last executing test programs: 2.742839215s ago: executing program 2 (id=1542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500e00000020000000000e2000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000004000000000010000000000000000000000008000007f00000100000000000000000000000072f4560ddc434c4f3d"], 0x1bc}}, 0x0) 2.710990447s ago: executing program 2 (id=1543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x1, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x5, 0x0, 0x0, 0x70000000, [@sadb_address={0x3, 0x2}]}, 0x28}}, 0x0) 2.660638512s ago: executing program 2 (id=1544): r0 = syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pread64(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x0) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="6a0af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a26c7670568982b4e020f698393a1587aee89eb5603111ced3a0f3881f9c24561f1b2607995daa56f151905ea23c22624c12533d3984e835a3c61a7a9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0c884625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130bd030000c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2369149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300005d2c4df17c91e5451f1e44467a1ed30480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf607aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a9963b924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8241ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcfffffffffaffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda420d3e53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fd73c294290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd96058e7bf5b51cce33bd30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c9b2c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbd008fc1be8ea216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d253118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998e340aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c6d083cf2fb4598a4743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b9314dcdfadafff7ca3243a9c40a67ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b368a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e35fd7834f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c674e6e549227d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb07005dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3badf2f6ffda1360c2786e16937ab61d7dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68ac3c64458943fc59c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5fb3abc96478924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872976b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564fdab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfd1016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e7cdd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c6b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4040068ae2676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e9f367f2eb36eed56c037991d4026f8c743c1360a29d8177d1250ff303e207f02c33b6009abb9948d7e787c863998f0a5f1b3761e8006c8095dd0adb892e5f020a1e1032f3b4ad237e9573faa2bece611b2af8de93c3157af2a1797f696493dcda51b9c63f31f85f82689d23c1bb1b2027f6583e5cbbedbfd0dec9622fcf5c348b2f13c9d1418e684183480cb2ce5dae947313be0000000000009b941d0c4e344baf15e63f581e9ead164a550d5d78864b0218ac8a33ee3433de56a991c72a046386223ff52c139ed3ebed412c78112524ee6b3385b2954cc89e2635d4d62d51b18b196716032e9fd4d8a5cefcd8c36125bfb92efc658fb0b7d2e933f9957fc78dc15eb3e0fc77cb84177e41db5a65c7dd3a4b3431d2f52c4c3971a83b12e399b3e91281fa1200591430fcd74269f3f14332b175225120432b0babc737be65257fbc833c096fcb8b1d5731e6f95e8259bc1aa73e75132b28aedf5bb34f5c33c319b4e25b951189d5c03815e0259448ed9c51e6e6c371e387ad82734990a37071c6225a2116db67b503f48460430b6fe6c57eca9b4ddd5c699d1883891f047ac9792eeca5f9465bfe4d6e5faf78d81b376415935d145151a47b23af15d61db53a5afcf0a792afa5e43e2f742449c1a4cbdad69dc5c1013aa36fba2013ffb4b65216618222469ab0a63d141cd11b31caadeea6e9ee58854684350bffc86f09fc563b1a68c03b828ab51fe2e36594ab83cb5a9d4417231b0988bc38b073a88054e8a066b89e24e5d651d891acfd13518f3538c9c6c91bba247ff3a5fd41934a932c7b23bfb7ac9f1a9bf72243e56508ab8e31d99287ad5bb0795e48598b4b752cf801e29d3919ae547b51392bd9bd74b8e2dd5f384b5d721d7a877227797807119746ba65f42c291e3510d80b6c0bcfad2e8bdc51f07c9916f2f9364381b633518d0fc14834aaa5c2302b6040cdc0e09626f3f86cd2eba4736d4c6e0fe8f778851f5484a179fc4c430258f06bf2c08c11a36ff4dd4bd8ff174feaff7c29154d751fbb7c122d515541a9c8421536e032f8fe5170925c83c91600b7e3d9827bf984d30a3193e1b2c3bda2494c67686a7b308ab19d884ff074071b14d8a016758b6aca4b2c9f904cda56ca14fe97b26ba61cc11c95c34e324bceb8d11ccb65744759fb602fdee6f09e07f60a8937da7b2196c6586824961386a81df193491fb050308c96227b84ef9d782b912aed6d2b86e2edb373a0d5a51e6a442eedfe0a3d4b11d8426e6fb6b50a302f03477ee5746189c3765d9c1de0cb0b32f44ef0c8d3e97aecd7a588ce76d4664f7cd4f2d73ef8030144fb459e85656831742dacfcfd018fb1620e5bd2d1913e3d069d0990ddfe4577a4c639485f5fbc7cfe8703842a8e"], &(0x7f0000000100)='GPL\x00'}, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYRES16=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x46}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/309], &(0x7f0000001040)='GPL\x00', 0x0, 0x94, &(0x7f00000004c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r10, 0x2f00, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x7f, 0x0, 0xb2, 0x19d, &(0x7f00000019c0)="88b1d81b45d46d425fd0b37a8255240c566c90e047da1a7e43ca600f9c4bdf0780e1b5e3f35933b15e4bb797ce38013caa314c80db88a127213a01dc81299de2bb7596304600c744884404c661b501e46084169171155d262013898f078b25833b774819aed0a8c2354fa9d55eb7196ab506ba356b826feb3a467468e79cc7d9ebe5dc0040fd2d112e9297fd38d72bf3350bee79590d360aea13680a4e08a7e9038f208ca14b8d97bdfec4d4dbe065d7cfd0", &(0x7f0000001c40)="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", 0x1, 0x0, 0x7fffffff}, 0xfffffead) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r8, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0xffffffff}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r12, 0x0, 0x0}, 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xb, 0x4, 0x1, 0x0, r12}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r13, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r13, &(0x7f0000001a40), 0x0}, 0x20) 2.660433492s ago: executing program 2 (id=1545): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [0x0, 0x0, 0x3a02]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 2.659949332s ago: executing program 2 (id=1546): fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810746, &(0x7f0000000300)={[{@noauto_da_alloc}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@noacl}, {@nodiscard}], [{@smackfshat={'smackfshat', 0x3d, 'user_xattr'}}, {@audit}, {@uid_gt={'uid>', r0}}, {@pcr={'pcr', 0x3d, 0xc}}]}, 0xfe, 0x451, &(0x7f0000000d00)="$eJzs281vG0UbAPBn107bt+3bhFI+WloIFETER9KkBXrgAgKJA0hIcCjHkKRVqdugJki0iiAgVI6oEnfEEYm/gBMnBJyQuMIdVaogQmrhgtHau0ns2Gk+nDrUv5+0yYx3vDNPdmc9nskG0LMGsx9JxN6I+CUi+uvZxgKD9V83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtHjfnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6S+f3kcnTKYBf5HtaZ532OdrqzL/qkuxZmUu90a1qoUEdnp6qv1//4oxdLJ64+XP+5q44Atld2zd7bfPV8F7mBJdLsFQHcUH/TZ999iu01Dj23h+gv1L0BZ3Dfzrb6nHGlepm8L6x+MiFPzf3+RbdE0D1FtMW8AALBZ32bjn6dWjv9qayPLyu3L14YGIuKuiNgfEXdHxIGIuCcve19E3L/O+puXhlaOP9NrGwxtTbLx3/P52lbj+K8Y/cVAKc/9vxZ/X3L6bGXqWP43GYq+nVl+tNXBi0O89PNn7epfPv7Ltqz+YiyYH+RauWmCbnJ8drxTg9LrH0UcKreKP1lcCciuhYMRcWh9h95XJM4+8dXhdoVuHf8qOrDOVP0y4vH6+Z+PpvgLyerrkyO7ojJ1bKS4Klb68acrr7erf1Pxd0B2/nc3Xv9NJfr/TJav186sv44rv37a9jtleYPX/47kzdqa9Y78tffHZ2cvjkbsSF6t5RteH1t6b5EvymfxDx1t3f/35+/J4n8gIrKL+EhEPBgRD+Xn7uGIeCQijq4S//cvPvpOu33b4fxPtrz/LV7/A43nf/2J0rnvvmlX/9rufydqqaH8ldr97xbaN2dXXmKjVzMAAAD896QRsTeSdHgxnabDw/X/lz8Qu9PK9Mzsk6en37swWX9GYCD60mKmq3/ZfOhoMp8fsZ4fy+eKi/3H83njz0v/q+WHJ6Yrk12OHXrdnjb9P/NbqdutA7ac57WgdzX3/7RL7QBuP5//0Lv0f+hd+j/0rlb9/8OmvLUAuDP5/Ifepf9D79L/oXfp/9CTNvNc/1Ylyqs8vS+xXRKRbotmSLRIlDvQu7t8YwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQfwMAAP//NI3x9w==") (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r2, 0x0) unshare(0x62040200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async) pread64(r1, &(0x7f000001a240)=""/102383, 0x18fef, 0x3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000117000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/186, 0xba, 0x0, &(0x7f0000000400)=""/137, 0x89}, &(0x7f0000000140)=0x40) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f00000004c0)="4a14e761bffc55cb7181bc7fc2255ac3cce993c938257fd32478c49c0386b358dbb23ea3e5c58f400ba062bc7f738c3029b7c0aa13e3e7326162e7ee736732794713893a95fbe09cec674e43c116dd394dcf9851b4dcd12349e1bffe8ef9cf3f6465f5de7b38e2c338eccf00297fa0d196a214e616c5713ffc43b176", &(0x7f0000000800)=""/167, &(0x7f0000000540)="5366510dd2ebae81d007b8907860b95b0473fae96a649bf8f16f572fc29417d6eecf6a10a6f62e96f9a6d5dd863c266960ed741d2770ec7fd66ffd59eb7a2c08d6c660378fd50014a2d1f2ef5aedcd59d44e0bb1db7fe865f6d006b46c1c4e3c7ea8525e", &(0x7f00000008c0)="1ac3a6f2e8b7039c903c852a9b750d717efed946e55779052366828e0d7f23e66ca62ef5d8e701c9b016ec7c1da0c88bd97c02aae3cd6f", 0xb1, r1}, 0x38) memfd_secret(0x0) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getresuid(&(0x7f00000009c0), &(0x7f0000000980), &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 2.515711394s ago: executing program 2 (id=1550): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x24001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x1d, 0x0, 0xf5ffffffffffffff, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000340)="aed76e2ee8", 0x5}}, 0x0) 809.823724ms ago: executing program 3 (id=1592): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffc58) write$P9_RMKDIR(r0, 0x0, 0x0) 752.824178ms ago: executing program 3 (id=1593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 597.284571ms ago: executing program 3 (id=1596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000ffffffff000000000000000000000000fc0200000000000000000000000000000000003c000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500"], 0x1fc}}, 0x0) 597.119381ms ago: executing program 3 (id=1597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x4000}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 593.082512ms ago: executing program 4 (id=1598): syz_emit_ethernet(0x2cd, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x297, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 592.959132ms ago: executing program 3 (id=1599): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff]}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 592.805442ms ago: executing program 4 (id=1600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b708ff80000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9}, 0x90) 540.901256ms ago: executing program 4 (id=1601): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x300, 0x10, 0x0, 0x10001, 0x0, "4ae23ae17df2ed8c69ba36c432d2911abad88f"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 540.431786ms ago: executing program 3 (id=1602): syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) unshare(0x22020400) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x80045432, &(0x7f0000000000)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000f0ff01000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff020400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) 540.397926ms ago: executing program 4 (id=1603): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r0, &(0x7f00000042c0)=[{&(0x7f00000041c0)="753455e89f", 0x5}], 0x1, 0x2, 0x4) 526.554777ms ago: executing program 0 (id=1604): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xf4ff) 526.324347ms ago: executing program 4 (id=1605): ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000a40)={'wlan1\x00', 0x400}) r0 = shmget(0x3, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000480)=""/153) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000001080)={0x54, 0x6, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x47b, {0x7ff, 0x401, 0xfff7, 0xffa6}}}) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x822b01) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000080a3ab010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a320000000009000100730a003000000000080005400000001f08000340000000105c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000080040001800c00044000000000000000000c00054000000000000000000900090073797a3000000000140000001000010000000000000000000000000a"], 0xe8}}, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x1}, 0x4) ftruncate(0xffffffffffffffff, 0x0) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 509.097308ms ago: executing program 0 (id=1606): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 250.52413ms ago: executing program 0 (id=1607): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2ba, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='g\x00\x00=', @ANYRESHEX=r1, @ANYBLOB=',uni_xlate=1,allow_utime=00000000000000000000006,shortname=mixed,iocharset=koi8-ru,nonumtail=0,umask=00000000000000000000002,shortname=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,shortname=win95,iocharset=cp1250,quiet,shortname=win95,utf8=1,nnonumtail=1,shortname=mixed,nonumtail=0,shortname=win95,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=staff_u,smackfsfloor=,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c736d61636b66736861743d24243a212d545b7f277b2e2d2c72772c00"], 0x0, 0x2a4, &(0x7f0000000580)="$eJzs3T1re1UYAPDnpmkSdUgGJxG8oIPTn7arS4qkUMykZFAHLbYFaYLQQsEXDJ1cXRz9BILg5pdw8RsIroKbHQpHbnIvSWuaNtK0vvx+Q3t67vOc85zTQ18oOf3w5dHJYR7HF1/8Eq1WFrVudOMyi07UopJSSjHT/ToAgH+zy5Ti9zS1Sl4WEa31lQUArNHK3/9/WHtJAMCavfPue2/t9vu9t/O8FXujr84HxW/2xfvp893j+DiGcRRb0Y6r6d8Cqp8Wird7KaVxPS904rXR+HxQZI4++Kkcf/e3iEn+drSjM+m6nr/f723nU3P546KO58v5u0X+TrTjxQXz7/d7OwvyY9CI11+dq/9ZtOPnj+KTGMbhpIhZ/pfbef5m+uaPz98vyivys/H5oDmJm0kbj/ypAQAAAAAAAAAAAAAAAAAAAADgP+xZeXdOMyb39xRd5f07G1fFB5uRVzrX7+eZ5mfVQDfuBxqn+DalZj2i39vK8zyVgbP8erxUj/rTrBoAAAAAAAAAAAAAAAAAAAD+Wc4+/ezkYDg8On2QRnUbQPWy/r87Tneu55VYHtyczVUrm0tGjo0qJotYWkaxiAfalrsaz91W83ffrzpg6+6YzWX78zCN6nSdHGSL97AZVU+rOiQ/zsc04p5zNW57lFY6fo2Fj9orr73xwqQxXhIT2bLC3vh1unNlT3ZzFY3Jri5M3ywbc+k3zsZK5/mvXysyt3UAAAAAAAAAAAAAAAAAAMBazV70u+DhxdLUWmqurSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFSz//+/QmNcJt8juBGnZ0+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4H/gwAAP//GX9i/A==") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000004f17851a5c302fa155090100000000007d00000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) inotify_rm_watch(r5, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r7 = signalfd4(r6, &(0x7f0000000140), 0x8, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x10242, 0x0) pwrite64(r8, &(0x7f0000000080), 0x0, 0x800b5eb) socket$inet6(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f00000001c0)=0x8) sendfile(r7, r8, 0x0, 0x1000000000006) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r9, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) socketpair$unix(0x1, 0x0, 0x0, 0x0) r10 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r10, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0x0, 0x0, 0x0, 0x0, 0x2401}) 249.89493ms ago: executing program 0 (id=1608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000080ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500e00000020000000000e2000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000004000000000010000000000000000000000008000007f00000100000000000000000000000072f4560ddc434c4f3d"], 0x1bc}}, 0x0) 249.74796ms ago: executing program 0 (id=1609): r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) listen(r0, 