 135.038177][T17265] team_slave_0: entered promiscuous mode [ 135.043850][T17265] team_slave_1: entered promiscuous mode [ 135.050590][T17265] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.058286][T17265] batman_adv: batadv0: Interface activated: team0 [ 135.064801][T17265] batman_adv: batadv0: Interface deactivated: team0 [ 135.071431][T17265] batman_adv: batadv0: Removing interface: team0 [ 135.405736][T17290] netlink: 'syz.2.2254': attribute type 10 has an invalid length. [ 135.414294][T17290] team0: left promiscuous mode [ 135.419088][T17290] team_slave_0: left promiscuous mode [ 135.424704][T17290] team_slave_1: left promiscuous mode [ 135.432182][T17290] batman_adv: batadv0: Adding interface: team0 [ 135.438427][T17290] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.463653][T17290] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 135.474672][T17295] netlink: 'syz.2.2254': attribute type 10 has an invalid length. [ 135.482517][T17295] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2254'. [ 135.492020][T17295] team0: entered promiscuous mode [ 135.497093][T17295] team_slave_0: entered promiscuous mode [ 135.502875][T17295] team_slave_1: entered promiscuous mode [ 135.510078][T17295] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.517773][T17295] batman_adv: batadv0: Interface activated: team0 [ 135.524280][T17295] batman_adv: batadv0: Interface deactivated: team0 [ 135.530916][T17295] batman_adv: batadv0: Removing interface: team0 [ 135.740729][T17322] netlink: 'syz.0.2268': attribute type 10 has an invalid length. [ 135.748811][T17322] team0: left promiscuous mode [ 135.753684][T17322] team_slave_0: left promiscuous mode [ 135.756447][T17324] loop2: detected capacity change from 0 to 2048 [ 135.759277][T17322] team_slave_1: left promiscuous mode [ 135.772171][T17322] batman_adv: batadv0: Adding interface: team0 [ 135.778397][T17322] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.803956][T17322] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 135.814037][T17325] netlink: 'syz.0.2268': attribute type 10 has an invalid length. [ 135.821922][T17325] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2268'. [ 135.824820][ T29] kauditd_printk_skb: 830 callbacks suppressed [ 135.824834][ T29] audit: type=1326 audit(1731675166.989:26487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.831911][T17324] loop2: p3 < > p4 < > [ 135.836987][ T29] audit: type=1326 audit(1731675166.989:26488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.860573][T17324] loop2: partition table partially beyond EOD, [ 135.864703][ T29] audit: type=1326 audit(1731675166.989:26489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.888368][T17324] truncated [ 135.894477][ T29] audit: type=1326 audit(1731675166.999:26490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.922926][T17325] team0: entered promiscuous mode [ 135.944703][ T29] audit: type=1326 audit(1731675166.999:26491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.944733][ T29] audit: type=1326 audit(1731675166.999:26492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.949755][T17325] team_slave_0: entered promiscuous mode [ 135.973272][ T29] audit: type=1326 audit(1731675166.999:26493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.973296][ T29] audit: type=1326 audit(1731675166.999:26494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.973318][ T29] audit: type=1326 audit(1731675166.999:26495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 135.996902][T17325] team_slave_1: entered promiscuous mode [ 136.002601][ T29] audit: type=1326 audit(1731675166.999:26496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 136.039705][T17324] loop2: p3 start 4284289 is beyond EOD, [ 136.089781][T17325] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.102376][T17324] truncated [ 136.111038][T17325] batman_adv: batadv0: Interface activated: team0 [ 136.124455][T17325] batman_adv: batadv0: Interface deactivated: team0 [ 136.131145][T17325] batman_adv: batadv0: Removing interface: team0 [ 136.150972][T17332] loop1: detected capacity change from 0 to 128 [ 136.176160][ T50] kworker/u8:3: attempt to access beyond end of device [ 136.176160][ T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 136.196797][T17339] loop3: detected capacity change from 0 to 512 [ 136.206994][T17339] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.224267][T17339] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2275: bg 0: block 248: padding at end of block bitmap is not set [ 136.252116][T17339] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.2275: Failed to acquire dquot type 1 [ 136.266445][T17339] EXT4-fs (loop3): 1 truncate cleaned up [ 136.272910][T17339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.282878][T17357] loop1: detected capacity change from 0 to 128 [ 136.303180][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.320750][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 136.336506][T17361] loop4: detected capacity change from 0 to 512 [ 136.343347][T17361] EXT4-fs: Ignoring removed oldalloc option [ 136.349686][T17361] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 136.362095][T17361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 136.370085][T17361] System zones: 1-12 [ 136.383682][T17361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.390425][T17361] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2284: invalid indirect