last executing test programs: 25.560870286s ago: executing program 4 (id=773): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2, 0x1, 0x3}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020", @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400004699fc5361641bfa0000000000c60000000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000100)={[{@grpjquota}, {@bh}]}, 0xfe, 0x58b, &(0x7f00000008c0)="$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") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r4 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000380)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, '\x00X('}) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendfile(r7, r6, 0x0, 0x80) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket$inet6(0xa, 0x802, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 25.506570236s ago: executing program 4 (id=774): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x2, 0x1, 0x3}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020", @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400004699fc5361641bfa0000000000c600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000100)={[{@grpjquota}, {@bh}]}, 0xfe, 0x58b, &(0x7f00000008c0)="$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") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r4 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000380)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, '\x00X('}) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendfile(r7, r6, 0x0, 0x80) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket$inet6(0xa, 0x802, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 25.449245676s ago: executing program 4 (id=775): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="24d41ef2502c6b8d356d236c0800", 0xe, 0x8000, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xffff0000}, &(0x7f00000000c0)=0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x8, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x62}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000280)='GPL\x00', 0x57b, 0x0, 0x0, 0x41000, 0x28, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x1, r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000480)=[{0x3, 0x3, 0x8, 0xb}, {0x1, 0x2, 0x6, 0xa}], 0x10, 0x3f03, @void, @value}, 0x94) keyctl$join(0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x8000}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x2, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r10) 25.356888636s ago: executing program 4 (id=776): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f0000001a80)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4080) close(0x3) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, &(0x7f0000000240)) 25.348334885s ago: executing program 4 (id=777): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x85, @loopback, 0xfff}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x2008000, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e21, @private=0xa010101}}}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)='#\x00', 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000300)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abcb38baa35233c3ee7050b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x24004004, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x2a0, 0x3a8, 0x1d0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4d8) ppoll(&(0x7f0000000380)=[{r3}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'vxcan1\x00', {0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000010000000000000e0300000000000000002e30600037d42c8ffe78e36a71aa825a182da9d1983178e2fbd9cfa8647e56c5e2a178fac92e534a1971633127e5f331d1c4c645ce3817ead852cd0801307b023837b4241310d1f4cfef6308115ccf26baf8"], 0x0, 0x2d, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setpgid(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) 19.796217263s ago: executing program 4 (id=841): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000749cca287bddaf00d644086dc209ff727c8fde813f416d8715b3e62143bef4feb00cc4afea2b3a069911308bbe43bd6c4913de5ccd825f67f488a5f68cfd9b7c0cdfc2a3300968fc10dcc584db3c308bdc18cea6a13db7046677a1fa211aecd7a189e74c75cb8acdfb69812c71aef17c6dfa99d699eeb7366c8969f0ec0db9079ad4e74f3b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_clone3(&(0x7f0000000400)={0x60040080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19.779490873s ago: executing program 32 (id=841): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000749cca287bddaf00d644086dc209ff727c8fde813f416d8715b3e62143bef4feb00cc4afea2b3a069911308bbe43bd6c4913de5ccd825f67f488a5f68cfd9b7c0cdfc2a3300968fc10dcc584db3c308bdc18cea6a13db7046677a1fa211aecd7a189e74c75cb8acdfb69812c71aef17c6dfa99d699eeb7366c8969f0ec0db9079ad4e74f3b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f40)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_clone3(&(0x7f0000000400)={0x60040080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.630876125s ago: executing program 1 (id=1058): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) utime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r2 = syz_io_uring_setup(0x4573, &(0x7f0000000780)={0x0, 0xb39a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x55d, &(0x7f0000000b00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18) r7 = socket$inet(0x2, 0x6, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="18c8", 0x2, 0xfffffffffffffffd) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000000), 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.537070835s ago: executing program 1 (id=1059): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x212082, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x86, &(0x7f0000002600)}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x24000080, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 3.122365263s ago: executing program 3 (id=1067): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x20081e, &(0x7f0000000000)={[{@auto_da_alloc}, {@dioread_lock}, {@auto_da_alloc}]}, 0xff, 0x4ef, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x60002015}) (fail_nth: 6) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x8000200a}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @multicast1}], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000304000000010000000000007400", @ANYRES32=r5, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c0002800500190007"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xd, &(0x7f0000000980)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x41, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0xa, &(0x7f0000000140)=[{0x100, 0x0, 0x1, 0xc}, {0x1, 0x10, 0x0, 0x5}, {0x6, 0x10, 0x5, 0x8}, {0x4, 0x3, 0x0, 0x80000001}, {0x81, 0x5, 0xd, 0x6}, {0x100, 0xae, 0x5d, 0xcaa0}, {0x6, 0x57, 0x0, 0xfffffff7}, {0x7, 0x6, 0x0, 0x81}, {0x9, 0x80, 0xfa, 0x4}, {0x6, 0xa, 0x57, 0x3ff}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) 2.692997221s ago: executing program 1 (id=1071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r1, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) syz_socket_connect_nvme_tcp() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 2.097484159s ago: executing program 3 (id=1079): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="8f84e35e", 0x4}, {0x0}, {0x0}], 0x3, &(0x7f0000000940)}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmmsg(r0, &(0x7f000000e240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) 1.790714627s ago: executing program 1 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x34, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.399780476s ago: executing program 5 (id=1086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @ethernet={0x6, @local}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='veth0_to_bond\x00', 0x592, 0x6, 0xf}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='netfs_rreq\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socket(0x2c, 0x9, 0x8) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800000, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@debug}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000d80)=""/51) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0xfffffda8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @remote, 0x102}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.389219636s ago: executing program 2 (id=1087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.302819946s ago: executing program 5 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001000"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000a0cb000055090100000000009500000000000000bf748c910000df000000b7020000000000008500000084000000b7000000000000000d0000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x8000000000000001) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0xfffffffc, 0x5, 0x1000ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r6 = socket$packet(0x11, 0xa, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r12, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r14, @ANYBLOB="08000500", @ANYRES32=r14], 0x6c}, 0x1, 0xba01}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0xa0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xeca3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x286}, 0xffffffffffffffff, 0x37}}, 0x48) 1.301190556s ago: executing program 0 (id=1090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e80), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x1, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044001) 1.228033315s ago: executing program 0 (id=1091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.227305005s ago: executing program 3 (id=1092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r1, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) syz_socket_connect_nvme_tcp() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 1.226821345s ago: executing program 5 (id=1093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x1b0, 0x0, 0x290, 0x290, 0x0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r4 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010003000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES32=r5], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x9f, 0x0, 0x401, 0x1, 0x52, 0x8, 0x1}, &(0x7f0000000240)=0x9c) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000000c0)=0x10) syz_emit_ethernet(0x46, &(0x7f0000001100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ni={0x8c}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000140)={r9, 