0x8001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c010000100001000000000000000000e000000200"/64, @ANYRES32, @ANYRES32=r2, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000"], 0x15c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 165.791667ms ago: executing program 0 (id=1610): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000600)={&(0x7f0000000200), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20004814}, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, {[0x800000000]}}, 0x0, 0x8, &(0x7f00000002c0)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) fcntl$setstatus(r6, 0x4, 0x7c00) dup3(r7, r6, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000000200)=""/116, 0x74) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1d}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x40}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r11, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x8, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="97000229bd7000fddbdf250300000008000100000000"], 0x1c}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 152.544898ms ago: executing program 1 (id=1611): syz_emit_ethernet(0x3b2, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x67b783d8a3898a04) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x1c}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 115.601501ms ago: executing program 1 (id=1612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ff00"/112], 0xb8}}, 0x0) 86.767943ms ago: executing program 1 (id=1613): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) epoll_create1(0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext3\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000dc0)={[{@mb_optimize_scan}, {@mb_optimize_scan}, {@jqfmt_vfsv0}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) clock_gettime(0x0, 0x0) 85.743183ms ago: executing program 4 (id=1614): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x8353}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd3, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) 784.24µs ago: executing program 1 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB='h\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800070000000000e307b063ae6da6b6512174df01a7a3cefe045faa2067602c6e42e04fec5a9f7a93f38f09ac795360effc8e2b99f18507442b1e14f31c7f7336752bb2c7cc4162b6a3a1325a"], 0xa68}}, 0x0) 180.39µs ago: executing program 1 (id=1616): socket$inet6(0xa, 0x80002, 0x88) syz_io_uring_setup(0x2b06, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f00000001c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000800000000000000004000000000000bd603403618480441995783304b6a86385e12bb0e8ff8c9da9cd1977bcbac986c928be13ccb602790ec29c1808b15157e47e3b3857967a0c1a37f689ba2e1bf1a68bf9323f0e87f875701bdec99b00003da73ff06d4f6eeb652f2563c6d56246e15e52d7254d1aad55fda39d5cf63c2c196ce95779ebd87678c7f0f159bc93a5ac6788493a9cd6168b9234ff982ea318f9897b76364192bb8a"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x44, 0x9, 0x1, 0x2012, 0xffffffffffffffff, 0x87ff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900016c73797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211c0011800a0001006c696d6974000000ef48028008000440000000011400000010000100"/159], 0xa0}}, 0x0) 0s ago: executing program 1 (id=1617): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xd, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r2}, @generic='=']}]}, 0x30}], 0x1}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xa}, @alu={0x7}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRESOCT=r5], 0x1, 0x67e, &(0x7f0000001600)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRESOCT=r5], 0x1, 0x67e, &(0x7f0000001600)="$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") r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r6, 0x0) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}}, 0xa0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000680)="b2", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f00000028c0)='\v', 0x1}, {&(0x7f00000029c0)='A', 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000940)="fb", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000006c0)="f2", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}], 0x4, 0xf000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001880)={'wg1\x00'}) kernel console output (not intermixed with test programs): 37] ? clear_bhb_loop+0x55/0xb0 [ 112.073577][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.079533][ T7137] RIP: 0033:0x7f218e289e79 [ 112.084000][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.103738][ T7137] RSP: 002b:00007f218cf00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 112.112167][ T7137] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 112.120130][ T7137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.128091][ T7137] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 112.136105][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.144071][ T7137] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 112.152036][ T7137] [ 112.157576][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.217669][ T6996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.230630][ T6996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.239561][ T6996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.254200][ T6996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.283541][ T7148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7148 comm=syz.4.1106 [ 112.299209][ T7148] netlink: 'syz.4.1106': attribute type 10 has an invalid length. [ 112.310441][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.322028][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.341830][ T6996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.352205][ T6996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.367526][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.374604][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.383736][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.390811][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.402213][ T7146] loop1: detected capacity change from 0 to 128 [ 112.418569][ T7148] loop4: detected capacity change from 0 to 1024 [ 112.440822][ T7148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.455071][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 112.472022][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.507879][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.579511][ T7178] loop1: detected capacity change from 0 to 256 [ 112.592925][ T6996] veth0_vlan: entered promiscuous mode [ 112.604424][ T6996] veth1_vlan: entered promiscuous mode [ 112.626335][ T6996] veth0_macvtap: entered promiscuous mode [ 112.642900][ T6996] veth1_macvtap: entered promiscuous mode [ 112.655230][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 112.655244][ T29] audit: type=1400 audit(1724138135.919:1195): avc: denied { setopt } for pid=7188 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.675093][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.692677][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.698046][ T29] audit: type=1400 audit(1724138135.919:1196): avc: denied { bind } for pid=7188 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.702572][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.734318][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.741298][ T7194] loop1: detected capacity change from 0 to 512 [ 112.744238][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.761501][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.771345][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.774531][ T7195] FAULT_INJECTION: forcing a failure. [ 112.774531][ T7195] name failslab, interval 1, probability 0, space 0, times 0 [ 112.782549][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.794427][ T7195] CPU: 0 UID: 0 PID: 7195 Comm: syz.3.1120 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 112.804215][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.814810][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.814827][ T7195] Call Trace: [ 112.825225][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.835252][ T7195] [ 112.835263][ T7195] dump_stack_lvl+0xf2/0x150 [ 112.856032][ T7195] dump_stack+0x15/0x20 [ 112.860250][ T7195] should_fail_ex+0x229/0x230 [ 112.864959][ T7195] ? vm_area_dup+0x2c/0x130 [ 112.869473][ T7195] should_failslab+0x8f/0xb0 [ 112.874075][ T7195] kmem_cache_alloc_noprof+0x4c/0x290 [ 112.879543][ T7195] vm_area_dup+0x2c/0x130 [ 112.884011][ T7195] copy_mm+0x60b/0x10e0 [ 112.888249][ T7195] copy_process+0xee1/0x1fc0 [ 112.892927][ T7195] kernel_clone+0x167/0x5e0 [ 112.897439][ T7195] ? vfs_write+0x5a5/0x900 [ 112.901892][ T7195] __x64_sys_clone+0xe8/0x120 [ 112.906595][ T7195] x64_sys_call+0x2d23/0x2d60 [ 112.911285][ T7195] do_syscall_64+0xc9/0x1c0 [ 112.915798][ T7195] ? clear_bhb_loop+0x55/0xb0 [ 112.920561][ T7195] ? clear_bhb_loop+0x55/0xb0 [ 112.925421][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.931325][ T7195] RIP: 0033:0x7ff4cc5f9e79 [ 112.935739][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.955368][ T7195] RSP: 002b:00007ff4cb276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 112.963792][ T7195] RAX: ffffffffffffffda RBX: 00007ff4cc795f80 RCX: 00007ff4cc5f9e79 [ 112.971840][ T7195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.979811][ T7195] RBP: 00007ff4cb277090 R08: 0000000000000000 R09: 0000000000000000 [ 112.987784][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.995830][ T7195] R13: 0000000000000000 R14: 00007ff4cc795f80 R15: 00007ffe74d4b4d8 [ 113.003843][ T7195] [ 113.009625][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.011427][ T7194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 113.026708][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.037335][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.047264][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.058413][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.068234][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.078762][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.089303][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.099934][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.109753][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.120785][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.125510][ T7194] System zones: 0-2, 18-18, 34-34 [ 113.132347][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.146041][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 113.162138][ T7194] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1119: bg 0: block 248: padding at end of block bitmap is not set [ 113.179470][ T6996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.186162][ T7194] Quota error (device loop1): write_blk: dquota write failed [ 113.188251][ T6996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.195666][ T7194] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 113.204261][ T6996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.219232][ T7194] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1119: Failed to acquire dquot type 1 [ 113.223502][ T6996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.261094][ T7194] EXT4-fs (loop1): 1 truncate cleaned up [ 113.272719][ T7194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.286380][ T7194] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.300609][ T7206] FAULT_INJECTION: forcing a failure. [ 113.300609][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 113.313379][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.3.1124 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 113.324066][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.334181][ T7206] Call Trace: [ 113.337461][ T7206] [ 113.340394][ T7206] dump_stack_lvl+0xf2/0x150 [ 113.345052][ T7206] dump_stack+0x15/0x20 [ 113.349222][ T7206] should_fail_ex+0x229/0x230 [ 113.353914][ T7206] ? security_prepare_creds+0x4c/0x100 [ 113.359434][ T7206] should_failslab+0x8f/0xb0 [ 113.364122][ T7206] __kmalloc_noprof+0xa5/0x370 [ 113.368894][ T7206] security_prepare_creds+0x4c/0x100 [ 113.374244][ T7206] prepare_creds+0x346/0x480 [ 113.378842][ T7206] copy_creds+0x90/0x3f0 [ 113.383175][ T7206] copy_process+0x64b/0x1fc0 [ 113.387832][ T7206] ? kstrtouint_from_user+0xb0/0xe0 [ 113.393040][ T7206] kernel_clone+0x167/0x5e0 [ 113.397647][ T7206] ? vfs_write+0x5a5/0x900 [ 113.402076][ T7206] __x64_sys_clone+0xe8/0x120 [ 113.406763][ T7206] x64_sys_call+0x2d23/0x2d60 [ 113.411451][ T7206] do_syscall_64+0xc9/0x1c0 [ 113.415976][ T7206] ? clear_bhb_loop+0x55/0xb0 [ 113.420669][ T7206] ? clear_bhb_loop+0x55/0xb0 [ 113.425489][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.431454][ T7206] RIP: 0033:0x7ff4cc5f9e79 [ 113.435869][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.455554][ T7206] RSP: 002b:00007ff4cb276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 113.464147][ T7206] RAX: ffffffffffffffda RBX: 00007ff4cc795f80 RCX: 00007ff4cc5f9e79 [ 113.472128][ T7206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.480201][ T7206] RBP: 00007ff4cb277090 R08: 0000000000000000 R09: 0000000000000000 [ 113.488174][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.496145][ T7206] R13: 0000000000000000 R14: 00007ff4cc795f80 R15: 00007ffe74d4b4d8 [ 113.504185][ T7206] [ 113.518972][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.555519][ T29] audit: type=1326 audit(1724138136.819:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.3.1128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4cc5f9e79 code=0x0 [ 113.583578][ T7219] tipc: Started in network mode [ 113.588507][ T7219] tipc: Node identity -name-of, cluster identity 4711 [ 113.595293][ T7219] tipc: Enabling of bearer rejected, failed to enable media [ 113.620624][ T7225] netem: change failed [ 113.662409][ T7229] siw: device registration error -23 [ 113.700446][ T29] audit: type=1400 audit(1724138136.969:1198): avc: denied { name_bind } for pid=7233 comm="syz.4.1136" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 113.721355][ T29] audit: type=1400 audit(1724138136.969:1199): avc: denied { node_bind } for pid=7233 comm="syz.4.1136" saddr=fe88::5 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 113.754865][ T29] audit: type=1400 audit(1724138137.019:1200): avc: denied { write } for pid=7236 comm="syz.1.1137" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.783815][ T7240] Â: renamed from pim6reg1 [ 113.791498][ T29] audit: type=1400 audit(1724138137.059:1201): avc: denied { append } for pid=7238 comm="syz.0.1138" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.832602][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1137'. [ 113.847932][ T7237] loop1: detected capacity change from 0 to 512 [ 113.859642][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.872439][ T7237] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.893484][ T7237] bond1: entered promiscuous mode [ 113.898562][ T7237] bond1: entered allmulticast mode [ 113.904141][ T7237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.911753][ T7251] FAULT_INJECTION: forcing a failure. [ 113.911753][ T7251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.925673][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.0.1140 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 113.936357][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.946417][ T7251] Call Trace: [ 113.949709][ T7251] [ 113.952645][ T7251] dump_stack_lvl+0xf2/0x150 [ 113.957251][ T7251] dump_stack+0x15/0x20 [ 113.961426][ T7251] should_fail_ex+0x229/0x230 [ 113.966112][ T7251] should_fail_alloc_page+0xfd/0x110 [ 113.971433][ T7251] __alloc_pages_noprof+0x109/0x360 [ 113.976660][ T7251] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 113.982043][ T7251] alloc_pages_noprof+0xe1/0x100 [ 113.986988][ T7251] pte_alloc_one+0x32/0xf0 [ 113.991418][ T7251] __pte_alloc+0x33/0x270 [ 113.995755][ T7251] copy_page_range+0x338f/0x38c0 [ 114.000711][ T7251] copy_mm+0x973/0x10e0 [ 114.004890][ T7251] copy_process+0xee1/0x1fc0 [ 114.009499][ T7251] kernel_clone+0x167/0x5e0 [ 114.014096][ T7251] ? vfs_write+0x5a5/0x900 [ 114.018546][ T7251] __x64_sys_clone+0xe8/0x120 [ 114.023246][ T7251] x64_sys_call+0x2d23/0x2d60 [ 114.027963][ T7251] do_syscall_64+0xc9/0x1c0 [ 114.032514][ T7251] ? clear_bhb_loop+0x55/0xb0 [ 114.037222][ T7251] ? clear_bhb_loop+0x55/0xb0 [ 114.041910][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.047816][ T7251] RIP: 0033:0x7f4158b99e79 [ 114.052235][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.071845][ T7251] RSP: 002b:00007f41577f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.080263][ T7251] RAX: ffffffffffffffda RBX: 00007f4158d36058 RCX: 00007f4158b99e79 [ 114.088235][ T7251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.096204][ T7251] RBP: 00007f41577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.104170][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.112140][ T7251] R13: 0000000000000000 R14: 00007f4158d36058 R15: 00007ffc494d4c28 [ 114.120112][ T7251] [ 114.130523][ T7237] bond1 (unregistering): Released all slaves [ 114.206408][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.230859][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 114.272188][ T7258] FAULT_INJECTION: forcing a failure. [ 114.272188][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 114.284854][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.1.1143 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 114.295530][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.305579][ T7258] Call Trace: [ 114.308881][ T7258] [ 114.311889][ T7258] dump_stack_lvl+0xf2/0x150 [ 114.316559][ T7258] dump_stack+0x15/0x20 [ 114.320772][ T7258] should_fail_ex+0x229/0x230 [ 114.325471][ T7258] ? vm_area_dup+0x98/0x130 [ 114.330065][ T7258] should_failslab+0x8f/0xb0 [ 114.334675][ T7258] kmem_cache_alloc_noprof+0x4c/0x290 [ 114.340050][ T7258] vm_area_dup+0x98/0x130 [ 114.344428][ T7258] copy_mm+0x60b/0x10e0 [ 114.348730][ T7258] copy_process+0xee1/0x1fc0 [ 114.353320][ T7258] kernel_clone+0x167/0x5e0 [ 114.357863][ T7258] ? vfs_write+0x5a5/0x900 [ 114.362303][ T7258] __x64_sys_clone+0xe8/0x120 [ 114.367040][ T7258] x64_sys_call+0x2d23/0x2d60 [ 114.371719][ T7258] do_syscall_64+0xc9/0x1c0 [ 114.376250][ T7258] ? clear_bhb_loop+0x55/0xb0 [ 114.380977][ T7258] ? clear_bhb_loop+0x55/0xb0 [ 114.385682][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.391637][ T7258] RIP: 0033:0x7ff4294b9e79 [ 114.396052][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.415723][ T7258] RSP: 002b:00007ff428136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.424142][ T7258] RAX: ffffffffffffffda RBX: 00007ff429655f80 RCX: 00007ff4294b9e79 [ 114.432130][ T7258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.440192][ T7258] RBP: 00007ff428137090 R08: 0000000000000000 R09: 0000000000000000 [ 114.448218][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.456252][ T7258] R13: 0000000000000000 R14: 00007ff429655f80 R15: 00007ffc4c64a088 [ 114.464227][ T7258] [ 114.469503][ T7263] netem: change failed [ 114.518414][ T7267] loop3: detected capacity change from 0 to 512 [ 114.557436][ T7267] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 114.574888][ T7267] System zones: 0-2, 18-18, 34-34 [ 114.587772][ T7267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1147: bg 0: block 248: padding at end of block bitmap is not set [ 114.606726][ T7267] Quota error (device loop3): write_blk: dquota write failed [ 114.618289][ T7267] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1147: Failed to acquire dquot type 1 [ 114.623374][ T7275] loop4: detected capacity change from 0 to 256 [ 114.637673][ T7267] EXT4-fs (loop3): 1 truncate cleaned up [ 114.643865][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.647209][ T7275] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.657479][ T7267] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.692455][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.721562][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 114.741295][ T7283] syz.1.1154[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.741356][ T7283] syz.1.1154[7283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.766274][ T7277] loop4: detected capacity change from 0 to 512 [ 114.770359][ T7281] loop0: detected capacity change from 0 to 2048 [ 114.791162][ T7277] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.809954][ T7277] EXT4-fs (loop4): 1 truncate cleaned up [ 114.816507][ T7277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.830764][ T7288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1155'. [ 114.843641][ T7288] loop3: detected capacity change from 0 to 512 [ 114.867212][ T7288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.895777][ T7288] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.914582][ T7292] loop0: detected capacity change from 0 to 256 [ 114.922696][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1155'. [ 114.944941][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.969063][ T7292] FAT-fs (loop0): Directory bread(block 64) failed [ 114.983763][ T7292] FAT-fs (loop0): Directory bread(block 65) failed [ 114.993035][ T7295] hsr0: entered promiscuous mode [ 114.999460][ T7295] macvlan2: entered allmulticast mode [ 115.004870][ T7295] hsr0: entered allmulticast mode [ 115.010037][ T7295] hsr_slave_0: entered allmulticast mode [ 115.015908][ T7295] hsr_slave_1: entered allmulticast mode [ 115.031325][ T7292] FAT-fs (loop0): Directory bread(block 66) failed [ 115.039841][ T7292] FAT-fs (loop0): Directory bread(block 67) failed [ 115.051858][ T7292] FAT-fs (loop0): Directory bread(block 68) failed [ 115.060522][ T7295] hsr0: left allmulticast mode [ 115.065345][ T7295] hsr_slave_0: left allmulticast mode [ 115.070789][ T7295] hsr_slave_1: left allmulticast mode [ 115.078105][ T7292] FAT-fs (loop0): Directory bread(block 69) failed [ 115.084712][ T7292] FAT-fs (loop0): Directory bread(block 70) failed [ 115.104537][ T7292] FAT-fs (loop0): Directory bread(block 71) failed [ 115.112522][ T7292] FAT-fs (loop0): Directory bread(block 72) failed [ 115.119114][ T7292] FAT-fs (loop0): Directory bread(block 73) failed [ 115.175131][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 115.238030][ T7318] FAULT_INJECTION: forcing a failure. [ 115.238030][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.251211][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.4.1162 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 115.261967][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 115.272035][ T7318] Call Trace: [ 115.275363][ T7318] [ 115.278294][ T7318] dump_stack_lvl+0xf2/0x150 [ 115.282908][ T7318] dump_stack+0x15/0x20 [ 115.287239][ T7318] should_fail_ex+0x229/0x230 [ 115.292061][ T7318] should_fail+0xb/0x10 [ 115.296288][ T7318] should_fail_usercopy+0x1a/0x20 [ 115.301418][ T7318] _copy_to_user+0x1e/0xa0 [ 115.305858][ T7318] bpf_verifier_vlog+0x214/0x4d0 [ 115.310824][ T7318] __btf_verifier_log+0x80/0xb0 [ 115.315761][ T7318] ? btf_parse_hdr+0x264/0x3a0 [ 115.320543][ T7318] ? __kmalloc_node_noprof+0x2fa/0x380 [ 115.326033][ T7318] ? should_fail_ex+0xd7/0x230 [ 115.330830][ T7318] btf_parse_hdr+0x276/0x3a0 [ 115.335433][ T7318] btf_new_fd+0x270/0x790 [ 115.339835][ T7318] bpf_btf_load+0x115/0x130 [ 115.344373][ T7318] __sys_bpf+0x686/0x7a0 [ 115.348639][ T7318] __x64_sys_bpf+0x43/0x50 [ 115.353105][ T7318] x64_sys_call+0x2625/0x2d60 [ 115.357877][ T7318] do_syscall_64+0xc9/0x1c0 [ 115.362403][ T7318] ? clear_bhb_loop+0x55/0xb0 [ 115.367094][ T7318] ? clear_bhb_loop+0x55/0xb0 [ 115.371843][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.377757][ T7318] RIP: 0033:0x7f218e289e79 [ 115.382176][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.401797][ T7318] RSP: 002b:00007f218cf01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.410239][ T7318] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 115.418214][ T7318] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 115.426203][ T7318] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 115.434177][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.442155][ T7318] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 115.450415][ T7318] [ 115.569550][ T50] kworker/u8:3: attempt to access beyond end of device [ 115.569550][ T50] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 115.590756][ T50] kworker/u8:3: attempt to access beyond end of device [ 115.590756][ T50] loop0: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 115.617477][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.625148][ T50] kworker/u8:3: attempt to access beyond end of device [ 115.625148][ T50] loop0: rw=1, sector=1864, nr_sectors = 15312 limit=256 [ 115.674890][ T50] kworker/u8:3: attempt to access beyond end of device [ 115.674890][ T50] loop0: rw=1, sector=17176, nr_sectors = 16624 limit=256 [ 115.679170][ T7328] loop3: detected capacity change from 0 to 1024 [ 115.730995][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.781460][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.848915][ T7334] siw: device registration error -23 [ 115.884205][ T7335] loop0: detected capacity change from 0 to 4096 [ 115.897966][ T7335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.943834][ T6996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.965822][ T7342] netlink: 'syz.3.1171': attribute type 10 has an invalid length. [ 116.020456][ T7351] bond2: entered promiscuous mode [ 116.025552][ T7351] bond2: entered allmulticast mode [ 116.030810][ T7351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.042379][ T7351] bond2 (unregistering): Released all slaves [ 116.049198][ T7353] FAULT_INJECTION: forcing a failure. [ 116.049198][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 116.062629][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.0.1172 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 116.073851][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.083942][ T7353] Call Trace: [ 116.087219][ T7353] [ 116.090196][ T7353] dump_stack_lvl+0xf2/0x150 [ 116.094802][ T7353] dump_stack+0x15/0x20 [ 116.098971][ T7353] should_fail_ex+0x229/0x230 [ 116.103664][ T7353] ? vm_area_dup+0x2c/0x130 [ 116.108198][ T7353] should_failslab+0x8f/0xb0 [ 116.112806][ T7353] kmem_cache_alloc_noprof+0x4c/0x290 [ 116.118207][ T7353] ? __vm_enough_memory+0xdf/0x2b0 [ 116.123537][ T7353] vm_area_dup+0x2c/0x130 [ 116.128033][ T7353] copy_mm+0x60b/0x10e0 [ 116.132204][ T7353] copy_process+0xee1/0x1fc0 [ 116.136891][ T7353] kernel_clone+0x167/0x5e0 [ 116.141425][ T7353] ? vfs_write+0x5a5/0x900 [ 116.145862][ T7353] __x64_sys_clone+0xe8/0x120 [ 116.150540][ T7353] x64_sys_call+0x2d23/0x2d60 [ 116.155219][ T7353] do_syscall_64+0xc9/0x1c0 [ 116.159734][ T7353] ? clear_bhb_loop+0x55/0xb0 [ 116.164447][ T7353] ? clear_bhb_loop+0x55/0xb0 [ 116.169206][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.175279][ T7353] RIP: 0033:0x7f4158b99e79 [ 116.179716][ T7353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.199367][ T7353] RSP: 002b:00007f41577f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 116.207821][ T7353] RAX: ffffffffffffffda RBX: 00007f4158d36058 RCX: 00007f4158b99e79 [ 116.215833][ T7353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.223882][ T7353] RBP: 00007f41577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.231850][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.239901][ T7353] R13: 0000000000000000 R14: 00007f4158d36058 R15: 00007ffc494d4c28 [ 116.247880][ T7353] [ 116.358221][ T7363] netlink: 'syz.4.1177': attribute type 2 has an invalid length. [ 116.404695][ T7372] netlink: 'syz.1.1181': attribute type 2 has an invalid length. [ 116.412517][ T7372] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 116.420357][ T7372] netlink: 'syz.1.1181': attribute type 2 has an invalid length. [ 116.447466][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 116.475656][ T7380] bond1: entered promiscuous mode [ 116.480746][ T7380] bond1: entered allmulticast mode [ 116.486268][ T7380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.499808][ T7380] bond1 (unregistering): Released all slaves [ 116.507693][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1184'. [ 116.519646][ T7382] loop4: detected capacity change from 0 to 512 [ 116.537877][ T7382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.550494][ T7382] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.562674][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1184'. [ 116.593661][ T7389] loop1: detected capacity change from 0 to 512 [ 116.607209][ T7389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.619855][ T7389] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.652871][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.717318][ T7398] loop1: detected capacity change from 0 to 1024 [ 116.726167][ T7398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.747898][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.767275][ T7401] loop1: detected capacity change from 0 to 256 [ 116.773711][ T7401] vfat: Bad value for 'fmask' [ 116.786163][ T7401] loop1: detected capacity change from 0 to 512 [ 116.792591][ T7401] ext2: Unknown parameter 'subj_type' [ 116.832947][ T7405] Cannot find set identified by id 0 to match [ 116.874635][ T7407] FAULT_INJECTION: forcing a failure. [ 116.874635][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.888561][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.0.1194 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 116.899391][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.909582][ T7407] Call Trace: [ 116.912898][ T7407] [ 116.915853][ T7407] dump_stack_lvl+0xf2/0x150 [ 116.920515][ T7407] dump_stack+0x15/0x20 [ 116.924756][ T7407] should_fail_ex+0x229/0x230 [ 116.929462][ T7407] should_fail+0xb/0x10 [ 116.932488][ T7410] loop1: detected capacity change from 0 to 512 [ 116.933729][ T7407] should_fail_usercopy+0x1a/0x20 [ 116.945009][ T7407] _copy_from_user+0x1e/0xd0 [ 116.949775][ T7407] copy_msghdr_from_user+0x54/0x2a0 [ 116.955077][ T7407] __sys_sendmsg+0x17d/0x280 [ 116.959693][ T7407] __x64_sys_sendmsg+0x46/0x50 [ 116.964519][ T7407] x64_sys_call+0x2689/0x2d60 [ 116.969227][ T7407] do_syscall_64+0xc9/0x1c0 [ 116.974097][ T7407] ? clear_bhb_loop+0x55/0xb0 [ 116.978843][ T7407] ? clear_bhb_loop+0x55/0xb0 [ 116.983580][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.989494][ T7407] RIP: 0033:0x7f4158b99e79 [ 116.993911][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.013594][ T7407] RSP: 002b:00007f4157817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.022164][ T7407] RAX: ffffffffffffffda RBX: 00007f4158d35f80 RCX: 00007f4158b99e79 [ 117.030263][ T7407] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 117.038257][ T7407] RBP: 00007f4157817090 R08: 0000000000000000 R09: 0000000000000000 [ 117.046311][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.054288][ T7407] R13: 0000000000000000 R14: 00007f4158d35f80 R15: 00007ffc494d4c28 [ 117.062268][ T7407] [ 117.067492][ T7410] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 117.151273][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 117.161002][ T7410] lo speed is unknown, defaulting to 1000 [ 117.174209][ T7416] loop0: detected capacity change from 0 to 512 [ 117.209465][ T7416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.226998][ T7416] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.247391][ T7416] bond1: entered promiscuous mode [ 117.252476][ T7416] bond1: entered allmulticast mode [ 117.258951][ T7416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.297710][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.309288][ T6996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.327634][ T7438] vcan0: tx drop: invalid da for name 0x00c7000000000000 [ 117.348153][ T7440] cgroup: Name too long [ 117.383641][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 117.403686][ T7452] loop3: detected capacity change from 0 to 256 [ 117.434324][ T7463] FAULT_INJECTION: forcing a failure. [ 117.434324][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 117.446986][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.4.1214 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 117.457655][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 117.467747][ T7463] Call Trace: [ 117.471030][ T7463] [ 117.473956][ T7463] dump_stack_lvl+0xf2/0x150 [ 117.478617][ T7463] dump_stack+0x15/0x20 [ 117.482792][ T7463] should_fail_ex+0x229/0x230 [ 117.487509][ T7463] ? alloc_fdtable+0x72/0x190 [ 117.492281][ T7463] should_failslab+0x8f/0xb0 [ 117.496900][ T7463] __kmalloc_cache_noprof+0x4b/0x2a0 [ 117.502215][ T7463] alloc_fdtable+0x72/0x190 [ 117.506743][ T7463] dup_fd+0x56d/0x6c0 [ 117.510800][ T7463] copy_files+0xc1/0x130 [ 117.515059][ T7463] copy_process+0xe45/0x1fc0 [ 117.519665][ T7463] kernel_clone+0x167/0x5e0 [ 117.524166][ T7463] ? vfs_write+0x5a5/0x900 [ 117.528594][ T7463] __x64_sys_clone+0xe8/0x120 [ 117.533299][ T7463] x64_sys_call+0x2d23/0x2d60 [ 117.538089][ T7463] do_syscall_64+0xc9/0x1c0 [ 117.542692][ T7463] ? clear_bhb_loop+0x55/0xb0 [ 117.547458][ T7463] ? clear_bhb_loop+0x55/0xb0 [ 117.552176][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.558096][ T7463] RIP: 0033:0x7f218e289e79 [ 117.562609][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.582250][ T7463] RSP: 002b:00007f218cf00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 117.590656][ T7463] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 117.598693][ T7463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.606807][ T7463] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 117.614780][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.622762][ T7463] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 117.630874][ T7463] [ 117.701066][ T7475] loop4: detected capacity change from 0 to 512 [ 117.727710][ T7475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.743462][ T7475] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.768155][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 117.768166][ T29] audit: type=1400 audit(1724138141.039:1206): avc: denied { write } for pid=7474 comm="syz.4.1219" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.782010][ T7482] loop1: detected capacity change from 0 to 512 [ 117.806811][ T7482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 117.814942][ T7482] System zones: 0-2, 18-18, 34-34 [ 117.822361][ T7482] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1221: bg 0: block 248: padding at end of block bitmap is not set [ 117.837136][ T7482] Quota error (device loop1): write_blk: dquota write failed [ 117.844635][ T7482] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 117.854942][ T7482] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1221: Failed to acquire dquot type 1 [ 117.867895][ T7482] EXT4-fs (loop1): 1 truncate cleaned up [ 117.873982][ T7482] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.902520][ T29] audit: type=1400 audit(1724138141.169:1207): avc: denied { create } for pid=7486 comm="syz.1.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.925193][ T29] audit: type=1400 audit(1724138141.179:1208): avc: denied { shutdown } for pid=7486 comm="syz.1.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.019367][ T7501] loop1: detected capacity change from 0 to 1024 [ 118.026136][ T7501] EXT4-fs: Ignoring removed orlov option [ 118.192705][ T7508] FAULT_INJECTION: forcing a failure. [ 118.192705][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 118.206040][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.1.1228 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 118.216776][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.226921][ T7508] Call Trace: [ 118.230201][ T7508] [ 118.233151][ T7508] dump_stack_lvl+0xf2/0x150 [ 118.237765][ T7508] dump_stack+0x15/0x20 [ 118.241923][ T7508] should_fail_ex+0x229/0x230 [ 118.246678][ T7508] ? vm_area_dup+0x98/0x130 [ 118.251204][ T7508] should_failslab+0x8f/0xb0 [ 118.255805][ T7508] kmem_cache_alloc_noprof+0x4c/0x290 [ 118.261201][ T7508] vm_area_dup+0x98/0x130 [ 118.265625][ T7508] copy_mm+0x60b/0x10e0 [ 118.269848][ T7508] copy_process+0xee1/0x1fc0 [ 118.274482][ T7508] kernel_clone+0x167/0x5e0 [ 118.279002][ T7508] ? vfs_write+0x5a5/0x900 [ 118.283482][ T7508] __x64_sys_clone+0xe8/0x120 [ 118.288288][ T7508] x64_sys_call+0x2d23/0x2d60 [ 118.292982][ T7508] do_syscall_64+0xc9/0x1c0 [ 118.297617][ T7508] ? clear_bhb_loop+0x55/0xb0 [ 118.302308][ T7508] ? clear_bhb_loop+0x55/0xb0 [ 118.307010][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.313014][ T7508] RIP: 0033:0x7ff4294b9e79 [ 118.317478][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.337242][ T7508] RSP: 002b:00007ff428115fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 118.345662][ T7508] RAX: ffffffffffffffda RBX: 00007ff429656058 RCX: 00007ff4294b9e79 [ 118.353707][ T7508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.361727][ T7508] RBP: 00007ff428116090 R08: 0000000000000000 R09: 0000000000000000 [ 118.369700][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.377672][ T7508] R13: 0000000000000000 R14: 00007ff429656058 R15: 00007ffc4c64a088 [ 118.385721][ T7508] [ 118.550375][ T7517] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1230'. [ 118.554000][ T7519] FAULT_INJECTION: forcing a failure. [ 118.554000][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.572640][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.0.1231 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 118.573920][ T7521] FAULT_INJECTION: forcing a failure. [ 118.573920][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 118.583323][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.583343][ T7519] Call Trace: [ 118.583351][ T7519] [ 118.583358][ T7519] dump_stack_lvl+0xf2/0x150 [ 118.616853][ T7519] dump_stack+0x15/0x20 [ 118.621076][ T7519] should_fail_ex+0x229/0x230 [ 118.625855][ T7519] should_fail+0xb/0x10 [ 118.630018][ T7519] should_fail_usercopy+0x1a/0x20 [ 118.635169][ T7519] _copy_to_user+0x1e/0xa0 [ 118.639597][ T7519] bpf_verifier_vlog+0x214/0x4d0 [ 118.644570][ T7519] __btf_verifier_log+0x80/0xb0 [ 118.649536][ T7519] __btf_verifier_log_type+0x224/0x320 [ 118.655042][ T7519] ? btf_func_proto_check_meta+0xa8/0xf0 [ 118.660762][ T7519] btf_func_proto_check_meta+0xc4/0xf0 [ 118.666285][ T7519] btf_parse_type_sec+0x2a1/0x1510 [ 118.671396][ T7519] ? btf_check_sec_info+0x1b8/0x1d0 [ 118.676658][ T7519] ? btf_parse_hdr+0x396/0x3a0 [ 118.681427][ T7519] btf_new_fd+0x2dc/0x790 [ 118.685856][ T7519] bpf_btf_load+0x115/0x130 [ 118.690384][ T7519] __sys_bpf+0x686/0x7a0 [ 118.694651][ T7519] __x64_sys_bpf+0x43/0x50 [ 118.699097][ T7519] x64_sys_call+0x2625/0x2d60 [ 118.703854][ T7519] do_syscall_64+0xc9/0x1c0 [ 118.708367][ T7519] ? clear_bhb_loop+0x55/0xb0 [ 118.713107][ T7519] ? clear_bhb_loop+0x55/0xb0 [ 118.717820][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.723732][ T7519] RIP: 0033:0x7f4158b99e79 [ 118.728140][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.748037][ T7519] RSP: 002b:00007f4157817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.756537][ T7519] RAX: ffffffffffffffda RBX: 00007f4158d35f80 RCX: 00007f4158b99e79 [ 118.764508][ T7519] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 118.772929][ T7519] RBP: 00007f4157817090 R08: 0000000000000000 R09: 0000000000000000 [ 118.780928][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.788974][ T7519] R13: 0000000000000000 R14: 00007f4158d35f80 R15: 00007ffc494d4c28 [ 118.796951][ T7519] [ 118.799978][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.4.1232 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 118.810678][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.820742][ T7521] Call Trace: [ 118.824118][ T7521] [ 118.827100][ T7521] dump_stack_lvl+0xf2/0x150 [ 118.831697][ T7521] dump_stack+0x15/0x20 [ 118.835881][ T7521] should_fail_ex+0x229/0x230 [ 118.840659][ T7521] ? __alloc_skb+0x10b/0x310 [ 118.845264][ T7521] should_failslab+0x8f/0xb0 [ 118.849963][ T7521] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 118.855844][ T7521] __alloc_skb+0x10b/0x310 [ 118.860289][ T7521] netlink_alloc_large_skb+0xad/0xe0 [ 118.865598][ T7521] netlink_sendmsg+0x3b4/0x6e0 [ 118.870451][ T7521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.875800][ T7521] __sock_sendmsg+0x140/0x180 [ 118.880574][ T7521] ____sys_sendmsg+0x312/0x410 [ 118.885435][ T7521] __sys_sendmsg+0x1e9/0x280 [ 118.890136][ T7521] __x64_sys_sendmsg+0x46/0x50 [ 118.891843][ T7533] FAULT_INJECTION: forcing a failure. [ 118.891843][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 118.894937][ T7521] x64_sys_call+0x2689/0x2d60 [ 118.894973][ T7521] do_syscall_64+0xc9/0x1c0 [ 118.916790][ T7521] ? clear_bhb_loop+0x55/0xb0 [ 118.921502][ T7521] ? clear_bhb_loop+0x55/0xb0 [ 118.926191][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.932118][ T7521] RIP: 0033:0x7f218e289e79 [ 118.936611][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.956362][ T7521] RSP: 002b:00007f218cf01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.964779][ T7521] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 118.972766][ T7521] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 118.980919][ T7521] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 118.989012][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.997026][ T7521] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 119.005035][ T7521] [ 119.008074][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.0.1236 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 119.018806][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.028868][ T7533] Call Trace: [ 119.032182][ T7533] [ 119.035139][ T7533] dump_stack_lvl+0xf2/0x150 [ 119.039753][ T7533] dump_stack+0x15/0x20 [ 119.043922][ T7533] should_fail_ex+0x229/0x230 [ 119.048658][ T7533] ? rds_message_alloc+0x43/0x110 [ 119.053703][ T7533] should_failslab+0x8f/0xb0 [ 119.058306][ T7533] __kmalloc_noprof+0xa5/0x370 [ 119.063083][ T7533] rds_message_alloc+0x43/0x110 [ 119.067964][ T7533] rds_sendmsg+0x833/0x1400 [ 119.072481][ T7533] ? __pfx_rds_sendmsg+0x10/0x10 [ 119.077459][ T7533] __sock_sendmsg+0x140/0x180 [ 119.082164][ T7533] __sys_sendto+0x1e5/0x260 [ 119.086682][ T7533] __x64_sys_sendto+0x78/0x90 [ 119.091363][ T7533] x64_sys_call+0x2959/0x2d60 [ 119.096052][ T7533] do_syscall_64+0xc9/0x1c0 [ 119.100621][ T7533] ? clear_bhb_loop+0x55/0xb0 [ 119.105387][ T7533] ? clear_bhb_loop+0x55/0xb0 [ 119.110139][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.116062][ T7533] RIP: 0033:0x7f4158b99e79 [ 119.120479][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.140092][ T7533] RSP: 002b:00007f4157817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 119.148558][ T7533] RAX: ffffffffffffffda RBX: 00007f4158d35f80 RCX: 00007f4158b99e79 [ 119.156571][ T7533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.164539][ T7533] RBP: 00007f4157817090 R08: 0000000000000000 R09: 0000000000000000 [ 119.172506][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.180553][ T7533] R13: 0000000000000000 R14: 00007f4158d35f80 R15: 00007ffc494d4c28 [ 119.188564][ T7533] [ 119.228406][ T7539] loop0: detected capacity change from 0 to 256 [ 119.229131][ T7541] syz.4.1240[7541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.238528][ T7539] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.250697][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.269033][ T7541] syz.4.1240[7541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.283616][ T29] audit: type=1326 audit(1724138142.549:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 119.318546][ T29] audit: type=1326 audit(1724138142.549:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 119.342427][ T29] audit: type=1326 audit(1724138142.549:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 119.366203][ T29] audit: type=1326 audit(1724138142.549:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 119.389735][ T29] audit: type=1326 audit(1724138142.549:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.1.