mapped block 12 (level 1) [ 136.404466][T17361] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2284: invalid indirect mapped block 2 (level 2) [ 136.405232][ T87] kworker/u8:4: attempt to access beyond end of device [ 136.405232][ T87] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 136.425000][T17361] EXT4-fs (loop4): 1 truncate cleaned up [ 136.437753][T17361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 136.461473][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.476563][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.491539][T17378] loop1: detected capacity change from 0 to 128 [ 136.500245][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.529157][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.542300][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.557876][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.558139][ T28] kworker/u8:1: attempt to access beyond end of device [ 136.558139][ T28] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 136.571714][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.599026][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.617899][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.632258][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.645053][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.650508][T17398] loop1: detected capacity change from 0 to 512 [ 136.665415][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.666254][T17398] EXT4-fs: Ignoring removed oldalloc option [ 136.678399][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.684543][T17398] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 136.701500][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.721165][T17398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 136.729413][T17398] System zones: 1-12 [ 136.733442][T17398] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.741938][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.756043][T17398] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2289: invalid indirect mapped block 12 (level 1) [ 136.756489][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.770593][T17398] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2289: invalid indirect mapped block 2 (level 2) [ 136.784404][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.795867][T17398] EXT4-fs (loop1): 1 truncate cleaned up [ 136.809189][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.818072][T17398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 136.835608][T17361] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 5: comm syz.4.2284: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.854267][T17361] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2284: error -117 reading directory block [ 136.862766][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.883666][T17361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.891772][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 136.892262][T17361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.910845][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.927304][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 136.941783][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.955932][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 136.969325][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 136.984172][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 136.998671][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 137.013108][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 137.027344][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 137.041604][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 137.065749][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 137.080045][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 137.094124][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 137.109486][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 137.122907][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 137.137205][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 137.150490][T17398] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 5: comm syz.1.2289: lblock 0 mapped to illegal pblock 5 (length 1) [ 137.171948][T17398] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.2289: error -117 reading directory block [ 137.216850][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.226942][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.423843][T17481] loop3: detected capacity change from 0 to 128 [ 137.497721][ T87] kworker/u8:4: attempt to access beyond end of device [ 137.497721][ T87] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 137.564952][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 137.721610][T17532] loop3: detected capacity change from 0 to 2048 [ 137.762638][T17532] loop3: p3 < > p4 < > [ 137.766824][T17532] loop3: partition table partially beyond EOD, truncated [ 137.784896][T17532] loop3: p3 start 4284289 is beyond EOD, truncated [ 137.855506][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 138.136069][T17579] loop3: detected capacity change from 0 to 8192 [ 138.212425][T17579] loop3: p1[EZD] p2 p4 [ 138.216813][T17579] loop3: p1 size 1465778176 extends beyond EOD, truncated [ 138.227836][T17579] loop3: p2 start 65535 is beyond EOD, truncated [ 138.234226][T17579] loop3: p4 size 65536 extends beyond EOD, truncated [ 138.465219][T17613] netlink: 'syz.3.2326': attribute type 10 