0x5}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000100), &(0x7f00000000c0)=r1}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x8, 0xd503, 0x6, 0x4, 0x5, 0x1000, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 0x4}, 0xe) socket(0x1, 0x803, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff, 0x1}, 0xe) 1.085737374s ago: executing program 2 (id=1094): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000010", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fd00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_clone(0xc0001480, 0x0, 0x20, 0x0, 0x0, 0x0) flock(r2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x40002, 0xc3, &(0x7f000000cf3d)=""/195, 0x61800, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.009100074s ago: executing program 0 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x100000000000000, 0x4000800}, 0x40) 1.008799764s ago: executing program 0 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) 941.601474ms ago: executing program 1 (id=1097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r1, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) syz_socket_connect_nvme_tcp() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xffffff7f) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r8 = syz_usb_connect$hid(0x1, 0xffffffac, 0x0, 0x0) syz_usb_disconnect(r8) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) sched_rr_get_interval(0x0, &(0x7f00000003c0)) 901.408524ms ago: executing program 0 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) (fail_nth: 1) 521.070732ms ago: executing program 0 (id=1099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @ethernet={0x6, @local}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='veth0_to_bond\x00', 0x592, 0x6, 0xf}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='netfs_rreq\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socket(0x2c, 0x9, 0x8) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b326e078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800000, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@debug}]}, 0x6, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000d80)=""/51) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0xfffffda8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @remote, 0x102}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 447.816142ms ago: executing program 3 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x396a81843c1cfc23, 0xcb}}, 0x18}, 0x1, 0x0, 0x0, 0x40040c5}, 0x0) 434.611312ms ago: executing program 3 (id=1101): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x5a, 0x9, 0xe0, 0xf0f5}]}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="142000000702000700582e2127f12b5d08000000"], 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) fdatasync(r1) 364.216682ms ago: executing program 3 (id=1102): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a40), 0x80a02) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x4000000000000, 0x0, 0x4, 0x0, 0x2008}, 0x0, 0x0) (fail_nth: 3) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x20000000, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0xf3406}], 0x1}}], 0xc, 0x206b99) 363.928021ms ago: executing program 5 (id=1103): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="8f84e35e", 0x4}, {0x0}, {0x0}], 0x3, &(0x7f0000000940)}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmmsg(r0, &(0x7f000000e240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) 363.615182ms ago: executing program 5 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x10}}, 0x20000000) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x400, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x7) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 171.638131ms ago: executing program 5 (id=1105): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a40), 0x80a02) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002180)={0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x6, r2, 0x88, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xffffff80, 0xbb3, 0x5e12, 0x8}, 0x10) r3 = syz_open_procfs(r1, &(0x7f0000001140)='numa_maps\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) setgroups(0x0, 0x0) preadv(r3, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) read$char_usb(r3, &(0x7f0000001080)=""/147, 0x93) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x4000000000000, 0x0, 0x4, 0x0, 0x2008}, 0x0, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000d80)=[{{0x0, 0x20000000, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0xf3406}], 0x1}}], 0xc, 0x206b99) 171.403861ms ago: executing program 2 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x100000000000000, 0x4000800}, 0x40) 171.212891ms ago: executing program 2 (id=1107): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000001080)=""/4113, 0x1011}], 0x1, 0x3, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfc, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r3, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 99.474261ms ago: executing program 1 (id=1108): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) shutdown(r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x0, 0x1) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff000024fb484d3faaf7940000000f00000044045e00000000000000170ac91c6a49c866"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 5.0428ms ago: executing program 2 (id=1109): socket(0xa, 0x80000, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40002, 0x800000000003}, 0x104a8a, 0x5dd8, 0x0, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) 0s ago: executing program 2 (id=1110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r1, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) syz_socket_connect_nvme_tcp() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): ][ T5268] dump_stack+0x15/0x1a [ 56.476968][ T5268] should_fail_ex+0x223/0x230 [ 56.481729][ T5268] ? nf_tables_newtable+0x3a1/0xee0 [ 56.486932][ T5268] should_failslab+0x8f/0xb0 [ 56.491534][ T5268] __kmalloc_cache_noprof+0x4e/0x320 [ 56.496809][ T5268] nf_tables_newtable+0x3a1/0xee0 [ 56.501828][ T5268] nfnetlink_rcv+0xb3e/0x15d0 [ 56.506499][ T5268] ? kmem_cache_free+0xdc/0x2d0 [ 56.511399][ T5268] netlink_unicast+0x599/0x670 [ 56.516153][ T5268] netlink_sendmsg+0x5cc/0x6e0 [ 56.521084][ T5268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.526357][ T5268] __sock_sendmsg+0x140/0x180 [ 56.531030][ T5268] ____sys_sendmsg+0x312/0x410 [ 56.535940][ T5268] __sys_sendmsg+0x19d/0x230 [ 56.540560][ T5268] __x64_sys_sendmsg+0x46/0x50 [ 56.545315][ T5268] x64_sys_call+0x2734/0x2dc0 [ 56.549980][ T5268] do_syscall_64+0xc9/0x1c0 [ 56.554533][ T5268] ? clear_bhb_loop+0x55/0xb0 [ 56.559198][ T5268] ? clear_bhb_loop+0x55/0xb0 [ 56.563908][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.569878][ T5268] RIP: 0033:0x7ff167da5d29 [ 56.574279][ T5268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.593876][ T5268] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.602276][ T5268] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 56.610237][ T5268] RDX: 0000000020050800 RSI: 00000000200000c0 RDI: 0000000000000005 [ 56.618206][ T5268] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 56.626162][ T5268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.634122][ T5268] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 56.642191][ T5268] [ 56.657353][ T5266] gretap0: left allmulticast mode [ 56.662409][ T5266] gretap0: left promiscuous mode [ 56.670944][ T5266] bridge0: port 3(vlan2) entered disabled state [ 56.672603][ T5275] loop0: detected capacity change from 0 to 512 [ 56.699913][ T5266] bridge0: port 4(vlan3) entered disabled state [ 56.706239][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.713511][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.727292][ T5266] team0: left allmulticast mode [ 56.732173][ T5266] team_slave_0: left allmulticast mode [ 56.737807][ T5266] team_slave_1: left allmulticast mode [ 56.743268][ T5266] team0: left promiscuous mode [ 56.748066][ T5266] team_slave_0: left promiscuous mode [ 56.753500][ T5266] team_slave_1: left promiscuous mode [ 56.788219][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.799144][ T5266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.826730][ T5266] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.835289][ T5266] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.843716][ T5266] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.852151][ T5266] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.934534][ T5280] loop0: detected capacity change from 0 to 1024 [ 56.958262][ T5280] netlink: 6 bytes leftover after parsing attributes in process `syz.0.766'. [ 56.967352][ T5280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.561074][ T5170] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.571779][ T5170] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.582138][ T5170] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.592906][ T5170] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.714373][ T5292] block device autoloading is deprecated and will be removed. [ 57.722024][ T5292] syz.4.769: attempt to access beyond end of device [ 57.722024][ T5292] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.779075][ T5298] mmap: syz.4.772 (5298) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.797806][ T5298] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 57.823891][ T5300] loop4: detected capacity change from 0 to 1024 [ 57.831231][ T5300] EXT4-fs: Ignoring removed bh option [ 57.883550][ T5307] loop4: detected capacity change from 0 to 1024 [ 57.890160][ T5307] EXT4-fs: Ignoring removed bh option [ 57.939052][ T5313] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 57.948888][ T5313] team0: Device hsr_slave_0 failed to register rx_handler [ 57.959358][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 57.982883][ T5315] loop4: detected capacity change from 0 to 128 [ 58.109864][ T5318] loop2: detected capacity change from 0 to 256 [ 58.119477][ T5318] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 58.127603][ T5318] FAT-fs (loop2): Filesystem has been set read-only [ 58.160883][ T5320] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.171634][ T5320] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.182575][ T5320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.193905][ T5320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.232065][ T5322] loop2: detected capacity change from 0 to 1024 [ 58.256978][ T5322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 58.265062][ T5322] System zones: 0-1, 3-12 [ 58.344831][ T5336] loop1: detected capacity change from 0 to 1024 [ 58.351370][ T5336] EXT4-fs: Ignoring removed bh option [ 58.415092][ T5348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.427696][ T5348] loop2: detected capacity change from 0 to 128 [ 58.441322][ T5348] ======================================================= [ 58.441322][ T5348] WARNING: The mand mount option has been deprecated and [ 58.441322][ T5348] and is ignored by this kernel. Remove the mand [ 58.441322][ T5348] option from the mount to silence this warning. [ 58.441322][ T5348] ======================================================= [ 58.477353][ T5348] vfat: Unknown parameter '000000000000000000001844674407370955161500000000000000000000003ÿÿÿÿ' [ 58.566758][ T5372] loop1: detected capacity change from 0 to 512 [ 58.573417][ T5372] EXT4-fs: inline encryption not supported [ 58.580605][ T5372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.589119][ T5372] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.615424][ T5376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.627714][ T5372] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.791: bg 0: block 64: padding at end of block bitmap is not set [ 58.642259][ T5372] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.791: Failed to acquire dquot type 0 [ 58.653878][ T5372] EXT4-fs (loop1): 1 truncate cleaned up [ 58.666774][ T5372] syz.1.791 (5372) used greatest stack depth: 9272 bytes left [ 58.667977][ T5376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.709310][ T5382] FAULT_INJECTION: forcing a failure. [ 58.709310][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 58.722091][ T5382] CPU: 1 UID: 0 PID: 5382 Comm: syz.1.794 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 58.732681][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.742719][ T5382] Call Trace: [ 58.746004][ T5382] [ 58.748918][ T5382] dump_stack_lvl+0xf2/0x150 [ 58.753523][ T5382] dump_stack+0x15/0x1a [ 58.757671][ T5382] should_fail_ex+0x223/0x230 [ 58.762348][ T5382] should_failslab+0x8f/0xb0 [ 58.766973][ T5382] kmem_cache_alloc_node_noprof+0x59/0x320 [ 58.772831][ T5382] ? __alloc_skb+0x10b/0x310 [ 58.777406][ T5382] __alloc_skb+0x10b/0x310 [ 58.781823][ T5382] ? audit_log_start+0x34c/0x6b0 [ 58.786772][ T5382] audit_log_start+0x368/0x6b0 [ 58.791536][ T5382] audit_seccomp+0x4b/0x130 [ 58.796024][ T5382] __seccomp_filter+0x6fa/0x1180 [ 58.800954][ T5382] __secure_computing+0x9f/0x1c0 [ 58.805926][ T5382] syscall_trace_enter+0xd1/0x1f0 [ 58.810947][ T5382] ? fpregs_assert_state_consistent+0x83/0xa0 [ 58.817044][ T5382] do_syscall_64+0xaa/0x1c0 [ 58.821537][ T5382] ? clear_bhb_loop+0x55/0xb0 [ 58.826200][ T5382] ? clear_bhb_loop+0x55/0xb0 [ 58.830949][ T5382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.836958][ T5382] RIP: 0033:0x7faf420e473c [ 58.841353][ T5382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.861069][ T5382] RSP: 002b:00007faf40757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.869471][ T5382] RAX: ffffffffffffffda RBX: 00007faf422d5fa0 RCX: 00007faf420e473c [ 58.877451][ T5382] RDX: 000000000000000f RSI: 00007faf407570a0 RDI: 0000000000000006 [ 58.885425][ T5382] RBP: 00007faf40757090 R08: 0000000000000000 R09: 0000000000000000 [ 58.893386][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.901344][ T5382] R13: 0000000000000000 R14: 00007faf422d5fa0 R15: 00007fff8e3a4af8 [ 58.909304][ T5382] [ 58.914473][ T5376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.935348][ T5384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 58.968033][ T5376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.003666][ T5388] loop1: detected capacity change from 0 to 1024 [ 59.010271][ T5388] EXT4-fs: Ignoring removed bh option [ 59.260565][ T5401] FAULT_INJECTION: forcing a failure. [ 59.260565][ T5401] name failslab, interval 1, probability 0, space 0, times 0 [ 59.273307][ T5401] CPU: 0 UID: 0 PID: 5401 Comm: syz.1.800 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 59.283902][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.293947][ T5401] Call Trace: [ 59.297219][ T5401] [ 59.300133][ T5401] dump_stack_lvl+0xf2/0x150 [ 59.304767][ T5401] dump_stack+0x15/0x1a [ 59.308939][ T5401] should_fail_ex+0x223/0x230 [ 59.313605][ T5401] should_failslab+0x8f/0xb0 [ 59.318206][ T5401] __kmalloc_node_noprof+0xad/0x410 [ 59.323529][ T5401] ? __kvmalloc_node_noprof+0x72/0x170 [ 59.329009][ T5401] __kvmalloc_node_noprof+0x72/0x170 [ 59.334292][ T5401] seq_read_iter+0x144/0x930 [ 59.338877][ T5401] ? mod_objcg_state+0x3b1/0x4f0 [ 59.343899][ T5401] ? avc_policy_seqno+0x15/0x20 [ 59.348805][ T5401] ? selinux_file_permission+0x22a/0x360 [ 59.354452][ T5401] proc_reg_read_iter+0x118/0x190 [ 59.359593][ T5401] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 59.365301][ T5401] __io_read+0x34e/0xaf0 [ 59.369608][ T5401] ? fget+0x35/0x40 [ 59.373442][ T5401] io_read+0x1e/0x60 [ 59.377362][ T5401] io_issue_sqe+0x150/0xc10 [ 59.381905][ T5401] ? io_prep_rw+0x415/0x440 [ 59.386438][ T5401] io_submit_sqes+0x64d/0x1090 [ 59.391211][ T5401] __se_sys_io_uring_enter+0x1b9/0x1ba0 [ 59.396852][ T5401] ? 0xffffffff81000000 [ 59.401008][ T5401] ? selinux_file_permission+0x22a/0x360 [ 59.406682][ T5401] ? get_pid_task+0x8e/0xc0 [ 59.411177][ T5401] ? proc_fail_nth_write+0x12a/0x150 [ 59.416456][ T5401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.422138][ T5401] ? vfs_write+0x596/0x920 [ 59.426542][ T5401] ? __fget_files+0x17c/0x1c0 [ 59.431228][ T5401] ? fput+0x1c4/0x200 [ 59.435253][ T5401] ? ksys_write+0x176/0x1b0 [ 59.439767][ T5401] __x64_sys_io_uring_enter+0x78/0x90 [ 59.445127][ T5401] x64_sys_call+0xb5e/0x2dc0 [ 59.449769][ T5401] do_syscall_64+0xc9/0x1c0 [ 59.454339][ T5401] ? clear_bhb_loop+0x55/0xb0 [ 59.459012][ T5401] ? clear_bhb_loop+0x55/0xb0 [ 59.463667][ T5401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.469548][ T5401] RIP: 0033:0x7faf420e5d29 [ 59.473946][ T5401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.493560][ T5401] RSP: 002b:00007faf40757038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 59.502020][ T5401] RAX: ffffffffffffffda RBX: 00007faf422d5fa0 RCX: 00007faf420e5d29 [ 59.509994][ T5401] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 59.518011][ T5401] RBP: 00007faf40757090 R08: 0000000000000000 R09: 0000000000000000 [ 59.525964][ T5401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.533919][ T5401] R13: 0000000000000000 R14: 00007faf422d5fa0 R15: 00007fff8e3a4af8 [ 59.541884][ T5401] [ 59.562153][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'. [ 59.573402][ T5403] vlan0: entered promiscuous mode [ 59.578509][ T5403] vlan0: entered allmulticast mode [ 59.660252][ T5406] FAULT_INJECTION: forcing a failure. [ 59.660252][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 59.673033][ T5406] CPU: 1 UID: 0 PID: 5406 Comm: syz.1.802 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 59.683678][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.693796][ T5406] Call Trace: [ 59.697079][ T5406] [ 59.699992][ T5406] dump_stack_lvl+0xf2/0x150 [ 59.704588][ T5406] dump_stack+0x15/0x1a [ 59.708730][ T5406] should_fail_ex+0x223/0x230 [ 59.713392][ T5406] should_failslab+0x8f/0xb0 [ 59.718089][ T5406] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 59.724462][ T5406] ? audit_log_vformat+0x23a/0x490 [ 59.729681][ T5406] ? sidtab_sid2str_get+0xb8/0x140 [ 59.734804][ T5406] kmemdup_noprof+0x2a/0x60 [ 59.739450][ T5406] sidtab_sid2str_get+0xb8/0x140 [ 59.744374][ T5406] security_sid_to_context_core+0x1eb/0x2f0 [ 59.750274][ T5406] security_sid_to_context+0x27/0x30 [ 59.755574][ T5406] avc_audit_post_callback+0x10d/0x530 [ 59.761097][ T5406] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 59.767064][ T5406] common_lsm_audit+0x90f/0x1010 [ 59.772006][ T5406] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 59.777982][ T5406] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 59.783845][ T5406] slow_avc_audit+0xf9/0x140 [ 59.788423][ T5406] avc_has_extended_perms+0x595/0x820 [ 59.793815][ T5406] ioctl_has_perm+0x286/0x2e0 [ 59.798500][ T5406] selinux_file_ioctl+0x2f7/0x380 [ 59.803533][ T5406] ? __fget_files+0x17c/0x1c0 [ 59.808205][ T5406] security_file_ioctl+0x47/0x80 [ 59.813151][ T5406] __se_sys_ioctl+0x46/0x140 [ 59.817856][ T5406] __x64_sys_ioctl+0x43/0x50 [ 59.822456][ T5406] x64_sys_call+0x1690/0x2dc0 [ 59.827120][ T5406] do_syscall_64+0xc9/0x1c0 [ 59.831677][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 59.836387][ T5406] ? clear_bhb_loop+0x55/0xb0 [ 59.841067][ T5406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.846975][ T5406] RIP: 0033:0x7faf420e5d29 [ 59.851378][ T5406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.871027][ T5406] RSP: 002b:00007faf40757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.879469][ T5406] RAX: ffffffffffffffda RBX: 00007faf422d5fa0 RCX: 00007faf420e5d29 [ 59.887447][ T5406] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 59.895408][ T5406] RBP: 00007faf40757090 R08: 0000000000000000 R09: 0000000000000000 [ 59.903361][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.911324][ T5406] R13: 0000000000000000 R14: 00007faf422d5fa0 R15: 00007fff8e3a4af8 [ 59.919373][ T5406] [ 59.949109][ T5408] loop1: detected capacity change from 0 to 512 [ 59.967183][ T5412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.805'. [ 59.976128][ T5412] FAULT_INJECTION: forcing a failure. [ 59.976128][ T5412] name failslab, interval 1, probability 0, space 0, times 0 [ 59.989063][ T5412] CPU: 1 UID: 0 PID: 5412 Comm: syz.0.805 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 59.990178][ T5408] EXT4-fs (loop1): too many log groups per flexible block group [ 59.999650][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.999664][ T5412] Call Trace: [ 59.999671][ T5412] [ 59.999719][ T5412] dump_stack_lvl+0xf2/0x150 [ 60.007534][ T5408] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 60.017409][ T5412] dump_stack+0x15/0x1a [ 60.017442][ T5412] should_fail_ex+0x223/0x230 [ 60.017531][ T5412] should_failslab+0x8f/0xb0 [ 60.024300][ T5408] EXT4-fs (loop1): mount failed [ 60.028290][ T5412] kmem_cache_alloc_noprof+0x52/0x320 [ 