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 119.428596][ T7548] loop0: detected capacity change from 0 to 512 [ 119.447923][ T7548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 119.457605][ T7548] System zones: 0-2, 18-18, 34-34 [ 119.463390][ T7548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1241: bg 0: block 248: padding at end of block bitmap is not set [ 119.478509][ T7548] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1241: Failed to acquire dquot type 1 [ 119.493442][ T7548] EXT4-fs (loop0): 1 truncate cleaned up [ 119.501005][ T7548] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.602523][ T7561] loop1: detected capacity change from 0 to 128 [ 119.869663][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.884095][ T7562] lo speed is unknown, defaulting to 1000 [ 119.896929][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 119.911066][ T7570] loop0: detected capacity change from 0 to 512 [ 119.928815][ T7570] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.940819][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.963274][ T7570] bond2: entered promiscuous mode [ 119.968431][ T7570] bond2: entered allmulticast mode [ 119.973783][ T7570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.992919][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.030804][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.053945][ T7562] chnl_net:caif_netlink_parms(): no params data found [ 120.062811][ T7583] netlink: 'syz.0.1250': attribute type 49 has an invalid length. [ 120.084537][ T7583] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 120.107952][ T7583] loop0: detected capacity change from 0 to 512 [ 120.117927][ T7583] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.127073][ T7583] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 120.136768][ T7583] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 120.169319][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.177110][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.184694][ T7593] syz.4.1254[7593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.184844][ T7593] syz.4.1254[7593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.187402][ T7562] bridge_slave_0: entered allmulticast mode [ 120.223461][ T7562] bridge_slave_0: entered promiscuous mode [ 120.238352][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.245581][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.253266][ T7562] bridge_slave_1: entered allmulticast mode [ 120.261912][ T7562] bridge_slave_1: entered promiscuous mode [ 120.290778][ T28] bridge_slave_1: left allmulticast mode [ 120.296738][ T28] bridge_slave_1: left promiscuous mode [ 120.302463][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.313979][ T28] bridge_slave_0: left allmulticast mode [ 120.320020][ T28] bridge_slave_0: left promiscuous mode [ 120.325757][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.385954][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 120.398435][ T7599] loop0: detected capacity change from 0 to 512 [ 120.417052][ T7599] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.477829][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.488526][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.499142][ T28] bond0 (unregistering): Released all slaves [ 120.517981][ T7562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.534461][ T7599] bond3: entered promiscuous mode [ 120.539628][ T7599] bond3: entered allmulticast mode [ 120.544897][ T7599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.556626][ T7562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.605819][ T7562] team0: Port device team_slave_0 added [ 120.612888][ T7562] team0: Port device team_slave_1 added [ 120.675277][ T7622] loop3: detected capacity change from 0 to 1024 [ 120.685487][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.689555][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 120.692476][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.702687][ T7625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1265'. [ 120.727569][ T7562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.734401][ T7622] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.762757][ T7622] EXT4-fs (loop3): mount failed [ 120.768646][ T28] hsr_slave_0: left promiscuous mode [ 120.781257][ T28] hsr_slave_1: left promiscuous mode [ 120.790242][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.797772][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.813648][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.821876][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.831794][ T28] veth1_macvtap: left promiscuous mode [ 120.837322][ T28] veth0_macvtap: left promiscuous mode [ 120.842894][ T28] veth1_vlan: left promiscuous mode [ 120.848782][ T28] veth0_vlan: left promiscuous mode [ 120.962980][ T28] team0 (unregistering): Port device team_slave_1 removed [ 120.982563][ T28] team0 (unregistering): Port device team_slave_0 removed [ 121.037580][ T7562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.044652][ T7562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.046019][ T7647] FAULT_INJECTION: forcing a failure. [ 121.046019][ T7647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.070675][ T7562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.094925][ T7647] CPU: 1 UID: 0 PID: 7647 Comm: syz.3.1272 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 121.105624][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 121.115756][ T7647] Call Trace: [ 121.119032][ T7647] [ 121.121969][ T7647] dump_stack_lvl+0xf2/0x150 [ 121.126582][ T7647] dump_stack+0x15/0x20 [ 121.130902][ T7647] should_fail_ex+0x229/0x230 [ 121.135877][ T7647] should_fail+0xb/0x10 [ 121.140071][ T7647] should_fail_usercopy+0x1a/0x20 [ 121.145130][ T7647] _copy_from_iter+0xd3/0xb00 [ 121.149819][ T7647] ? kmalloc_reserve+0x16e/0x190 [ 121.154831][ T7647] ? __build_skb_around+0x196/0x1f0 [ 121.160030][ T7647] ? __alloc_skb+0x21f/0x310 [ 121.164618][ T7647] ? __virt_addr_valid+0x1ed/0x250 [ 121.169776][ T7647] ? __check_object_size+0x35b/0x510 [ 121.175128][ T7647] netlink_sendmsg+0x460/0x6e0 [ 121.179942][ T7647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.185227][ T7647] __sock_sendmsg+0x140/0x180 [ 121.189949][ T7647] ____sys_sendmsg+0x312/0x410 [ 121.194729][ T7647] __sys_sendmsg+0x1e9/0x280 [ 121.199432][ T7647] __x64_sys_sendmsg+0x46/0x50 [ 121.204196][ T7647] x64_sys_call+0x2689/0x2d60 [ 121.208962][ T7647] do_syscall_64+0xc9/0x1c0 [ 121.213577][ T7647] ? clear_bhb_loop+0x55/0xb0 [ 121.218425][ T7647] ? clear_bhb_loop+0x55/0xb0 [ 121.223120][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.229104][ T7647] RIP: 0033:0x7ff4cc5f9e79 [ 121.233615][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.253381][ T7647] RSP: 002b:00007ff4cb277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.261786][ T7647] RAX: ffffffffffffffda RBX: 00007ff4cc795f80 RCX: 00007ff4cc5f9e79 [ 121.269970][ T7647] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 121.278388][ T7647] RBP: 00007ff4cb277090 R08: 0000000000000000 R09: 0000000000000000 [ 121.286356][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.294378][ T7647] R13: 0000000000000000 R14: 00007ff4cc795f80 R15: 00007ffe74d4b4d8 [ 121.302348][ T7647] [ 121.325002][ T7562] hsr_slave_0: entered promiscuous mode [ 121.333285][ T7562] hsr_slave_1: entered promiscuous mode [ 121.343438][ T7651] loop3: detected capacity change from 0 to 512 [ 121.355798][ T7650] vlan2: entered promiscuous mode [ 121.357433][ T7653] loop4: detected capacity change from 0 to 512 [ 121.361016][ T7650] veth0_to_team: entered promiscuous mode [ 121.374988][ T7651] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.385619][ T7650] veth0_to_team: left promiscuous mode [ 121.406499][ T7653] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.420871][ T7653] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1275: corrupted inode contents [ 121.433004][ T7653] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.1275: mark_inode_dirty error [ 121.447086][ T7653] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1275: corrupted inode contents [ 121.478659][ T7653] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1275: Directory hole found for htree leaf block 0 [ 121.515679][ T7661] loop0: detected capacity change from 0 to 164 [ 121.528003][ T7653] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1275: Directory hole found for htree leaf block 0 [ 121.549003][ T7653] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1275: Directory hole found for htree leaf block 0 [ 121.749731][ T7672] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 121.880230][ T7562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.901594][ T7562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.919737][ T7562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.937890][ T7562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.993403][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.008944][ T7562] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.022440][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.029611][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.054272][ T7562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.064776][ T7562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.084598][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.087940][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 122.091693][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.142550][ T7680] loop0: detected capacity change from 0 to 512 [ 122.160657][ T7680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 122.180795][ T7680] System zones: 0-2, 18-18, 34-34 [ 122.189663][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.196339][ T7680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1283: bg 0: block 248: padding at end of block bitmap is not set [ 122.221194][ T7680] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.1283: Failed to acquire dquot type 1 [ 122.246104][ T7680] EXT4-fs (loop0): 1 truncate cleaned up [ 122.252235][ T7680] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.277680][ T7562] veth0_vlan: entered promiscuous mode [ 122.286437][ T7562] veth1_vlan: entered promiscuous mode [ 122.299196][ T7697] serio: Serial port ptm0 [ 122.302306][ T7562] veth0_macvtap: entered promiscuous mode [ 122.314695][ T7562] veth1_macvtap: entered promiscuous mode [ 122.325869][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.336445][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.346363][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.356872][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.366723][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.377323][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.387319][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.397957][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.407843][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.418377][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.430607][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.439058][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.449686][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.459549][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.470068][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.479984][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.490429][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.500290][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.510795][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.520625][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.531052][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.542291][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.552602][ T7716] FAULT_INJECTION: forcing a failure. [ 122.552602][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 122.559063][ T7562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.565482][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.0.1287 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 122.574050][ T7562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.584547][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.584564][ T7716] Call Trace: [ 122.584573][ T7716] [ 122.593226][ T7562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.603292][ T7716] dump_stack_lvl+0xf2/0x150 [ 122.606582][ T7562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.609484][ T7716] dump_stack+0x15/0x20 [ 122.635650][ T7716] should_fail_ex+0x229/0x230 [ 122.640403][ T7716] should_failslab+0x8f/0xb0 [ 122.645145][ T7716] kmem_cache_alloc_bulk_noprof+0x58/0x440 [ 122.651014][ T7716] ? mas_dup_build+0x1e8/0xd10 [ 122.655807][ T7716] ? should_failslab+0x8f/0xb0 [ 122.660638][ T7716] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 122.666275][ T7716] mas_dup_build+0x6df/0xd10 [ 122.670872][ T7716] __mt_dup+0xa4/0x160 [ 122.674945][ T7716] copy_mm+0x332/0x10e0 [ 122.679159][ T7716] copy_process+0xee1/0x1fc0 [ 122.683786][ T7716] kernel_clone+0x167/0x5e0 [ 122.688286][ T7716] ? vfs_write+0x5a5/0x900 [ 122.692734][ T7716] __x64_sys_clone+0xe8/0x120 [ 122.697422][ T7716] x64_sys_call+0x2d23/0x2d60 [ 122.702117][ T7716] do_syscall_64+0xc9/0x1c0 [ 122.706644][ T7716] ? clear_bhb_loop+0x55/0xb0 [ 122.711329][ T7716] ? clear_bhb_loop+0x55/0xb0 [ 122.716074][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.721997][ T7716] RIP: 0033:0x7f4158b99e79 [ 122.726432][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.746223][ T7716] RSP: 002b:00007f4157816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 122.754660][ T7716] RAX: ffffffffffffffda RBX: 00007f4158d35f80 RCX: 00007f4158b99e79 [ 122.762636][ T7716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.770610][ T7716] RBP: 00007f4157817090 R08: 0000000000000000 R09: 0000000000000000 [ 122.778619][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.786610][ T7716] R13: 0000000000000000 R14: 00007f4158d35f80 R15: 00007ffc494d4c28 [ 122.794584][ T7716] [ 122.816609][ T7718] FAULT_INJECTION: forcing a failure. [ 122.816609][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.829901][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.4.1289 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 122.839155][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 122.839196][ T29] audit: type=1400 audit(1724138146.109:1229): avc: denied { mounton } for pid=7719 comm="syz.0.1290" path="/46/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 122.840615][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.840632][ T7718] Call Trace: [ 122.840640][ T7718] [ 122.885678][ T7718] dump_stack_lvl+0xf2/0x150 [ 122.890381][ T7718] dump_stack+0x15/0x20 [ 122.894600][ T7718] should_fail_ex+0x229/0x230 [ 122.899378][ T7718] should_fail+0xb/0x10 [ 122.903544][ T7718] should_fail_usercopy+0x1a/0x20 [ 122.908640][ T7718] _copy_from_user+0x1e/0xd0 [ 122.913247][ T7718] copy_from_bpfptr+0x5e/0x90 [ 122.918001][ T7718] bpf_prog_load+0x712/0x1060 [ 122.922775][ T7718] __sys_bpf+0x463/0x7a0 [ 122.927102][ T7718] __x64_sys_bpf+0x43/0x50 [ 122.931556][ T7718] x64_sys_call+0x2625/0x2d60 [ 122.936272][ T7718] do_syscall_64+0xc9/0x1c0 [ 122.940792][ T7718] ? clear_bhb_loop+0x55/0xb0 [ 122.945556][ T7718] ? clear_bhb_loop+0x55/0xb0 [ 122.950261][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.956190][ T7718] RIP: 0033:0x7f218e289e79 [ 122.960669][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.980278][ T7718] RSP: 002b:00007f218cf01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.988757][ T7718] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 122.996773][ T7718] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 123.004819][ T7718] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 123.012842][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.020829][ T7718] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 123.028807][ T7718] [ 123.041441][ T29] audit: type=1400 audit(1724138146.309:1230): avc: denied { execute } for pid=7719 comm="syz.0.1290" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 123.076985][ T29] audit: type=1400 audit(1724138146.309:1231): avc: denied { unmount } for pid=6996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 123.163903][ T7744] siw: device registration error -23 [ 123.211464][ T7746] wireguard0: entered promiscuous mode [ 123.217006][ T7746] wireguard0: entered allmulticast mode [ 123.389682][ T7760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1303'. [ 123.540039][ T7768] FAULT_INJECTION: forcing a failure. [ 123.540039][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 123.552701][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.0.1304 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 123.563443][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 123.573501][ T7768] Call Trace: [ 123.576786][ T7768] [ 123.576997][ T7770] loop3: detected capacity change from 0 to 1024 [ 123.579740][ T7768] dump_stack_lvl+0xf2/0x150 [ 123.579835][ T7768] dump_stack+0x15/0x20 [ 123.579898][ T7768] should_fail_ex+0x229/0x230 [ 123.599713][ T7768] ? vm_area_dup+0x98/0x130 [ 123.602525][ T7772] FAULT_INJECTION: forcing a failure. [ 123.602525][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 123.604238][ T7768] should_failslab+0x8f/0xb0 [ 123.621604][ T7768] kmem_cache_alloc_noprof+0x4c/0x290 [ 123.626987][ T7768] vm_area_dup+0x98/0x130 [ 123.631416][ T7768] copy_mm+0x60b/0x10e0 [ 123.635609][ T7768] copy_process+0xee1/0x1fc0 [ 123.640253][ T7768] kernel_clone+0x167/0x5e0 [ 123.644835][ T7768] ? vfs_write+0x5a5/0x900 [ 123.649268][ T7768] __x64_sys_clone+0xe8/0x120 [ 123.653955][ T7768] x64_sys_call+0x2d23/0x2d60 [ 123.658651][ T7768] do_syscall_64+0xc9/0x1c0 [ 123.663208][ T7768] ? clear_bhb_loop+0x55/0xb0 [ 123.667971][ T7768] ? clear_bhb_loop+0x55/0xb0 [ 123.672660][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.678675][ T7768] RIP: 0033:0x7f4158b99e79 [ 123.683145][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.702773][ T7768] RSP: 002b:00007f41577f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 123.711239][ T7768] RAX: ffffffffffffffda RBX: 00007f4158d36058 RCX: 00007f4158b99e79 [ 123.719221][ T7768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.727201][ T7768] RBP: 00007f41577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.735195][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.743166][ T7768] R13: 0000000000000000 R14: 00007f4158d36058 R15: 00007ffc494d4c28 [ 123.751175][ T7768] [ 123.754270][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.1.1307 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 123.764984][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 123.775077][ T7772] Call Trace: [ 123.778352][ T7772] [ 123.781274][ T7772] dump_stack_lvl+0xf2/0x150 [ 123.785955][ T7772] dump_stack+0x15/0x20 [ 123.790197][ T7772] should_fail_ex+0x229/0x230 [ 123.794907][ T7772] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 123.801165][ T7772] should_failslab+0x8f/0xb0 [ 123.805841][ T7772] __kmalloc_noprof+0xa5/0x370 [ 123.810689][ T7772] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 123.816767][ T7772] ? ns_capable+0x7d/0xb0 [ 123.821107][ T7772] genl_rcv_msg+0x470/0x6c0 [ 123.825626][ T7772] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 123.831540][ T7772] ? ref_tracker_free+0x3a5/0x410 [ 123.836723][ T7772] ? __dev_queue_xmit+0x161/0x1fe0 [ 123.841926][ T7772] netlink_rcv_skb+0x12c/0x230 [ 123.846689][ T7772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.851726][ T7772] genl_rcv+0x28/0x40 [ 123.855716][ T7772] netlink_unicast+0x599/0x670 [ 123.860479][ T7772] netlink_sendmsg+0x5cc/0x6e0 [ 123.865294][ T7772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.870657][ T7772] __sock_sendmsg+0x140/0x180 [ 123.875343][ T7772] ____sys_sendmsg+0x312/0x410 [ 123.880112][ T7772] __sys_sendmsg+0x1e9/0x280 [ 123.884731][ T7772] __x64_sys_sendmsg+0x46/0x50 [ 123.889502][ T7772] x64_sys_call+0x2689/0x2d60 [ 123.894185][ T7772] do_syscall_64+0xc9/0x1c0 [ 123.898758][ T7772] ? clear_bhb_loop+0x55/0xb0 [ 123.903454][ T7772] ? clear_bhb_loop+0x55/0xb0 [ 123.908140][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.914212][ T7772] RIP: 0033:0x7ff4294b9e79 [ 123.918633][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.938309][ T7772] RSP: 002b:00007ff428137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.946764][ T7772] RAX: ffffffffffffffda RBX: 00007ff429655f80 RCX: 00007ff4294b9e79 [ 123.954797][ T7772] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 123.962797][ T7772] RBP: 00007ff428137090 R08: 0000000000000000 R09: 0000000000000000 [ 123.970775][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.978763][ T7772] R13: 0000000000000000 R14: 00007ff429655f80 R15: 00007ffc4c64a088 [ 123.986785][ T7772] [ 124.096924][ T7787] netem: change failed [ 124.184515][ T7806] loop4: detected capacity change from 0 to 512 [ 124.192075][ T7806] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 124.199005][ T7806] EXT4-fs (loop4): mount failed [ 124.209707][ T7811] loop3: detected capacity change from 0 to 512 [ 124.210458][ T7806] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.227577][ T29] audit: type=1400 audit(1724138147.499:1232): avc: denied { write } for pid=7783 comm="syz.1.1311" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.256480][ T7811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 124.264619][ T7811] System zones: 0-2, 18-18, 34-34 [ 124.270599][ T7811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1320: bg 0: block 248: padding at end of block bitmap is not set [ 124.286606][ T7811] Quota error (device loop3): write_blk: dquota write failed [ 124.293998][ T7811] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 124.304325][ T7811] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1320: Failed to acquire dquot type 1 [ 124.319512][ T7811] EXT4-fs (loop3): 1 truncate cleaned up [ 124.325211][ T29] audit: type=1400 audit(1724138147.589:1233): avc: denied { read } for pid=7805 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.337326][ T7811] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.414445][ T29] audit: type=1326 audit(1724138147.679:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.0.1321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4158b99e79 code=0x0 [ 124.485298][ T7828] syz.3.1325[7828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.485391][ T7828] syz.3.1325[7828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.648990][ T29] audit: type=1400 audit(1724138147.919:1235): avc: denied { read } for pid=7830 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.717639][ T7836] FAULT_INJECTION: forcing a failure. [ 124.717639][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 124.730451][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.3.1327 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 124.741151][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 124.751252][ T7836] Call Trace: [ 124.754585][ T7836] [ 124.757639][ T7836] dump_stack_lvl+0xf2/0x150 [ 124.762264][ T7836] dump_stack+0x15/0x20 [ 124.766512][ T7836] should_fail_ex+0x229/0x230 [ 124.771226][ T7836] ? vm_area_dup+0x2c/0x130 [ 124.775763][ T7836] should_failslab+0x8f/0xb0 [ 124.780398][ T7836] kmem_cache_alloc_noprof+0x4c/0x290 [ 124.785975][ T7836] ? __vm_enough_memory+0xdf/0x2b0 [ 124.791165][ T7836] vm_area_dup+0x2c/0x130 [ 124.795522][ T7836] copy_mm+0x60b/0x10e0 [ 124.799763][ T7836] copy_process+0xee1/0x1fc0 [ 124.804384][ T7836] kernel_clone+0x167/0x5e0 [ 124.808908][ T7836] ? vfs_write+0x5a5/0x900 [ 124.813409][ T7836] __x64_sys_clone+0xe8/0x120 [ 124.818120][ T7836] x64_sys_call+0x2d23/0x2d60 [ 124.822879][ T7836] do_syscall_64+0xc9/0x1c0 [ 124.827416][ T7836] ? clear_bhb_loop+0x55/0xb0 [ 124.832107][ T7836] ? clear_bhb_loop+0x55/0xb0 [ 124.836876][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.842848][ T7836] RIP: 0033:0x7ff4cc5f9e79 [ 124.847336][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.866966][ T7836] RSP: 002b:00007ff4cb276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 124.875485][ T7836] RAX: ffffffffffffffda RBX: 00007ff4cc795f80 RCX: 00007ff4cc5f9e79 [ 124.883474][ T7836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.891458][ T7836] RBP: 00007ff4cb277090 R08: 0000000000000000 R09: 0000000000000000 [ 124.899446][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.907431][ T7836] R13: 0000000000000000 R14: 00007ff4cc795f80 R15: 00007ffe74d4b4d8 [ 124.915463][ T7836] [ 125.141331][ T7853] netem: change failed [ 125.143354][ T7855] loop3: detected capacity change from 0 to 1024 [ 125.153377][ T7855] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 125.187777][ T29] audit: type=1400 audit(1724138148.459:1236): avc: denied { ioctl } for pid=7854 comm="syz.3.1335" path="/317/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.273378][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 125.360762][ T7881] vhci_hcd: invalid port number 16 [ 125.399106][ T7885] netem: change failed [ 125.437686][ T7896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=7896 comm=syz.4.1350 [ 125.469430][ T7898] loop3: detected capacity change from 0 to 1024 [ 125.478840][ T7895] FAULT_INJECTION: forcing a failure. [ 125.478840][ T7895] name failslab, interval 1, probability 0, space 0, times 0 [ 125.491583][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.1.1351 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 125.502531][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 125.512736][ T7895] Call Trace: [ 125.516096][ T7895] [ 125.519049][ T7895] dump_stack_lvl+0xf2/0x150 [ 125.523729][ T7895] dump_stack+0x15/0x20 [ 125.528031][ T7895] should_fail_ex+0x229/0x230 [ 125.532805][ T7895] ? vm_area_dup+0x2c/0x130 [ 125.537333][ T7895] should_failslab+0x8f/0xb0 [ 125.541983][ T7895] kmem_cache_alloc_noprof+0x4c/0x290 [ 125.547506][ T7895] ? __vm_enough_memory+0xdf/0x2b0 [ 125.552637][ T7895] vm_area_dup+0x2c/0x130 [ 125.556997][ T7895] copy_mm+0x60b/0x10e0 [ 125.561232][ T7895] copy_process+0xee1/0x1fc0 [ 125.565861][ T7895] kernel_clone+0x167/0x5e0 [ 125.570374][ T7895] __x64_sys_clone+0xe8/0x120 [ 125.575098][ T7895] x64_sys_call+0x2d23/0x2d60 [ 125.579788][ T7895] do_syscall_64+0xc9/0x1c0 [ 125.584337][ T7895] ? clear_bhb_loop+0x55/0xb0 [ 125.589060][ T7895] ? clear_bhb_loop+0x55/0xb0 [ 125.593752][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.599682][ T7895] RIP: 0033:0x7ff4294b9e79 [ 125.604146][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.623784][ T7895] RSP: 002b:00007ff428136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 125.632202][ T7895] RAX: ffffffffffffffda RBX: 00007ff429655f80 RCX: 00007ff4294b9e79 [ 125.640296][ T7895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.648282][ T7895] RBP: 00007ff428137090 R08: 0000000000000000 R09: 0000000000000000 [ 125.656273][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.664248][ T7895] R13: 0000000000000000 R14: 00007ff429655f80 R15: 00007ffc4c64a088 [ 125.672325][ T7895] [ 125.788008][ T7924] loop3: detected capacity change from 0 to 128 [ 125.820742][ T7933] loop1: detected capacity change from 0 to 512 [ 125.841166][ T7933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.865345][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 125.920739][ T7933] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.941742][ T7931] bond4: entered promiscuous mode [ 125.947475][ T7931] bond4: entered allmulticast mode [ 125.956986][ T7931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.965094][ T7933] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1363: Directory hole found for htree leaf block 0 [ 126.009649][ T7931] bond4 (unregistering): Released all slaves [ 126.040036][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 126.042041][ T7933] EXT4-fs (loop1): Remounting filesystem read-only [ 126.081296][ T11] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 126.091924][ T7955] netlink: 'syz.3.1372': attribute type 4 has an invalid length. [ 126.108494][ T7955] netlink: 'syz.3.1372': attribute type 4 has an invalid length. [ 126.145751][ T7957] FAULT_INJECTION: forcing a failure. [ 126.145751][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.158925][ T7957] CPU: 0 UID: 0 PID: 7957 Comm: syz.4.1373 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 126.169679][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.179797][ T7957] Call Trace: [ 126.183128][ T7957] [ 126.186134][ T7957] dump_stack_lvl+0xf2/0x150 [ 126.190736][ T7957] dump_stack+0x15/0x20 [ 126.194914][ T7957] should_fail_ex+0x229/0x230 [ 126.199610][ T7957] should_fail+0xb/0x10 [ 126.203853][ T7957] should_fail_usercopy+0x1a/0x20 [ 126.208888][ T7957] _copy_to_user+0x1e/0xa0 [ 126.213316][ T7957] bpf_verifier_vlog+0x214/0x4d0 [ 126.218327][ T7957] __btf_verifier_log+0x80/0xb0 [ 126.223185][ T7957] ? __btf_verifier_log+0x80/0xb0 [ 126.228211][ T7957] __btf_verifier_log_type+0x224/0x320 [ 126.233738][ T7957] ? btf_struct_check_meta+0xc3/0x800 [ 126.239185][ T7957] ? should_fail_ex+0xd7/0x230 [ 126.244007][ T7957] btf_struct_check_meta+0x2e8/0x800 [ 126.249313][ T7957] btf_parse_type_sec+0x2a1/0x1510 [ 126.254429][ T7957] ? btf_check_sec_info+0x1b8/0x1d0 [ 126.259692][ T7957] ? btf_parse_hdr+0x396/0x3a0 [ 126.264529][ T7957] btf_new_fd+0x2dc/0x790 [ 126.268875][ T7957] bpf_btf_load+0x115/0x130 [ 126.273428][ T7957] __sys_bpf+0x686/0x7a0 [ 126.277744][ T7957] __x64_sys_bpf+0x43/0x50 [ 126.282179][ T7957] x64_sys_call+0x2625/0x2d60 [ 126.286943][ T7957] do_syscall_64+0xc9/0x1c0 [ 126.291488][ T7957] ? clear_bhb_loop+0x55/0xb0 [ 126.296201][ T7957] ? clear_bhb_loop+0x55/0xb0 [ 126.300964][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.306863][ T7957] RIP: 0033:0x7f218e289e79 [ 126.311274][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.331053][ T7957] RSP: 002b:00007f218cf01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.339472][ T7957] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 126.347448][ T7957] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000012 [ 126.355425][ T7957] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 126.363395][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.371419][ T7957] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 126.379457][ T7957] [ 126.402968][ T7955] loop3: detected capacity change from 0 to 4096 [ 126.461696][ T7969] loop1: detected capacity change from 0 to 512 [ 126.476914][ T7968] netem: change failed [ 126.478098][ T7969] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 126.495088][ T7969] System zones: 0-2, 18-18, 34-34 [ 126.505155][ T7969] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1375: bg 0: block 248: padding at end of block bitmap is not set [ 126.528743][ T7969] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1375: Failed to acquire dquot type 1 [ 126.541405][ T7969] EXT4-fs (loop1): 1 truncate cleaned up [ 126.561487][ T7969] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.620178][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 126.633059][ T7993] loop4: detected capacity change from 0 to 512 [ 126.648959][ T7993] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.670561][ T7993] bond1: entered promiscuous mode [ 126.675670][ T7993] bond1: entered allmulticast mode [ 126.677467][ T8006] FAULT_INJECTION: forcing a failure. [ 126.677467][ T8006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.681033][ T7993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.693991][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.2.1388 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 126.711409][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.721565][ T8006] Call Trace: [ 126.724851][ T8006] [ 126.727807][ T8006] dump_stack_lvl+0xf2/0x150 [ 126.732461][ T8006] dump_stack+0x15/0x20 [ 126.736716][ T8006] should_fail_ex+0x229/0x230 [ 126.741418][ T8006] should_fail_alloc_page+0xfd/0x110 [ 126.746788][ T8006] __alloc_pages_noprof+0x109/0x360 [ 126.752089][ T8006] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 126.757587][ T8006] alloc_pages_noprof+0xe1/0x100 [ 126.762551][ T8006] pte_alloc_one+0x32/0xf0 [ 126.767101][ T8006] __pte_alloc+0x33/0x270 [ 126.771459][ T8006] copy_page_range+0x338f/0x38c0 [ 126.776454][ T8006] ? vma_interval_tree_augment_rotate+0xd7/0xf0 [ 126.782877][ T8006] ? up_write+0x30/0xf0 [ 126.787144][ T8006] copy_mm+0x973/0x10e0 [ 126.791317][ T8006] copy_process+0xee1/0x1fc0 [ 126.795931][ T8006] kernel_clone+0x167/0x5e0 [ 126.800507][ T8006] ? vfs_write+0x5a5/0x900 [ 126.805013][ T8006] __x64_sys_clone+0xe8/0x120 [ 126.809694][ T8006] x64_sys_call+0x2d23/0x2d60 [ 126.814412][ T8006] do_syscall_64+0xc9/0x1c0 [ 126.818998][ T8006] ? clear_bhb_loop+0x55/0xb0 [ 126.823700][ T8006] ? clear_bhb_loop+0x55/0xb0 [ 126.828391][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.834338][ T8006] RIP: 0033:0x7f98e5069e79 [ 126.838786][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.858475][ T8006] RSP: 002b:00007f98e3cbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 126.866883][ T8006] RAX: ffffffffffffffda RBX: 00007f98e5206058 RCX: 00007f98e5069e79 [ 126.874888][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.882868][ T8006] RBP: 00007f98e3cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.890830][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.898826][ T8006] R13: 0000000000000000 R14: 00007f98e5206058 R15: 00007fff6aacf7c8 [ 126.906923][ T8006] [ 126.921541][ T7993] bond1 (unregistering): Released all slaves [ 126.996033][ T8018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1393'. [ 127.112604][ T8042] loop3: detected capacity change from 0 to 512 [ 127.123362][ T8042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.147376][ T8042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 127.155315][ T8042] System zones: 1-12 [ 127.163379][ T8042] EXT4-fs (loop3): 1 truncate cleaned up [ 127.238027][ T8052] sit0: entered allmulticast mode [ 127.276213][ T8052] sit0: entered promiscuous mode [ 127.586761][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 127.622820][ T8059] loop4: detected capacity change from 0 to 512 [ 127.659711][ T8059] EXT4-fs mount: 34 callbacks suppressed [ 127.659730][ T8059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.667024][ T8078] loop1: detected capacity change from 0 to 128 [ 127.680631][ T8059] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.698777][ T8078] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.705456][ T8059] bond1: entered promiscuous mode [ 127.715998][ T8059] bond1: entered allmulticast mode [ 127.721456][ T8059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.736334][ T8078] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.787442][ T8059] bond1 (unregistering): Released all slaves [ 127.814902][ T8078] EXT4-fs (loop1): shut down requested (0) [ 127.927796][ T6451] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.952661][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.971862][ T8082] wireguard0: entered promiscuous mode [ 127.977770][ T8082] wireguard0: entered allmulticast mode [ 128.123761][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.194249][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1421'. [ 128.254383][ T8105] syz.1.1423[8105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.254449][ T8105] syz.1.1423[8105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.335726][ T8108] loop4: detected capacity change from 0 to 4096 [ 128.378484][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.403952][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.457641][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 128.590864][ T8127] loop1: detected capacity change from 0 to 512 [ 128.601548][ T8129] tipc: Started in network mode [ 128.606549][ T8129] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.614833][ T8127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.625018][ T8129] tipc: Enabled bearer , priority 10 [ 128.637740][ T8127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 128.654570][ T8127] System zones: 1-12 [ 128.663152][ T8127] EXT4-fs (loop1): 1 truncate cleaned up [ 128.677081][ T8127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.704663][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 128.704678][ T29] audit: type=1400 audit(1724138151.969:1297): avc: denied { ioctl } for pid=8138 comm="syz.4.1434" path="socket:[26281]" dev="sockfs" ino=26281 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.044438][ T8154] loop3: detected capacity change from 0 to 512 [ 129.108597][ T8154] EXT4-fs (loop3): 1 truncate cleaned up [ 129.117995][ T8154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.160155][ T8154] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1439: Directory hole found for htree leaf block 0 [ 129.216258][ T8154] EXT4-fs (loop3): Remounting filesystem read-only [ 129.393526][ T8174] syz.4.1448[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.393590][ T8174] syz.4.1448[8174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.510861][ T8154] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1439'. [ 129.537017][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 129.987763][ T8176] loop2: detected capacity change from 0 to 512 [ 130.018413][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.039224][ T8176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.084594][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.096953][ T8176] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.249467][ T8186] syz.3.1449[8186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.249596][ T8186] syz.3.1449[8186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.265644][ T8] tipc: Node number set to 2886997162 [ 130.292740][ T8176] bond1: entered promiscuous mode [ 130.298438][ T8176] bond1: entered allmulticast mode [ 130.316516][ T8176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.336981][ T8176] bond1 (unregistering): Released all slaves [ 130.435091][ T8196] wireguard0: entered promiscuous mode [ 130.440667][ T8196] wireguard0: entered allmulticast mode [ 130.605525][ T29] audit: type=1326 audit(1724138153.849:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.4.1455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f218e289e79 code=0x0 [ 130.684440][ T8205] FAULT_INJECTION: forcing a failure. [ 130.684440][ T8205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.697768][ T8205] CPU: 0 UID: 0 PID: 8205 Comm: syz.4.1455 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 130.708484][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.718597][ T8205] Call Trace: [ 130.721875][ T8205] [ 130.724808][ T8205] dump_stack_lvl+0xf2/0x150 [ 130.729451][ T8205] dump_stack+0x15/0x20 [ 130.733703][ T8205] should_fail_ex+0x229/0x230 [ 130.738529][ T8205] should_fail_alloc_page+0xfd/0x110 [ 130.743843][ T8205] __alloc_pages_noprof+0x109/0x360 [ 130.749112][ T8205] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 130.754580][ T8205] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 130.760008][ T8205] handle_mm_fault+0xd6d/0x2940 [ 130.765036][ T8205] ? mas_walk+0x204/0x320 [ 130.769383][ T8205] exc_page_fault+0x3b9/0x650 [ 130.774198][ T8205] asm_exc_page_fault+0x26/0x30 [ 130.779058][ T8205] RIP: 0033:0x7f218e2371ab [ 130.783473][ T8205] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 130.803339][ T8205] RSP: 002b:00007f218cedde10 EFLAGS: 00010246 [ 130.809427][ T8205] RAX: 00007f218cedff30 RBX: 00007f218e3fb620 RCX: 0000000000000000 [ 130.817440][ T8205] RDX: 00007f218cedff78 RSI: 00007f218e2e8900 RDI: 00007f218cedde30 [ 130.825414][ T8205] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 130.833392][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.841349][ T8205] R13: 0000000000000000 R14: 00007f218e426058 R15: 00007ffe2ef75578 [ 130.849314][ T8205] [ 130.852528][ T8205] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 130.852881][ T7562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.884925][ T8210] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 130.906673][ T8212] macvlan2: entered promiscuous mode [ 130.911982][ T8212] macvlan2: entered allmulticast mode [ 130.919756][ T8212] batman_adv: batadv0: Adding interface: macvlan2 [ 130.926243][ T8212] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.951694][ T8212] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 130.966942][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 131.134041][ T8239] loop3: detected capacity change from 0 to 512 [ 131.141822][ T8239] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.151926][ T8239] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.158573][ T8239] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 131.167567][ T8239] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 131.181501][ T8239] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1469: Failed to acquire dquot type 1 [ 131.193145][ T8239] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1469: bg 0: block 40: padding at end of block bitmap is not set [ 131.208470][ T8239] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 131.328012][ T8245] loop1: detected capacity change from 0 to 1024 [ 131.338136][ T8239] EXT4-fs (loop3): 1 truncate cleaned up [ 131.344189][ T8239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.357830][ T8239] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1469: corrupted xattr block 31: invalid header [ 131.385585][ T8239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 131.411525][ T8245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.487022][ T8239] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.1469: corrupted xattr block 31: invalid header [ 131.552265][ T8239] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 131.576351][ T8239] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1469: bad symlink. [ 131.586573][ T29] audit: type=1400 audit(1724138154.839:1299): avc: denied { read } for pid=8238 comm="syz.3.1469" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 131.629339][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.658304][ T8257] FAULT_INJECTION: forcing a failure. [ 131.658304][ T8257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.671585][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.4.1476 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 131.682271][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.692341][ T8257] Call Trace: [ 131.695626][ T8257] [ 131.698559][ T8257] dump_stack_lvl+0xf2/0x150 [ 131.703193][ T8257] dump_stack+0x15/0x20 [ 131.707396][ T8257] should_fail_ex+0x229/0x230 [ 131.712104][ T8257] should_fail_alloc_page+0xfd/0x110 [ 131.717418][ T8257] __alloc_pages_noprof+0x109/0x360 [ 131.722650][ T8257] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 131.728049][ T8257] alloc_pages_noprof+0xe1/0x100 [ 131.733010][ T8257] __pud_alloc+0x4b/0x3e0 [ 131.737370][ T8257] ? mas_dup_build+0x6df/0xd10 [ 131.742153][ T8257] ? should_fail_ex+0xd7/0x230 [ 131.746947][ T8257] copy_page_range+0x371e/0x38c0 [ 131.751900][ T8257] ? mod_objcg_state+0x2ea/0x4f0 [ 131.756891][ T8257] ? try_charge_memcg+0x5fc/0x780 [ 131.761939][ T8257] ? mas_wr_walk_descend+0x359/0x410 [ 131.767258][ T8257] ? mas_wr_end_piv+0x15f/0x480 [ 131.772125][ T8257] ? mas_wr_store_entry+0x250/0x390 [ 131.777346][ T8257] copy_mm+0x973/0x10e0 [ 131.781530][ T8257] copy_process+0xee1/0x1fc0 [ 131.786144][ T8257] kernel_clone+0x167/0x5e0 [ 131.790669][ T8257] ? vfs_write+0x5a5/0x900 [ 131.795135][ T8257] __x64_sys_clone+0xe8/0x120 [ 131.799855][ T8257] x64_sys_call+0x2d23/0x2d60 [ 131.804569][ T8257] do_syscall_64+0xc9/0x1c0 [ 131.809195][ T8257] ? clear_bhb_loop+0x55/0xb0 [ 131.813900][ T8257] ? clear_bhb_loop+0x55/0xb0 [ 131.818606][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.824530][ T8257] RIP: 0033:0x7f218e289e79 [ 131.828960][ T8257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.848595][ T8257] RSP: 002b:00007f218cf00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 131.857024][ T8257] RAX: ffffffffffffffda RBX: 00007f218e425f80 RCX: 00007f218e289e79 [ 131.865009][ T8257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.872992][ T8257] RBP: 00007f218cf01090 R08: 0000000000000000 R09: 0000000000000000 [ 131.880972][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.888962][ T8257] R13: 0000000000000000 R14: 00007f218e425f80 R15: 00007ffe2ef75578 [ 131.896979][ T8257] [ 131.926043][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.011413][ T8269] vlan2: entered promiscuous mode [ 132.016592][ T8269] veth0_to_team: entered promiscuous mode [ 132.026963][ T8269] veth0_to_team: left promiscuous mode [ 132.134872][ T8285] loop1: detected capacity change from 0 to 256 [ 132.158702][ T29] audit: type=1400 audit(1724138155.429:1300): avc: denied { read } for pid=8284 comm="syz.1.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.160411][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.185579][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.185883][ T8286] loop3: detected capacity change from 0 to 512 [ 132.192951][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.206717][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.214214][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.225950][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.233423][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.240929][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.248408][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.255883][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.263289][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.270723][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.278140][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.285569][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.292962][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.300380][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.307809][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.314072][ T8286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.315295][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.330402][ T8286] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.335061][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.352974][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.360430][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.367884][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.375279][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.382716][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.390185][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.397675][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.405063][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.412628][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.420121][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.427527][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.434994][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.442396][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.449813][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.457265][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.464646][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.472066][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.479517][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.486946][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.494374][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.501783][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.509195][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.520938][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 132.542273][ T8297] netem: change failed [ 132.546993][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.653641][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881139f9e00: rx timeout, send abort [ 132.785610][ T8315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1495'. [ 132.815325][ T8315] loop1: detected capacity change from 0 to 512 [ 132.840739][ T8315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.859452][ T8315] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.889157][ T8315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1495'. [ 132.908859][ T8301] loop3: detected capacity change from 0 to 512 [ 132.941753][ T8301] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1490: corrupted in-inode xattr: invalid ea_ino [ 132.957481][ T8301] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1490: couldn't read orphan inode 15 (err -117) [ 132.974927][ T8301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.156479][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 