has an invalid length. [ 138.473323][T17613] team0: left promiscuous mode [ 138.478106][T17613] team_slave_0: left promiscuous mode [ 138.483638][T17613] team_slave_1: left promiscuous mode [ 138.491057][T17613] batman_adv: batadv0: Adding interface: team0 [ 138.497244][T17613] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.522453][T17613] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 138.533456][T17618] netlink: 'syz.3.2326': attribute type 10 has an invalid length. [ 138.541302][T17618] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2326'. [ 138.550404][T17618] team0: entered promiscuous mode [ 138.555629][T17618] team_slave_0: entered promiscuous mode [ 138.561400][T17618] team_slave_1: entered promiscuous mode [ 138.568552][T17618] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.578325][T17618] batman_adv: batadv0: Interface activated: team0 [ 138.584920][T17618] batman_adv: batadv0: Interface deactivated: team0 [ 138.591554][T17618] batman_adv: batadv0: Removing interface: team0 [ 138.617299][T17630] loop3: detected capacity change from 0 to 512 [ 138.636050][T17630] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.643695][T17630] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2332: bg 0: block 248: padding at end of block bitmap is not set [ 138.658332][T17630] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.2332: Failed to acquire dquot type 1 [ 138.670581][T17630] EXT4-fs (loop3): 1 truncate cleaned up [ 138.677371][T17630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.698882][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.772696][T17645] loop4: detected capacity change from 0 to 128 [ 138.810497][ T174] kworker/u8:5: attempt to access beyond end of device [ 138.810497][ T174] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 139.506841][T17794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2348'. [ 140.432394][T17849] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2362'. [ 140.537494][T17843] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2360'. [ 140.550535][T17860] FAULT_INJECTION: forcing a failure. [ 140.550535][T17860] name failslab, interval 1, probability 0, space 0, times 0 [ 140.563222][T17860] CPU: 1 UID: 0 PID: 17860 Comm: syz.0.2365 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 140.573999][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.584059][T17860] Call Trace: [ 140.587346][T17860] [ 140.590267][T17860] dump_stack_lvl+0xf2/0x150 [ 140.594997][T17860] dump_stack+0x15/0x20 [ 140.599187][T17860] should_fail_ex+0x223/0x230 [ 140.603875][T17860] ? dst_alloc+0xc0/0x100 [ 140.608313][T17860] should_failslab+0x8f/0xb0 [ 140.612893][T17860] kmem_cache_alloc_noprof+0x4c/0x290 [ 140.618326][T17860] ? __rcu_read_unlock+0x34/0x70 [ 140.623263][T17860] dst_alloc+0xc0/0x100 [ 140.627480][T17860] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 140.633521][T17860] ip_route_output_flow+0x76/0x120 [ 140.638624][T17860] raw_sendmsg+0x9e9/0xe50 [ 140.643049][T17860] ? __pfx_raw_sendmsg+0x10/0x10 [ 140.647980][T17860] inet_sendmsg+0xc5/0xd0 [ 140.652315][T17860] __sock_sendmsg+0x102/0x180 [ 140.657027][T17860] ____sys_sendmsg+0x312/0x410 [ 140.661841][T17860] __sys_sendmmsg+0x259/0x500 [ 140.666553][T17860] ? exc_page_fault+0x4fc/0x650 [ 140.671415][T17860] ? trace_sys_enter+0x65/0xa0 [ 140.676401][T17860] __x64_sys_sendmmsg+0x57/0x70 [ 140.681316][T17860] x64_sys_call+0xa49/0x2d60 [ 140.685903][T17860] do_syscall_64+0xc9/0x1c0 [ 140.690413][T17860] ? clear_bhb_loop+0x55/0xb0 [ 140.695114][T17860] ? clear_bhb_loop+0x55/0xb0 [ 140.699851][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.705776][T17860] RIP: 0033:0x7f03273ae719 [ 140.710200][T17860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.729839][T17860] RSP: 002b:00007f0326027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.738390][T17860] RAX: ffffffffffffffda RBX: 00007f0327565f80 RCX: 00007f03273ae719 [ 140.746358][T17860] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000006 [ 140.754331][T17860] RBP: 00007f0326027090 R08: 0000000000000000 R09: 0000000000000000 [ 140.762347][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.770312][T17860] R13: 0000000000000000 R14: 00007f0327565f80 R15: 00007fff6e1c3298 [ 140.778278][T17860] [ 140.889598][T17878] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2369'. [ 140.977247][T17888] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 140.986555][T17888] team0: left promiscuous mode [ 140.991383][T17888] team_slave_0: left promiscuous mode [ 140.996909][T17888] team_slave_1: left promiscuous mode [ 141.020080][T17888] batman_adv: batadv0: Adding interface: team0 [ 141.026342][T17888] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.051520][T17888] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 141.061935][T17892] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 141.069783][T17892] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2374'. [ 141.078769][T17892] team0: entered promiscuous mode [ 141.083799][T17892] team_slave_0: entered promiscuous mode [ 141.089658][T17892] team_slave_1: entered promiscuous mode [ 141.096356][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.103447][T17892] batman_adv: batadv0: Interface activated: team0 [ 141.110053][T17892] batman_adv: batadv0: Interface deactivated: team0 [ 141.116668][T17892] batman_adv: batadv0: Removing interface: team0 [ 141.159373][T17894] loop4: detected capacity change