60.028318][ T5412] ? skb_clone+0x154/0x1f0 [ 60.028346][ T5412] skb_clone+0x154/0x1f0 [ 60.028367][ T5412] __netlink_deliver_tap+0x2bd/0x4f0 [ 60.028391][ T5412] netlink_sendskb+0x126/0x150 [ 60.028408][ T5412] netlink_unicast+0x291/0x670 [ 60.082225][ T5412] netlink_ack+0x4bb/0x4f0 [ 60.086702][ T5412] netlink_rcv_skb+0x19c/0x230 [ 60.091460][ T5412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.097045][ T5412] rtnetlink_rcv+0x1c/0x30 [ 60.101481][ T5412] netlink_unicast+0x599/0x670 [ 60.106242][ T5412] netlink_sendmsg+0x5cc/0x6e0 [ 60.111038][ T5412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.116314][ T5412] __sock_sendmsg+0x140/0x180 [ 60.120993][ T5412] ____sys_sendmsg+0x312/0x410 [ 60.125884][ T5412] __sys_sendmsg+0x19d/0x230 [ 60.130481][ T5412] __x64_sys_sendmsg+0x46/0x50 [ 60.135294][ T5412] x64_sys_call+0x2734/0x2dc0 [ 60.140030][ T5412] do_syscall_64+0xc9/0x1c0 [ 60.144582][ T5412] ? clear_bhb_loop+0x55/0xb0 [ 60.149253][ T5412] ? clear_bhb_loop+0x55/0xb0 [ 60.153921][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.159869][ T5412] RIP: 0033:0x7ff167da5d29 [ 60.164270][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.183873][ T5412] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.192402][ T5412] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 60.200360][ T5412] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 60.208339][ T5412] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 60.216299][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.224259][ T5412] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 60.232224][ T5412] [ 60.246505][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 60.255312][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 60.393244][ T5423] loop1: detected capacity change from 0 to 1024 [ 60.400362][ T5423] EXT4-fs: Ignoring removed bh option [ 60.454345][ T5431] loop0: detected capacity change from 0 to 256 [ 60.468532][ T5431] FAT-fs (loop0): Directory bread(block 64) failed [ 60.475145][ T5431] FAT-fs (loop0): Directory bread(block 65) failed [ 60.482333][ T5431] FAT-fs (loop0): Directory bread(block 66) failed [ 60.489718][ T5431] FAT-fs (loop0): Directory bread(block 67) failed [ 60.496348][ T5431] FAT-fs (loop0): Directory bread(block 68) failed [ 60.502941][ T5431] FAT-fs (loop0): Directory bread(block 69) failed [ 60.509057][ T5429] uprobe: syz.1.809:5429 failed to unregister, leaking uprobe [ 60.509707][ T5431] FAT-fs (loop0): Directory bread(block 70) failed [ 60.523548][ T5431] FAT-fs (loop0): Directory bread(block 71) failed [ 60.530117][ T5431] FAT-fs (loop0): Directory bread(block 72) failed [ 60.536740][ T5431] FAT-fs (loop0): Directory bread(block 73) failed [ 60.554687][ T5431] syz.0.806: attempt to access beyond end of device [ 60.554687][ T5431] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 60.559919][ T5433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.810'. [ 60.569300][ T5431] syz.0.806: attempt to access beyond end of device [ 60.569300][ T5431] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 60.657302][ T5438] loop3: detected capacity change from 0 to 512 [ 60.663930][ T5438] EXT4-fs: inline encryption not supported [ 60.671225][ T5438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.679764][ T5438] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.698397][ T5438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.811: bg 0: block 64: padding at end of block bitmap is not set [ 60.713582][ T5438] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.811: Failed to acquire dquot type 0 [ 60.725177][ T5438] EXT4-fs (loop3): 1 truncate cleaned up [ 60.734594][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 60.734608][ T29] audit: type=1326 audit(1734815896.846:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5439 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf420e5d29 code=0x7ffc0000 [ 60.764299][ T29] audit: type=1326 audit(1734815896.846:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5439 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf420e5d29 code=0x7ffc0000 [ 60.764366][ T29] audit: type=1326 audit(1734815896.856:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5439 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf420e5d29 code=0x7ffc0000 [ 60.767899][ T29] audit: type=1400 audit(1734815896.886:1962): avc: denied { write } for pid=5434 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.767928][ T29] audit: type=1400 audit(1734815896.886:1963): avc: denied { nlmsg_write } for pid=5434 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.769515][ T29] audit: type=1400 audit(1734815896.886:1964): avc: denied { bind } for pid=5434 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.769541][ T29] audit: type=1400 audit(1734815896.886:1965): avc: denied { name_bind } for pid=5434 comm="syz.3.811" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.769562][ T29] audit: type=1400 audit(1734815896.886:1966): avc: denied { node_bind } for pid=5434 comm="syz.3.811" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.837125][ T29] audit: type=1326 audit(1734815896.946:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fafe65d29 code=0x7ffc0000 [ 60.862968][ T5448] hub 6-0:1.0: USB hub found [ 60.874239][ T29] audit: type=1326 audit(1734815896.946:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fafe65d29 code=0x7ffc0000 [ 60.894608][ T5448] hub 6-0:1.0: 8 ports detected [ 61.058878][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.066103][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.089751][ T5453] bridge_slave_0: left allmulticast mode [ 61.095410][ T5453] bridge_slave_0: left promiscuous mode [ 61.101146][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.112056][ T5453] bridge_slave_1: left allmulticast mode [ 61.118311][ T5453] bridge_slave_1: left promiscuous mode [ 61.124160][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.146336][ T5453] bond0: (slave bond_slave_0): Releasing backup interface [ 61.155623][ T5453] bond0: (slave bond_slave_1): Releasing backup interface [ 61.166591][ T5453] team0: Port device team_slave_0 removed [ 61.173962][ T5453] team0: Port device team_slave_1 removed [ 61.180706][ T5453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.189958][ T5453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.193618][ T5459] loop3: detected capacity change from 0 to 1024 [ 61.208111][ T5453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.217589][ T5453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.228639][ T5459] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 61.228670][ T5459] System zones: 0-1, 3-12 [ 61.254222][ T5460] loop0: detected capacity change from 0 to 1024 [ 61.268182][ T5460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 61.268458][ T5453] vlan0: left promiscuous mode [ 61.278295][ T5460] System zones: 0-1, 3-12 [ 61.281370][ T5453] vlan0: left allmulticast mode [ 61.335206][ T5466] loop1: detected capacity change from 0 to 1024 [ 61.341981][ T5466] EXT4-fs: Ignoring removed bh option [ 61.403354][ T5476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.821'. [ 61.449346][ T5478] loop1: detected capacity change from 0 to 8192 [ 61.470540][ T5478] netlink: 268 bytes leftover after parsing attributes in process `syz.1.822'. [ 61.479550][ T5478] unsupported nla_type 65024 [ 61.970770][ T5484] syz.3.824[5484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.970892][ T5484] syz.3.824[5484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.982441][ T5484] syz.3.824[5484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.013939][ T5486] loop0: detected capacity change from 0 to 164 [ 62.067807][ T5492] FAULT_INJECTION: forcing a failure. [ 62.067807][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 62.080491][ T5492] CPU: 1 UID: 0 PID: 5492 Comm: syz.0.827 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 62.091146][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.101189][ T5492] Call Trace: [ 62.104523][ T5492] [ 62.107465][ T5492] dump_stack_lvl+0xf2/0x150 [ 62.112048][ T5492] dump_stack+0x15/0x1a [ 62.116258][ T5492] should_fail_ex+0x223/0x230 [ 62.120974][ T5492] should_failslab+0x8f/0xb0 [ 62.125680][ T5492] __kmalloc_node_noprof+0xad/0x410 [ 62.130969][ T5492] ? __kvmalloc_node_noprof+0x72/0x170 [ 62.136440][ T5492] __kvmalloc_node_noprof+0x72/0x170 [ 62.141791][ T5492] nf_hook_entries_grow+0x1bd/0x470 [ 62.146990][ T5492] __nf_register_net_hook+0x16b/0x480 [ 62.152352][ T5492] nf_register_net_hook+0x88/0x130 [ 62.157477][ T5492] nf_register_net_hooks+0x41/0x140 [ 62.162688][ T5492] ip_vs_register_hooks+0x9a/0xe0 [ 62.167704][ T5492] ip_vs_add_service+0x232/0xa50 [ 62.172675][ T5492] ? should_fail_ex+0xd7/0x230 [ 62.177423][ T5492] ? __ip_vs_service_find+0x25a/0x280 [ 62.182799][ T5492] do_ip_vs_set_ctl+0x6c2/0x810 [ 62.187725][ T5492] ? ip4_datagram_release_cb+0x3f9/0x430 [ 62.193419][ T5492] ? do_ip_setsockopt+0x1fcf/0x2340 [ 62.198606][ T5492] nf_setsockopt+0x195/0x1b0 [ 62.203261][ T5492] ip_setsockopt+0xea/0x100 [ 62.207750][ T5492] udp_setsockopt+0x95/0xb0 [ 62.212285][ T5492] sock_common_setsockopt+0x64/0x80 [ 62.217482][ T5492] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.223379][ T5492] __sys_setsockopt+0x187/0x200 [ 62.228236][ T5492] __x64_sys_setsockopt+0x66/0x80 [ 62.233258][ T5492] x64_sys_call+0x282e/0x2dc0 [ 62.237947][ T5492] do_syscall_64+0xc9/0x1c0 [ 62.242442][ T5492] ? clear_bhb_loop+0x55/0xb0 [ 62.247114][ T5492] ? clear_bhb_loop+0x55/0xb0 [ 62.251914][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.257814][ T5492] RIP: 0033:0x7ff167da5d29 [ 62.262225][ T5492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.281829][ T5492] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.290264][ T5492] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 62.298217][ T5492] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.306201][ T5492] RBP: 00007ff166411090 R08: 000000000000002c R09: 0000000000000000 [ 62.314158][ T5492] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.322114][ T5492] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 62.330084][ T5492] [ 62.387249][ T5498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.830'. [ 62.421714][ T5376] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.432876][ T5376] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.440648][ T5501] loop1: detected capacity change from 0 to 512 [ 62.444787][ T5376] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.464208][ T5376] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.464808][ T5501] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.831: casefold flag without casefold feature [ 62.492755][ T5501] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.831: couldn't read orphan inode 15 (err -117) [ 62.493892][ T5504] loop0: detected capacity change from 0 to 1024 [ 62.516469][ T5504] EXT4-fs: Ignoring removed bh option [ 62.526613][ T5506] syzkaller1: entered promiscuous mode [ 62.532097][ T5506] syzkaller1: entered allmulticast mode [ 62.553638][ T5506] gretap0: left allmulticast mode [ 62.558765][ T5506] gretap0: left promiscuous mode [ 62.567347][ T5506] bridge0: port 3(vlan2) entered disabled state [ 62.590707][ T5506] bridge0: port 4(vlan3) entered disabled state [ 62.597044][ T5506] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.604237][ T5506] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.617638][ T5506] team0: left allmulticast mode [ 62.622525][ T5506] team_slave_0: left allmulticast mode [ 62.628148][ T5506] team_slave_1: left allmulticast mode [ 62.633700][ T5506] team0: left promiscuous mode [ 62.634198][ T5513] FAULT_INJECTION: forcing a failure. [ 62.634198][ T5513] name failslab, interval 1, probability 0, space 0, times 0 [ 62.638495][ T5506] team_slave_0: left promiscuous mode [ 62.638661][ T5506] team_slave_1: left promiscuous mode [ 62.651198][ T5513] CPU: 1 UID: 0 PID: 5513 Comm: syz.1.834 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 62.672494][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.682608][ T5513] Call Trace: [ 62.685965][ T5513] [ 62.688943][ T5513] dump_stack_lvl+0xf2/0x150 [ 62.693539][ T5513] dump_stack+0x15/0x1a [ 62.697694][ T5513] should_fail_ex+0x223/0x230 [ 62.702390][ T5513] should_failslab+0x8f/0xb0 [ 62.707033][ T5513] __kmalloc_noprof+0xab/0x3f0 [ 62.711788][ T5513] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 62.718037][ T5513] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 62.724144][ T5513] genl_rcv_msg+0x470/0x6c0 [ 62.728667][ T5513] ? __pfx_ieee802154_list_phy+0x10/0x10 [ 62.734407][ T5513] ? should_fail_ex+0x31/0x230 [ 62.739163][ T5513] ? __rcu_read_unlock+0x4e/0x70 [ 62.744249][ T5513] ? avc_has_perm_noaudit+0x1cc/0x210 [ 62.749624][ T5513] netlink_rcv_skb+0x12c/0x230 [ 62.754380][ T5513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.759523][ T5513] genl_rcv+0x28/0x40 [ 62.763501][ T5513] netlink_unicast+0x599/0x670 [ 62.768267][ T5513] netlink_sendmsg+0x5cc/0x6e0 [ 62.773091][ T5513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.778423][ T5513] __sock_sendmsg+0x140/0x180 [ 62.783239][ T5513] ____sys_sendmsg+0x312/0x410 [ 62.787999][ T5513] __sys_sendmsg+0x19d/0x230 [ 62.792590][ T5513] __x64_sys_sendmsg+0x46/0x50 [ 62.797396][ T5513] x64_sys_call+0x2734/0x2dc0 [ 62.802077][ T5513] do_syscall_64+0xc9/0x1c0 [ 62.806579][ T5513] ? clear_bhb_loop+0x55/0xb0 [ 62.811253][ T5513] ? clear_bhb_loop+0x55/0xb0 [ 62.815928][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.821934][ T5513] RIP: 0033:0x7faf420e5d29 [ 62.826342][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.846026][ T5513] RSP: 002b:00007faf40757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.854449][ T5513] RAX: ffffffffffffffda RBX: 00007faf422d5fa0 RCX: 00007faf420e5d29 [ 62.862514][ T5513] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 62.870481][ T5513] RBP: 00007faf40757090 R08: 0000000000000000 R09: 0000000000000000 [ 62.878442][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.886400][ T5513] R13: 0000000000000000 R14: 00007faf422d5fa0 R15: 00007fff8e3a4af8 [ 62.894441][ T5513] [ 62.940795][ T5506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.950033][ T5506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.976556][ T5506] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.976591][ T5506] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.976617][ T5506] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.976642][ T5506] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.040795][ T5523] loop0: detected capacity change from 0 to 1024 [ 63.073857][ T5523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 63.082151][ T5523] System zones: 0-1, 3-12 [ 63.568090][ T28] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.618615][ T28] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.677490][ T28] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.717840][ T28] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.746062][ T5540] chnl_net:caif_netlink_parms(): no params data found [ 63.785555][ T5552] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.812406][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.819539][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.826783][ T5540] bridge_slave_0: entered allmulticast mode [ 63.833124][ T5540] bridge_slave_0: entered promiscuous mode [ 63.846827][ T5552] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.857588][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.864727][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.871993][ T5540] bridge_slave_1: entered allmulticast mode [ 63.878445][ T5540] bridge_slave_1: entered promiscuous mode [ 63.891569][ T28] vlan2: left allmulticast mode [ 63.896470][ T28] team0: left allmulticast mode [ 63.901322][ T28] team_slave_0: left allmulticast mode [ 63.906806][ T28] team_slave_1: left allmulticast mode [ 63.912327][ T28] vlan2: left promiscuous mode [ 63.917131][ T28] team0: left promiscuous mode [ 63.921891][ T28] team_slave_0: left promiscuous mode [ 63.927375][ T28] team_slave_1: left promiscuous mode [ 63.933104][ T28] bridge0: port 3(vlan2) entered disabled state [ 63.941269][ T28] bridge_slave_1: left allmulticast mode [ 63.947058][ T28] bridge_slave_1: left promiscuous mode [ 63.952832][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.960994][ T28] bridge_slave_0: left allmulticast mode [ 63.966768][ T28] bridge_slave_0: left promiscuous mode [ 63.972524][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.087959][ T28] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.096751][ T28] bond_slave_0: left promiscuous mode [ 64.103622][ T28] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.112410][ T28] bond_slave_1: left promiscuous mode [ 64.118911][ T28] $Hÿ (unregistering): Released all slaves [ 64.127666][ T5552] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.151102][ T5540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.152559][ T5560] loop1: detected capacity change from 0 to 1024 [ 64.165033][ T5540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.175686][ T5560] EXT4-fs: Ignoring removed bh option [ 64.195969][ T28] hsr_slave_0: left promiscuous mode [ 64.201902][ T28] hsr_slave_1: left promiscuous mode [ 64.208300][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.215729][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.223727][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.231174][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.243333][ T28] veth1_macvtap: left promiscuous mode [ 64.248852][ T28] veth0_macvtap: left promiscuous mode [ 64.254372][ T28] veth1_vlan: left promiscuous mode [ 64.259725][ T28] veth0_vlan: left promiscuous mode [ 64.302864][ T5568] loop1: detected capacity change from 0 to 512 [ 64.319348][ T5568] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.344302][ T28] team0 (unregistering): Port device team_slave_1 removed [ 64.353562][ T28] team0 (unregistering): Port device team_slave_0 removed [ 64.380649][ T5540] team0: Port device team_slave_0 added [ 64.387215][ T5540] team0: Port device team_slave_1 added [ 64.393189][ T5571] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.847: corrupted inode contents [ 64.407826][ T5552] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.417730][ T5571] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.847: mark_inode_dirty error [ 64.431475][ T5571] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.847: corrupted inode contents [ 64.443752][ T5576] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.847: corrupted inode contents [ 64.464996][ T5576] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.847: mark_inode_dirty error [ 64.480566][ T5576] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.847: corrupted inode contents [ 64.503817][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.510891][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.536836][ T5540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.549886][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.556959][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.582888][ T5540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.595028][ T5584] FAULT_INJECTION: forcing a failure. [ 64.595028][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 64.607725][ T5584] CPU: 1 UID: 0 PID: 5584 Comm: syz.3.848 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 64.618410][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.628474][ T5584] Call Trace: [ 64.631742][ T5584] [ 64.634663][ T5584] dump_stack_lvl+0xf2/0x150 [ 64.639329][ T5584] dump_stack+0x15/0x1a [ 64.643479][ T5584] should_fail_ex+0x223/0x230 [ 64.648178][ T5584] should_failslab+0x8f/0xb0 [ 64.652773][ T5584] kmem_cache_alloc_node_noprof+0x59/0x320 [ 64.658623][ T5584] ? __alloc_skb+0x10b/0x310 [ 64.663239][ T5584] __alloc_skb+0x10b/0x310 [ 64.667648][ T5584] fdb_notify+0x70/0x120 [ 64.671890][ T5584] fdb_delete+0x6b4/0x850 [ 64.676219][ T5584] fdb_delete_local+0x225/0x2e0 [ 64.681107][ T5584] br_fdb_changeaddr+0xf0/0x260 [ 64.685957][ T5584] br_device_event+0x2fe/0x570 [ 64.690716][ T5584] ? __pfx_br_device_event+0x10/0x10 [ 64.696038][ T5584] raw_notifier_call_chain+0x6f/0x1d0 [ 64.701434][ T5584] call_netdevice_notifiers_info+0xae/0x100 [ 64.707471][ T5584] dev_set_mac_address+0x1ff/0x260 [ 64.712583][ T5584] dev_set_mac_address_user+0x31/0x50 [ 64.717953][ T5584] dev_ifsioc+0x8c3/0xa10 [ 64.722338][ T5584] dev_ioctl+0x7fa/0xab0 [ 64.726632][ T5584] sock_do_ioctl+0x11c/0x260 [ 64.731221][ T5584] sock_ioctl+0x40f/0x600 [ 64.735619][ T5584] ? __pfx_sock_ioctl+0x10/0x10 [ 64.740530][ T5584] __se_sys_ioctl+0xc9/0x140 [ 64.745116][ T5584] __x64_sys_ioctl+0x43/0x50 [ 64.749702][ T5584] x64_sys_call+0x1690/0x2dc0 [ 64.754412][ T5584] do_syscall_64+0xc9/0x1c0 [ 64.758992][ T5584] ? clear_bhb_loop+0x55/0xb0 [ 64.763660][ T5584] ? clear_bhb_loop+0x55/0xb0 [ 64.768327][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.774222][ T5584] RIP: 0033:0x7f7fafe65d29 [ 64.778692][ T5584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.798290][ T5584] RSP: 002b:00007f7fae4d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.806725][ T5584] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe65d29 [ 64.814705][ T5584] RDX: 0000000020000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 64.822666][ T5584] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.830689][ T5584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.838647][ T5584] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 64.846669][ T5584] [ 64.855469][ T5552] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.871087][ T5552] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.882060][ T5552] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.893894][ T5552] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.937471][ T5540] hsr_slave_0: entered promiscuous mode [ 64.943718][ T5540] hsr_slave_1: entered promiscuous mode [ 64.949864][ T5540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.955026][ T5594] loop3: detected capacity change from 0 to 1024 [ 64.957671][ T5540] Cannot create hsr debugfs directory [ 64.971368][ T5594] EXT4-fs mount: 101 callbacks suppressed [ 64.971382][ T5594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.995290][ T5594] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.076846][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.120475][ T5613] loop3: detected capacity change from 0 to 1024 [ 65.129029][ T5540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.140328][ T5540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.146334][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.158180][ T5540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.168470][ T5540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.175515][ T5613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 65.184248][ T5613] System zones: 0-1, 3-12 [ 65.190595][ T5613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.233092][ T5622] loop1: detected capacity change from 0 to 128 [ 65.237242][ T5540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.258934][ T5622] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.259157][ T5540] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.272330][ T5622] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.312764][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.319853][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.328968][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.336030][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.358599][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.360912][ T5540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.429795][ T5540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.575694][ T5540] veth0_vlan: entered promiscuous mode [ 65.584209][ T5540] veth1_vlan: entered promiscuous mode [ 65.604045][ T5540] veth0_macvtap: entered promiscuous mode [ 65.611943][ T5540] veth1_macvtap: entered promiscuous mode [ 65.623044][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.633582][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.645804][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.671808][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.682461][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.693163][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.703647][ T5540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.712536][ T5540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.721446][ T5540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.730289][ T5540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.750476][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 65.750559][ T29] audit: type=1400 audit(1734815901.866:2233): avc: denied { mounton } for pid=5540 comm="syz-executor" path="/root/syzkaller.Qr1mqZ/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.786762][ T29] audit: type=1400 audit(1734815901.896:2234): avc: denied { mount } for pid=5540 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.808941][ T29] audit: type=1400 audit(1734815901.896:2235): avc: denied { mount } for pid=5540 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.830914][ T29] audit: type=1400 audit(1734815901.896:2236): avc: denied { mounton } for pid=5540 comm="syz-executor" path="/root/syzkaller.Qr1mqZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.857707][ T29] audit: type=1400 audit(1734815901.896:2237): avc: denied { mounton } for pid=5540 comm="syz-executor" path="/root/syzkaller.Qr1mqZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.907331][ T29] audit: type=1400 audit(1734815901.976:2238): avc: denied { mounton } for pid=5540 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.930386][ T29] audit: type=1400 audit(1734815901.976:2239): avc: denied { mount } for pid=5540 comm="syz-executor" name="/" dev="gadgetfs" ino=3654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.964945][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.977564][ T5687] loop0: detected capacity change from 0 to 512 [ 66.016295][ T5687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.029505][ T5687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.068351][ T5687] EXT4-fs (loop0): 1 truncate cleaned up [ 66.074373][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.100117][ T29] audit: type=1400 audit(1734815902.216:2240): avc: denied { unlink } for pid=5686 comm="syz.0.855" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.123475][ T5722] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.136877][ T29] audit: type=1400 audit(1734815902.256:2241): avc: denied { mount } for pid=5727 comm="syz.3.860" name="/" dev="configfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.160105][ T29] audit: type=1400 audit(1734815902.276:2242): avc: denied { create } for pid=5686 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.184533][ T5722] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.215799][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.284762][ T5743] loop0: detected capacity change from 0 to 1024 [ 66.314674][ T5743] EXT4-fs: Ignoring removed orlov option [ 66.320435][ T5743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.343063][ T5722] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.359809][ T5754] FAULT_INJECTION: forcing a failure. [ 66.359809][ T5754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.372988][ T5754] CPU: 1 UID: 0 PID: 5754 Comm: syz.1.865 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 66.383597][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.393729][ T5754] Call Trace: [ 66.397010][ T5754] [ 66.399944][ T5754] dump_stack_lvl+0xf2/0x150 [ 66.404645][ T5754] dump_stack+0x15/0x1a [ 66.408815][ T5754] should_fail_ex+0x223/0x230 [ 66.413583][ T5754] should_fail+0xb/0x10 [ 66.417826][ T5754] should_fail_usercopy+0x1a/0x20 [ 66.422939][ T5754] _copy_to_user+0x20/0xa0 [ 66.427377][ T5754] simple_read_from_buffer+0xa0/0x110 [ 66.432771][ T5754] proc_fail_nth_read+0xf9/0x140 [ 66.435323][ T5743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.437715][ T5754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.437744][ T5754] vfs_read+0x1a2/0x700 [ 66.437766][ T5754] ? __rcu_read_unlock+0x4e/0x70 [ 66.464376][ T5754] ? __fget_files+0x17c/0x1c0 [ 66.469086][ T5754] ksys_read+0xe8/0x1b0 [ 66.473362][ T5754] __x64_sys_read+0x42/0x50 [ 66.477876][ T5754] x64_sys_call+0x2874/0x2dc0 [ 66.482648][ T5754] do_syscall_64+0xc9/0x1c0 [ 66.487153][ T5754] ? clear_bhb_loop+0x55/0xb0 [ 66.491814][ T5754] ? clear_bhb_loop+0x55/0xb0 [ 66.496596][ T5754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.502542][ T5754] RIP: 0033:0x7faf420e473c [ 66.506964][ T5754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.526579][ T5754] RSP: 002b:00007faf40736030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.535015][ T5754] RAX: ffffffffffffffda RBX: 00007faf422d6080 RCX: 00007faf420e473c [ 66.543040][ T5754] RDX: 000000000000000f RSI: 00007faf407360a0 RDI: 0000000000000004 [ 66.550992][ T5754] RBP: 00007faf40736090 R08: 0000000000000000 R09: 0000000000000000 [ 66.559005][ T5754] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 66.566963][ T5754] R13: 0000000000000001 R14: 00007faf422d6080 R15: 00007fff8e3a4af8 [ 66.574928][ T5754] [ 66.585816][ T5749] netlink: 133492 bytes leftover after parsing attributes in process `syz.3.864'. [ 66.599498][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.628285][ T5722] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.644093][ T5767] loop1: detected capacity change from 0 to 1024 [ 66.677715][ T5767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 66.685887][ T5767] System zones: 0-1, 3-12 [ 66.690909][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.751787][ T5779] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.870'. [ 67.450209][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.609092][ T5797] loop0: detected capacity change from 0 to 512 [ 67.618259][ T5797] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.875: casefold flag without casefold feature [ 67.639308][ T5797] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.875: couldn't read orphan inode 15 (err -117) [ 67.652041][ T5797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.672920][ T5722] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.683766][ T5722] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.698035][ T5722] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.707808][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.709577][ T5722] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790778][ T5810] FAULT_INJECTION: forcing a failure. [ 67.790778][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 67.803528][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.5.879 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 67.814161][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.824226][ T5810] Call Trace: [ 67.827498][ T5810] [ 67.830484][ T5810] dump_stack_lvl+0xf2/0x150 [ 67.835073][ T5810] dump_stack+0x15/0x1a [ 67.839275][ T5810] should_fail_ex+0x223/0x230 [ 67.843998][ T5810] should_failslab+0x8f/0xb0 [ 67.848718][ T5810] kmem_cache_alloc_node_noprof+0x59/0x320 [ 67.854590][ T5810] ? dup_task_struct+0x6c/0x710 [ 67.859496][ T5810] dup_task_struct+0x6c/0x710 [ 67.864185][ T5810] ? kstrtoull+0x110/0x140 [ 67.868597][ T5810] copy_process+0x3a9/0x1f90 [ 67.873265][ T5810] ? 