133.162177][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881139f9e00: abort rx timeout. Force session deactivation [ 133.187442][ T8329] bond4: entered promiscuous mode [ 133.192508][ T8329] bond4: entered allmulticast mode [ 133.197864][ T8329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.209310][ T8329] bond4 (unregistering): Released all slaves [ 133.379074][ T29] audit: type=1400 audit(1724138156.649:1301): avc: denied { read write } for pid=8336 comm="syz.0.1502" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.403436][ T29] audit: type=1400 audit(1724138156.649:1302): avc: denied { open } for pid=8336 comm="syz.0.1502" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.428178][ T29] audit: type=1400 audit(1724138156.649:1303): avc: denied { ioctl } for pid=8336 comm="syz.0.1502" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.583110][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.621894][ T8363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.647703][ T8361] tun0: tun_chr_ioctl cmd 1074025681 [ 133.653428][ T29] audit: type=1400 audit(1724138156.919:1304): avc: denied { setattr } for pid=8358 comm="syz.1.1509" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.677726][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 133.681829][ T8361] lo speed is unknown, defaulting to 1000 [ 133.696040][ T8362] loop2: detected capacity change from 0 to 512 [ 133.719189][ T8362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.731886][ T8362] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.759046][ T8362] bond1: entered promiscuous mode [ 133.764126][ T8362] bond1: entered allmulticast mode [ 133.771047][ T8362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.780936][ T29] audit: type=1326 audit(1724138157.049:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.804507][ T29] audit: type=1326 audit(1724138157.049:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.829121][ T29] audit: type=1326 audit(1724138157.049:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.852561][ T29] audit: type=1326 audit(1724138157.049:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.876564][ T29] audit: type=1326 audit(1724138157.049:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.900091][ T29] audit: type=1326 audit(1724138157.049:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.925044][ T29] audit: type=1326 audit(1724138157.069:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.926117][ T8362] bond1 (unregistering): Released all slaves [ 133.948344][ T29] audit: type=1326 audit(1724138157.099:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 133.948412][ T29] audit: type=1326 audit(1724138157.099:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 134.001817][ T29] audit: type=1326 audit(1724138157.099:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.1.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff4294b9e79 code=0x7ffc0000 [ 134.027211][ T8377] bond_slave_0: entered promiscuous mode [ 134.032923][ T8377] bond_slave_1: entered promiscuous mode [ 134.039222][ T8380] bond_slave_0: left promiscuous mode [ 134.044635][ T8380] bond_slave_1: left promiscuous mode [ 134.060907][ T8380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.074632][ T8380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.088652][ T8380] bond0 (unregistering): Released all slaves [ 134.108846][ T7562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.163457][ T8384] loop1: detected capacity change from 0 to 4096 [ 134.172055][ T8384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.200232][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.202104][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 134.399371][ T8420] loop1: detected capacity change from 0 to 512 [ 134.416212][ T8420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 134.424435][ T8420] System zones: 0-2, 18-18, 34-34 [ 134.430152][ T8420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1530: bg 0: block 248: padding at end of block bitmap is not set [ 134.444830][ T8420] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1530: Failed to acquire dquot type 1 [ 134.456794][ T8420] EXT4-fs (loop1): 1 truncate cleaned up [ 134.463344][ T8420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.476007][ T8420] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.498773][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.584081][ T8440] syz.1.1536[8440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.584148][ T8440] syz.1.1536[8440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.038528][ T8444] siw: device registration error -23 [ 135.109887][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 135.122712][ T8446] loop4: detected capacity change from 0 to 512 [ 135.130000][ T8446] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 135.138912][ T8446] EXT4-fs (loop4): invalid journal inode [ 135.144730][ T8446] EXT4-fs (loop4): can't get journal size [ 135.151120][ T8446] EXT4-fs (loop4): 1 truncate cleaned up [ 135.157308][ T8446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.205324][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.232714][ T8453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.239983][ T8453] IPv6: NLM_F_CREATE should be set when creating new route [ 135.247253][ T8453] IPv6: NLM_F_CREATE should be set when creating new route [ 135.264814][ T8453] loop4: detected capacity change from 0 to 1024 [ 135.272256][ T8453] EXT4-fs: Ignoring removed oldalloc option [ 135.280352][ T8453] EXT4-fs: Ignoring removed i_version option [ 135.286569][ T8453] EXT4-fs: Ignoring removed orlov option [ 135.293020][ T8453] EXT4-fs (loop4): stripe (127) is not aligned with cluster size (16), stripe is disabled [ 135.307335][ T8453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.318779][ T8468] loop2: detected capacity change from 0 to 512 [ 135.326956][ T8468] ext4: Unknown parameter 'noacl' [ 135.371919][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.374604][ T8468] lo speed is unknown, defaulting to 1000 [ 135.472833][ T8482] vcan0: tx drop: invalid da for name 0xf5ffffffffffffff [ 135.498488][ T8487] loop1: detected capacity change from 0 to 512 [ 135.508953][ T8487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1551: bg 0: block 393: padding at end of block bitmap is not set [ 135.524057][ T8487] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 135.534032][ T8487] EXT4-fs (loop1): 2 truncates cleaned up [ 135.540252][ T8487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.558418][ T8487] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #12: block 7: comm syz.1.1551: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 135.576634][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 135.579596][ T8487] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #12: block 7: comm syz.1.1551: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 135.609095][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.611168][ T8490] loop4: detected capacity change from 0 to 512 [ 135.643123][ T8490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.653949][ T8497] raw_sendmsg: syz.3.1555 forgot to set AF_INET. Fix it! [ 135.655751][ T8490] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.664374][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.688303][ T8497] loop3: detected capacity change from 0 to 512 [ 135.698108][ T8497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.701352][ T8490] bond1: entered promiscuous mode [ 135.713095][ T8490] bond1: entered allmulticast mode [ 135.718744][ T8490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.729047][ T8497] EXT4-fs (loop3): 1 orphan inode deleted [ 135.734878][ T8497] EXT4-fs (loop3): 1 truncate cleaned up [ 135.744295][ T8497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.759046][ T8490] bond1 (unregistering): Released all slaves [ 135.773673][ T3864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.823665][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.888408][ T8521] 9pnet_fd: Insufficient options for proto=fd [ 136.137012][ T8532] wireguard0: entered promiscuous mode [ 136.142633][ T8532] wireguard0: entered allmulticast mode [ 136.272572][ T8535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1567'. [ 136.501164][ T8548] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1572'. [ 136.633047][ T8565] FAULT_INJECTION: forcing a failure. [ 136.633047][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 136.645789][ T8565] CPU: 0 UID: 0 PID: 8565 Comm: syz.1.1580 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 136.656470][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.666562][ T8565] Call Trace: [ 136.669843][ T8565] [ 136.672839][ T8565] dump_stack_lvl+0xf2/0x150 [ 136.677470][ T8565] dump_stack+0x15/0x20 [ 136.681650][ T8565] should_fail_ex+0x229/0x230 [ 136.686342][ T8565] ? vm_area_dup+0x2c/0x130 [ 136.690858][ T8565] should_failslab+0x8f/0xb0 [ 136.695468][ T8565] kmem_cache_alloc_noprof+0x4c/0x290 [ 136.700892][ T8565] vm_area_dup+0x2c/0x130 [ 136.705234][ T8565] copy_mm+0x60b/0x10e0 [ 136.709399][ T8565] copy_process+0xee1/0x1fc0 [ 136.713994][ T8565] kernel_clone+0x167/0x5e0 [ 136.718515][ T8565] ? vfs_write+0x5a5/0x900 [ 136.722942][ T8565] __x64_sys_clone+0xe8/0x120 [ 136.727624][ T8565] x64_sys_call+0x2d23/0x2d60 [ 136.732311][ T8565] do_syscall_64+0xc9/0x1c0 [ 136.736885][ T8565] ? clear_bhb_loop+0x55/0xb0 [ 136.741636][ T8565] ? clear_bhb_loop+0x55/0xb0 [ 136.746321][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.752295][ T8565] RIP: 0033:0x7ff4294b9e79 [ 136.756710][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.776445][ T8565] RSP: 002b:00007ff428136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 136.784860][ T8565] RAX: ffffffffffffffda RBX: 00007ff429655f80 RCX: 00007ff4294b9e79 [ 136.792889][ T8565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.800881][ T8565] RBP: 00007ff428137090 R08: 0000000000000000 R09: 0000000000000000 [ 136.808942][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.817028][ T8565] R13: 0000000000000000 R14: 00007ff429655f80 R15: 00007ffc4c64a088 [ 136.825048][ T8565] [ 136.863628][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 136.934874][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1586'. [ 137.005677][ T8588] siw: device registration error -23 [ 137.176480][ T8598] syz.3.1593[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.176574][ T8598] syz.3.1593[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.268149][ T8600] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1594' sets config #0 [ 137.314319][ T8603] loop4: detected capacity change from 0 to 512 [ 137.328998][ T8603] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 137.336732][ T8603] EXT4-fs (loop4): mount failed [ 137.530368][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 137.541207][ T8637] FAULT_INJECTION: forcing a failure. [ 137.541207][ T8637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.543035][ T8629] loop4: detected capacity change from 0 to 512 [ 137.555257][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.0.1609 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 137.571496][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 137.581666][ T8637] Call Trace: [ 137.584957][ T8637] [ 137.587887][ T8637] dump_stack_lvl+0xf2/0x150 [ 137.592497][ T8637] dump_stack+0x15/0x20 [ 137.596662][ T8637] should_fail_ex+0x229/0x230 [ 137.601351][ T8637] should_fail_alloc_page+0xfd/0x110 [ 137.606647][ T8637] __alloc_pages_noprof+0x109/0x360 [ 137.611871][ T8637] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 137.617245][ T8637] alloc_pages_noprof+0xe1/0x100 [ 137.622268][ T8637] pte_alloc_one+0x32/0xf0 [ 137.626694][ T8637] __pte_alloc+0x33/0x270 [ 137.631023][ T8637] copy_page_range+0x338f/0x38c0 [ 137.635971][ T8637] ? mod_objcg_state+0x2ea/0x4f0 [ 137.640927][ T8637] ? mas_wr_walk_descend+0x359/0x410 [ 137.646239][ T8637] copy_mm+0x973/0x10e0 [ 137.650411][ T8637] copy_process+0xee1/0x1fc0 [ 137.655028][ T8637] kernel_clone+0x167/0x5e0 [ 137.659537][ T8637] ? vfs_write+0x5a5/0x900 [ 137.664054][ T8637] __x64_sys_clone+0xe8/0x120 [ 137.668737][ T8637] x64_sys_call+0x2d23/0x2d60 [ 137.673452][ T8637] do_syscall_64+0xc9/0x1c0 [ 137.677968][ T8637] ? clear_bhb_loop+0x55/0xb0 [ 137.682653][ T8637] ? clear_bhb_loop+0x55/0xb0 [ 137.687335][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.693234][ T8637] RIP: 0033:0x7f4158b99e79 [ 137.697650][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.717450][ T8637] RSP: 002b:00007f4157816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 137.725876][ T8637] RAX: ffffffffffffffda RBX: 00007f4158d35f80 RCX: 00007f4158b99e79 [ 137.734020][ T8637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.741987][ T8637] RBP: 00007f4157817090 R08: 0000000000000000 R09: 0000000000000000 [ 137.749954][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.757920][ T8637] R13: 0000000000000000 R14: 00007f4158d35f80 R15: 00007ffc494d4c28 [ 137.765888][ T8637] [ 137.777394][ T8629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.790181][ T8629] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.809932][ T8629] bond2: entered promiscuous mode [ 137.815019][ T8629] bond2: entered allmulticast mode [ 137.820502][ T8629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.832553][ T8629] bond2 (unregistering): Released all slaves [ 137.856714][ T8648] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1612'. [ 137.880886][ T6635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.888440][ T8651] loop1: detected capacity change from 0 to 512 [ 137.900588][ T8651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.909388][ T8651] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 137.965718][ T8660] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1617'. [ 137.981166][ T8661] loop1: detected capacity change from 0 to 164 [ 137.990892][ T8646] IPv6: sit1: Disabled Multicast RS [ 138.024143][ T8660] ================================================================== [ 138.032272][ T8660] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 138.039765][ T8660] [ 138.042083][ T8660] write to 0xffff888116872000 of 4096 bytes by task 8661 on cpu 1: [ 138.049972][ T8660] _copy_from_iter+0x129/0xb00 [ 138.054767][ T8660] copy_page_from_iter+0x14f/0x280 [ 138.059915][ T8660] process_vm_rw+0x5d6/0x8c0 [ 138.064512][ T8660] __x64_sys_process_vm_writev+0x7a/0x90 [ 138.070153][ T8660] x64_sys_call+0x1a4/0x2d60 [ 138.074760][ T8660] do_syscall_64+0xc9/0x1c0 [ 138.079280][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.085199][ T8660] [ 138.087517][ T8660] write to 0xffff888116872000 of 4096 bytes by task 8660 on cpu 0: [ 138.095407][ T8660] _copy_from_iter+0x129/0xb00 [ 138.100182][ T8660] copy_page_from_iter+0x14f/0x280 [ 138.105302][ T8660] process_vm_rw+0x5d6/0x8c0 [ 138.109902][ T8660] __x64_sys_process_vm_writev+0x7a/0x90 [ 138.115545][ T8660] x64_sys_call+0x1a4/0x2d60 [ 138.120148][ T8660] do_syscall_64+0xc9/0x1c0 [ 138.124664][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.130568][ T8660] [ 138.132886][ T8660] Reported by Kernel Concurrency Sanitizer on: [ 138.139051][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.1.1617 Not tainted 6.11.0-rc4-syzkaller-00008-g6e4436539ae1 #0 [ 138.149730][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 138.159788][ T8660] ==================================================================