from 0 to 8192 [ 141.194099][T17894] loop4: p1[EZD] p2 p4 [ 141.198668][T17894] loop4: p1 size 1465778176 extends beyond EOD, truncated [ 141.208411][T17894] loop4: p2 start 65535 is beyond EOD, truncated [ 141.214837][T17894] loop4: p4 size 65536 extends beyond EOD, truncated [ 141.304718][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 141.304783][ T29] audit: type=1326 audit(1731675172.125:27015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5042e719 code=0x7ffc0000 [ 141.343677][ T29] audit: type=1326 audit(1731675172.153:27016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.367419][ T29] audit: type=1326 audit(1731675172.153:27017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.391109][ T29] audit: type=1326 audit(1731675172.153:27018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.414746][ T29] audit: type=1326 audit(1731675172.153:27019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.438437][ T29] audit: type=1326 audit(1731675172.153:27020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.462029][ T29] audit: type=1326 audit(1731675172.153:27021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.485693][ T29] audit: type=1326 audit(1731675172.153:27022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.509405][ T29] audit: type=1326 audit(1731675172.153:27023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.533869][ T29] audit: type=1326 audit(1731675172.153:27024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.4.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f501e719 code=0x7ffc0000 [ 141.575057][T17913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2382'. [ 141.762189][T17935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2389'. [ 141.889810][T17944] loop2: detected capacity change from 0 to 8192 [ 141.942403][T17944] loop2: p1[EZD] p2 p4 [ 141.946662][T17944] loop2: p1 size 1465778176 extends beyond EOD, truncated [ 141.954172][T17944] loop2: p2 start 65535 is beyond EOD, truncated [ 141.960653][T17944] loop2: p4 size 65536 extends beyond EOD, truncated [ 142.034244][T17958] loop3: detected capacity change from 0 to 512 [ 142.040981][T17958] EXT4-fs: Ignoring removed oldalloc option [ 142.047296][T17958] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 142.063775][T17961] loop1: detected capacity change from 0 to 512 [ 142.070718][T17958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 142.078825][T17958] System zones: 1-12 [ 142.079501][T17961] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.082974][T17958] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.089598][T17961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2399: bg 0: block 248: padding at end of block bitmap is not set [ 142.110405][T17961] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2399: Failed to acquire dquot type 1 [ 142.122167][T17961] EXT4-fs (loop1): 1 truncate cleaned up [ 142.126006][T17958] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2398: invalid indirect mapped block 12 (level 1) [ 142.128637][T17961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.141451][T17958] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2398: invalid indirect mapped block 2 (level 2) [ 142.155039][T17963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2397'. [ 142.176749][T17958] EXT4-fs (loop3): 1 truncate cleaned up [ 142.182995][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.183060][T17958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 142.212982][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.227254][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.242312][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.256550][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.259278][T17969] netlink: 'syz.1.2402': attribute type 10 has an invalid length. [ 142.269914][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.291251][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.304195][T17969] team0: left promiscuous mode [ 142.309039][T17969] team_slave_0: left promiscuous mode [ 142.311927][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.314483][T17969] team_slave_1: left promiscuous mode [ 142.334996][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.337000][T17969] batman_adv: batadv0: Adding interface: team0 [ 142.351260][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.353842][T17969] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.372219][T17973] loop4: detected capacity change from 0 to 128 [ 142.392824][T17969] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 142.409313][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.409449][T17974] netlink: 'syz.1.2402': attribute type 10 has an invalid length. [ 142.428934][T17976] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.429695][T17974] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2402'. [ 142.443967][T17976] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.453669][T17974] team0: entered promiscuous mode [ 142.469099][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.470384][T17974] team_slave_0: entered promiscuous mode [ 142.490055][T17974] team_slave_1: entered promiscuous mode [ 142.496726][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.497518][T17974] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.516487][T17974] batman_adv: batadv0: Interface activated: team0 [ 142.522984][T17974] batman_adv: batadv0: Interface deactivated: team0 [ 142.529614][T17974] batman_adv: batadv0: Removing interface: team0 [ 142.536002][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.550390][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.551633][ T50] kworker/u8:3: attempt to access beyond end of device [ 142.551633][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 142.577500][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.593054][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.615811][T17958] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 5: comm syz.3.2398: lblock 0 mapped to illegal pblock 5 (length 1) [ 142.631175][T17958] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.2398: error -117 reading directory block [ 142.650491][T17958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.659863][T17981] loop1: detected capacity change from 0 to 8192 [ 142.664095][T17958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.701515][T17981] loop1: p1[EZD] p2 p4 [ 142.705760][T17981] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 142.714815][T17981] loop1: p2 start 65535 is beyond EOD, truncated [ 142.721168][T17981] loop1: p4 size 65536 extends beyond EOD, truncated [ 142.886916][T18029] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 142.895149][T18029] team0: left promiscuous mode [ 142.899938][T18029] team_slave_0: left promiscuous mode [ 142.905444][T18029] team_slave_1: left promiscuous mode [ 142.912624][T18029] batman_adv: batadv0: Adding interface: team0 [ 142.918858][T18029] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.944179][T18029] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 142.973774][T18042] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 142.981782][T18042] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2412'. [ 142.990990][T18042] team0: entered promiscuous mode [ 142.996050][T18042] team_slave_0: entered promiscuous mode [ 143.001765][T18042] team_slave_1: entered promiscuous mode [ 143.008300][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.017153][T18042] batman_adv: batadv0: Interface activated: team0 [ 143.023714][T18042] batman_adv: batadv0: Interface deactivated: team0 [ 143.030461][T18042] batman_adv: batadv0: Removing interface: team0 [ 143.059348][T18059] netlink: 'syz.0.2416': attribute type 10 has an invalid length. [ 143.067513][T18059] team0: left promiscuous mode [ 143.072295][T18059] team_slave_0: left promiscuous mode [ 143.077777][T18059] team_slave_1: left promiscuous mode [ 143.085205][T18059] batman_adv: batadv0: Adding interface: team0 [ 143.091496][T18059] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.116886][T18059] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 143.127272][T18069] netlink: 'syz.0.2416': attribute type 10 has an invalid length. [ 143.135153][T18069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2416'. [ 143.147137][T18069] team0: entered promiscuous mode [ 143.152229][T18069] team_slave_0: entered promiscuous mode [ 143.158083][T18069] team_slave_1: entered promiscuous mode [ 143.164942][T18069] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.172070][T18069] batman_adv: batadv0: Interface activated: team0 [ 143.178610][T18069] batman_adv: batadv0: Interface deactivated: team0 [ 143.185339][T18069] batman_adv: batadv0: Removing interface: team0 [ 143.286457][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 143.296195][ T3314] ================================================================== [ 143.304295][ T3314] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 143.311864][ T3314] [ 143.314186][ T3314] read-write to 0xffff888237d2ac68 of 1 bytes by task 18098 on cpu 1: [ 143.322333][ T3314] folio_add_lru+0xa3/0x1f0 [ 143.326844][ T3314] folio_add_lru_vma+0x48/0x60 [ 143.331625][ T3314] handle_mm_fault+0x24bf/0x2aa0 [ 143.336574][ T3314] exc_page_fault+0x3b9/0x650 [ 143.341255][ T3314] asm_exc_page_fault+0x26/0x30 [ 143.346120][ T3314] [ 143.348442][ T3314] read to 0xffff888237d2ac68 of 1 bytes by task 3314 on cpu 0: [ 143.355988][ T3314] __lru_add_drain_all+0x136/0x3f0 [ 143.361113][ T3314] lru_add_drain_all+0x10/0x20 [ 143.365898][ T3314] invalidate_bdev+0x47/0x70 [ 143.370499][ T3314] ext4_put_super+0x571/0x840 [ 143.375197][ T3314] generic_shutdown_super+0xe5/0x220 [ 143.380498][ T3314] kill_block_super+0x2a/0x70 [ 143.385194][ T3314] ext4_kill_sb+0x44/0x80 [ 143.389538][ T3314] deactivate_locked_super+0x7d/0x1c0 [ 143.394922][ T3314] deactivate_super+0x9f/0xb0 [ 143.399613][ T3314] cleanup_mnt+0x268/0x2e0 [ 143.404039][ T3314] __cleanup_mnt+0x19/0x20 [ 143.408458][ T3314] task_work_run+0x13a/0x1a0 [ 143.413059][ T3314] syscall_exit_to_user_mode+0xbe/0x130 [ 143.418610][ T3314] do_syscall_64+0xd6/0x1c0 [ 143.423116][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.429024][ T3314] [ 143.431351][ T3314] value changed: 0x0f -> 0x10 [ 143.436019][ T3314] [ 143.438336][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 143.444476][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 143.455329][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.465380][ T3314] ================================================================== [ 143.536774][T18129] loop3: detected capacity change from 0 to 8192 [ 143.567336][T18129] loop3: p1[EZD] p2 p4 [ 143.571676][T18129] loop3: p1 size 1465778176 extends beyond EOD, truncated [ 143.579449][T18129] loop3: p2 start 65535 is beyond EOD, truncated [ 143.585823][T18129] loop3: p4 size 65536 extends beyond EOD, truncated