0xffffffff81000000 [ 67.877404][ T5810] ? selinux_file_permission+0x22a/0x360 [ 67.883080][ T5810] ? __rcu_read_unlock+0x4e/0x70 [ 67.888015][ T5810] kernel_clone+0x167/0x5e0 [ 67.892511][ T5810] ? vfs_write+0x596/0x920 [ 67.896973][ T5810] __x64_sys_clone+0xe8/0x120 [ 67.901643][ T5810] x64_sys_call+0x2d7e/0x2dc0 [ 67.906312][ T5810] do_syscall_64+0xc9/0x1c0 [ 67.910803][ T5810] ? clear_bhb_loop+0x55/0xb0 [ 67.915467][ T5810] ? clear_bhb_loop+0x55/0xb0 [ 67.920236][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.926261][ T5810] RIP: 0033:0x7f501e765d29 [ 67.930735][ T5810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.950432][ T5810] RSP: 002b:00007f501cdd0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 67.958901][ T5810] RAX: ffffffffffffffda RBX: 00007f501e955fa0 RCX: 00007f501e765d29 [ 67.966862][ T5810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000010eb22b000 [ 67.974905][ T5810] RBP: 00007f501cdd1090 R08: 0000000000000000 R09: 0000000000000000 [ 67.982863][ T5810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 67.990849][ T5810] R13: 0000000000000000 R14: 00007f501e955fa0 R15: 00007ffce8ba7188 [ 67.998833][ T5810] [ 68.071560][ T5822] FAULT_INJECTION: forcing a failure. [ 68.071560][ T5822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.084741][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.3.884 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 68.095344][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.105407][ T5822] Call Trace: [ 68.108688][ T5822] [ 68.111647][ T5822] dump_stack_lvl+0xf2/0x150 [ 68.116309][ T5822] dump_stack+0x15/0x1a [ 68.120471][ T5822] should_fail_ex+0x223/0x230 [ 68.125154][ T5822] should_fail+0xb/0x10 [ 68.129313][ T5822] should_fail_usercopy+0x1a/0x20 [ 68.134351][ T5822] _copy_to_user+0x20/0xa0 [ 68.138781][ T5822] simple_read_from_buffer+0xa0/0x110 [ 68.144233][ T5822] proc_fail_nth_read+0xf9/0x140 [ 68.149183][ T5822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.154759][ T5822] vfs_read+0x1a2/0x700 [ 68.154784][ T5822] ? __rcu_read_unlock+0x4e/0x70 [ 68.154808][ T5822] ? __fget_files+0x17c/0x1c0 [ 68.168674][ T5822] ksys_read+0xe8/0x1b0 [ 68.168702][ T5822] __x64_sys_read+0x42/0x50 [ 68.177358][ T5822] x64_sys_call+0x2874/0x2dc0 [ 68.177380][ T5822] do_syscall_64+0xc9/0x1c0 [ 68.177401][ T5822] ? clear_bhb_loop+0x55/0xb0 [ 68.177421][ T5822] ? clear_bhb_loop+0x55/0xb0 [ 68.177441][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.201846][ T5822] RIP: 0033:0x7f7fafe6473c [ 68.201864][ T5822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.201879][ T5822] RSP: 002b:00007f7fae4d7030 EFLAGS: 00000246 [ 68.211257][ T5823] loop5: detected capacity change from 0 to 1024 [ 68.225933][ T5822] ORIG_RAX: 0000000000000000 [ 68.225999][ T5822] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe6473c [ 68.251117][ T5822] RDX: 000000000000000f RSI: 00007f7fae4d70a0 RDI: 0000000000000005 [ 68.251131][ T5822] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.267159][ T5822] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 68.267171][ T5822] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 68.267189][ T5822] [ 68.309513][ T5823] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 68.309545][ T5823] System zones: 0-1, 3-12 [ 68.383668][ T5835] hub 6-0:1.0: USB hub found [ 68.388756][ T5835] hub 6-0:1.0: 8 ports detected [ 68.465909][ T5839] loop1: detected capacity change from 0 to 512 [ 68.484550][ T5823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.501293][ T5839] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.887: casefold flag without casefold feature [ 68.517982][ T5839] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.887: couldn't read orphan inode 15 (err -117) [ 68.544753][ T5839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.622799][ T5540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.650392][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.724982][ T5842] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.757338][ T5842] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.817516][ T5842] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.877427][ T5842] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.003304][ T5860] loop1: detected capacity change from 0 to 1024 [ 69.023388][ T5860] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 0 [ 69.036579][ T5860] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.051329][ T5860] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 69.062909][ T5860] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm +}[@: mark_inode_dirty error [ 69.074023][ T5860] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 69.085674][ T5860] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm +}[@: mark_inode_dirty error [ 69.096940][ T5860] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 69.108465][ T5860] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 69.117242][ T5860] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm +}[@: corrupted inode contents [ 69.128774][ T5860] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm +}[@: mark_inode_dirty error [ 69.139498][ T5860] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 69.158451][ T5860] EXT4-fs (loop1): 1 truncate cleaned up [ 69.164511][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.200299][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.227429][ T5870] loop3: detected capacity change from 0 to 1024 [ 69.238974][ T5870] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 69.249977][ T5870] System zones: 0-1, 3-12 [ 69.254860][ T5870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.309382][ T5881] loop1: detected capacity change from 0 to 1024 [ 69.327458][ T5881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.365262][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.386445][ T5888] kernel profiling enabled (shift: 17) [ 69.494558][ T5892] loop1: detected capacity change from 0 to 2048 [ 69.504516][ T5892] syz.1.905: attempt to access beyond end of device [ 69.504516][ T5892] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 69.618253][ T5901] netlink: 'syz.1.908': attribute type 10 has an invalid length. [ 69.626333][ T5901] team0: Device hsr_slave_0 failed to register rx_handler [ 69.653182][ T5903] vlan2: entered promiscuous mode [ 69.693871][ T5903] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 69.774684][ T5905] loop1: detected capacity change from 0 to 8192 [ 69.806626][ T5905] loop1: p1 p2 p3 p4 [ 69.810748][ T5905] loop1: p1 start 51379968 is beyond EOD, truncated [ 69.817804][ T5905] loop1: p3 size 100663552 extends beyond EOD, truncated [ 69.825260][ T5905] loop1: p4 size 81920 extends beyond EOD, truncated [ 69.942346][ T5926] loop0: detected capacity change from 0 to 1024 [ 69.949135][ T5926] EXT4-fs: Ignoring removed orlov option [ 69.955812][ T5926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.967622][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.992448][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.019036][ T5932] loop0: detected capacity change from 0 to 1024 [ 70.025715][ T5932] EXT4-fs: Ignoring removed bh option [ 70.037545][ T5932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.050339][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.080897][ T5938] loop3: detected capacity change from 0 to 128 [ 70.094218][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.125691][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 70.180921][ T5954] FAULT_INJECTION: forcing a failure. [ 70.180921][ T5954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.194121][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.0.920 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 70.204731][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.214772][ T5954] Call Trace: [ 70.218089][ T5954] [ 70.221003][ T5954] dump_stack_lvl+0xf2/0x150 [ 70.225585][ T5954] dump_stack+0x15/0x1a [ 70.229725][ T5954] should_fail_ex+0x223/0x230 [ 70.234383][ T5954] should_fail+0xb/0x10 [ 70.238528][ T5954] should_fail_usercopy+0x1a/0x20 [ 70.243538][ T5954] _copy_to_user+0x20/0xa0 [ 70.247944][ T5954] simple_read_from_buffer+0xa0/0x110 [ 70.253366][ T5954] proc_fail_nth_read+0xf9/0x140 [ 70.258293][ T5954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.263941][ T5954] vfs_read+0x1a2/0x700 [ 70.268110][ T5954] ? __rcu_read_unlock+0x4e/0x70 [ 70.273107][ T5954] ? __fget_files+0x17c/0x1c0 [ 70.277833][ T5954] ksys_read+0xe8/0x1b0 [ 70.282083][ T5954] __x64_sys_read+0x42/0x50 [ 70.286595][ T5954] x64_sys_call+0x2874/0x2dc0 [ 70.291345][ T5954] do_syscall_64+0xc9/0x1c0 [ 70.295837][ T5954] ? clear_bhb_loop+0x55/0xb0 [ 70.300517][ T5954] ? clear_bhb_loop+0x55/0xb0 [ 70.305179][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.311059][ T5954] RIP: 0033:0x7ff167da473c [ 70.315454][ T5954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.335051][ T5954] RSP: 002b:00007ff166411030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.343542][ T5954] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da473c [ 70.351549][ T5954] RDX: 000000000000000f RSI: 00007ff1664110a0 RDI: 0000000000000006 [ 70.359520][ T5954] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 70.367525][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.375547][ T5954] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 70.383511][ T5954] [ 70.404997][ T5956] loop0: detected capacity change from 0 to 1024 [ 70.411777][ T5956] EXT4-fs: Ignoring removed bh option [ 70.427562][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.465807][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.486460][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 70.495308][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 70.504316][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 70.514917][ T5962] tmpfs: Bad value for 'mpol' [ 70.937970][ T5980] FAULT_INJECTION: forcing a failure. [ 70.937970][ T5980] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 70.951394][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.3.927 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 70.962060][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.972104][ T5980] Call Trace: [ 70.975370][ T5980] [ 70.978293][ T5980] dump_stack_lvl+0xf2/0x150 [ 70.982941][ T5980] dump_stack+0x15/0x1a [ 70.987171][ T5980] should_fail_ex+0x223/0x230 [ 70.991864][ T5980] should_fail_alloc_page+0xfd/0x110 [ 70.997196][ T5980] __alloc_pages_noprof+0x109/0x340 [ 71.002435][ T5980] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 71.007850][ T5980] alloc_pages_noprof+0xe1/0x100 [ 71.012807][ T5980] get_zeroed_page_noprof+0x17/0x40 [ 71.018020][ T5980] simple_transaction_get+0x4c/0x120 [ 71.023305][ T5980] selinux_transaction_write+0x86/0x100 [ 71.028848][ T5980] ? __pfx_selinux_transaction_write+0x10/0x10 [ 71.035081][ T5980] vfs_write+0x281/0x920 [ 71.039337][ T5980] ? __fget_files+0x17c/0x1c0 [ 71.044035][ T5980] ksys_write+0xe8/0x1b0 [ 71.048322][ T5980] __x64_sys_write+0x42/0x50 [ 71.052915][ T5980] x64_sys_call+0x287e/0x2dc0 [ 71.057677][ T5980] do_syscall_64+0xc9/0x1c0 [ 71.062204][ T5980] ? clear_bhb_loop+0x55/0xb0 [ 71.066891][ T5980] ? clear_bhb_loop+0x55/0xb0 [ 71.071614][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.077508][ T5980] RIP: 0033:0x7f7fafe65d29 [ 71.081914][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.101514][ T5980] RSP: 002b:00007f7fae4d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.109962][ T5980] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe65d29 [ 71.117926][ T5980] RDX: 0000000000000056 RSI: 00000000200004c0 RDI: 0000000000000004 [ 71.125882][ T5980] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.133839][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.141865][ T5980] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 71.149832][ T5980] [ 71.183060][ T5982] loop3: detected capacity change from 0 to 1024 [ 71.189906][ T5982] EXT4-fs: Ignoring removed bh option [ 71.197894][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.233730][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.321622][ T5991] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 71.397418][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 71.397433][ T29] audit: type=1400 audit(1734815907.516:2485): avc: denied { bind } for pid=5995 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.501874][ T6003] tipc: Started in network mode [ 71.506819][ T6003] tipc: Node identity 7f000001, cluster identity 4711 [ 71.513774][ T6003] tipc: Enabled bearer , priority 10 [ 71.520883][ T6004] tipc: Enabling of bearer rejected, already enabled [ 71.556792][ T29] audit: type=1326 audit(1734815907.676:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.580352][ T29] audit: type=1326 audit(1734815907.676:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.599184][ T6010] FAULT_INJECTION: forcing a failure. [ 71.599184][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 71.603757][ T29] audit: type=1326 audit(1734815907.676:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.616286][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.2.937 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 71.639553][ T29] audit: type=1326 audit(1734815907.676:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.650056][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.650094][ T6010] Call Trace: [ 71.650100][ T6010] [ 71.650107][ T6010] dump_stack_lvl+0xf2/0x150 [ 71.650161][ T6010] dump_stack+0x15/0x1a [ 71.673485][ T29] audit: type=1326 audit(1734815907.676:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.683465][ T6010] should_fail_ex+0x223/0x230 [ 71.683491][ T6010] should_failslab+0x8f/0xb0 [ 71.683518][ T6010] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 71.686817][ T29] audit: type=1326 audit(1734815907.676:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.689686][ T6010] ? sidtab_sid2str_get+0xb8/0x140 [ 71.694252][ T29] audit: type=1326 audit(1734815907.676:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.698374][ T6010] kmemdup_noprof+0x2a/0x60 [ 71.721655][ T29] audit: type=1326 audit(1734815907.676:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.726279][ T6010] sidtab_sid2str_get+0xb8/0x140 [ 71.730857][ T29] audit: type=1326 audit(1734815907.676:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0d1f25d29 code=0x7ffc0000 [ 71.737148][ T6010] security_sid_to_context_core+0x1eb/0x2f0 [ 71.737175][ T6010] security_sid_to_context+0x27/0x30 [ 71.840391][ T6020] IPVS: Error connecting to the multicast addr [ 71.844958][ T6010] selinux_lsmprop_to_secctx+0x2c/0x40 [ 71.844994][ T6010] security_lsmprop_to_secctx+0x4a/0x90 [ 71.873495][ T6010] audit_log_task_context+0x93/0x1c0 [ 71.878824][ T6010] audit_log_task+0xf9/0x1c0 [ 71.883409][ T6010] audit_seccomp+0x68/0x130 [ 71.887895][ T6010] __seccomp_filter+0x6fa/0x1180 [ 71.892821][ T6010] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 71.898448][ T6010] ? vfs_write+0x596/0x920 [ 71.902847][ T6010] __secure_computing+0x9f/0x1c0 [ 71.907839][ T6010] syscall_trace_enter+0xd1/0x1f0 [ 71.912883][ T6010] ? fpregs_assert_state_consistent+0x83/0xa0 [ 71.918980][ T6010] do_syscall_64+0xaa/0x1c0 [ 71.923544][ T6010] ? clear_bhb_loop+0x55/0xb0 [ 71.928225][ T6010] ? clear_bhb_loop+0x55/0xb0 [ 71.932888][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.938859][ T6010] RIP: 0033:0x7fc0d1f25d29 [ 71.943282][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.962891][ T6010] RSP: 002b:00007fc0d0591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.971403][ T6010] RAX: ffffffffffffffda RBX: 00007fc0d2115fa0 RCX: 00007fc0d1f25d29 [ 71.979366][ T6010] RDX: 0000000000000094 RSI: 00000000200004c0 RDI: 0000000000000005 [ 71.987378][ T6010] RBP: 00007fc0d0591090 R08: 0000000000000000 R09: 0000000000000000 [ 71.995339][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.003344][ T6010] R13: 0000000000000000 R14: 00007fc0d2115fa0 R15: 00007ffc0f6db8f8 [ 72.011347][ T6010] [ 72.122097][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 72.173160][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.297174][ T6051] capability: warning: `syz.0.947' uses 32-bit capabilities (legacy support in use) [ 72.353039][ T6061] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 72.363801][ T6061] team0: Device hsr_slave_0 failed to register rx_handler [ 72.420521][ T6068] loop0: detected capacity change from 0 to 1024 [ 72.449011][ T6068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.475793][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.502451][ T6085] FAULT_INJECTION: forcing a failure. [ 72.502451][ T6085] name failslab, interval 1, probability 0, space 0, times 0 [ 72.515120][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.0.950 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 72.525714][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.535819][ T6085] Call Trace: [ 72.539133][ T6085] [ 72.542054][ T6085] dump_stack_lvl+0xf2/0x150 [ 72.546750][ T6085] dump_stack+0x15/0x1a [ 72.551074][ T6085] should_fail_ex+0x223/0x230 [ 72.555795][ T6085] should_failslab+0x8f/0xb0 [ 72.560514][ T6085] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 72.566962][ T6085] ? __kvmalloc_node_noprof+0x72/0x170 [ 72.572506][ T6085] ? simple_xattr_set+0xa3/0x2a0 [ 72.577436][ T6085] kstrdup+0x38/0x80 [ 72.581328][ T6085] simple_xattr_set+0xa3/0x2a0 [ 72.586151][ T6085] ? strlen+0x19/0x30 [ 72.590127][ T6085] shmem_xattr_handler_set+0x129/0x220 [ 72.595614][ T6085] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 72.601588][ T6085] __vfs_setxattr+0x2e5/0x310 [ 72.606326][ T6085] __vfs_setxattr_noperm+0xed/0x420 [ 72.611573][ T6085] __vfs_setxattr_locked+0x1af/0x1d0 [ 72.616859][ T6085] vfs_setxattr+0x140/0x290 [ 72.621426][ T6085] filename_setxattr+0x198/0x2a0 [ 72.626362][ T6085] path_setxattrat+0x284/0x310 [ 72.631198][ T6085] __x64_sys_lsetxattr+0x71/0x90 [ 72.636166][ T6085] x64_sys_call+0x29c8/0x2dc0 [ 72.640909][ T6085] do_syscall_64+0xc9/0x1c0 [ 72.645427][ T6085] ? clear_bhb_loop+0x55/0xb0 [ 72.650094][ T6085] ? clear_bhb_loop+0x55/0xb0 [ 72.654758][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.660665][ T6085] RIP: 0033:0x7ff167da5d29 [ 72.665088][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.684684][ T6085] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 72.693083][ T6085] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 72.701084][ T6085] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 72.709042][ T6085] RBP: 00007ff166411090 R08: 0000000000000002 R09: 0000000000000000 [ 72.717045][ T6085] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 72.725118][ T6085] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 72.733140][ T6085] [ 72.737156][ T9] tipc: Node number set to 2130706433 [ 72.783887][ T5842] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.799272][ T5842] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.812122][ T5842] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.824143][ T5842] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.879593][ T6101] loop0: detected capacity change from 0 to 128 [ 72.937938][ T6107] loop2: detected capacity change from 0 to 512 [ 72.947463][ T6103] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 72.983434][ T6112] loop0: detected capacity change from 0 to 128 [ 72.995199][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.024234][ T6107] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.095241][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.112765][ T6128] capability: warning: `syz.1.967' uses deprecated v2 capabilities in a way that may be insecure [ 73.150368][ T6130] loop2: detected capacity change from 0 to 512 [ 73.168118][ T6130] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.359131][ T6147] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.405748][ T6152] loop0: detected capacity change from 0 to 512 [ 73.428593][ T6152] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.974: Invalid inode bitmap blk 4 in block_group 0 [ 73.451305][ T6159] FAULT_INJECTION: forcing a failure. [ 73.451305][ T6159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.464500][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.464668][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz.3.977 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 73.487151][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.497226][ T6159] Call Trace: [ 73.500512][ T6159] [ 73.503521][ T6159] dump_stack_lvl+0xf2/0x150 [ 73.508135][ T6159] dump_stack+0x15/0x1a [ 73.512377][ T6159] should_fail_ex+0x223/0x230 [ 73.517132][ T6159] should_fail_alloc_page+0xfd/0x110 [ 73.522497][ T6159] __alloc_pages_noprof+0x109/0x340 [ 73.527711][ T6159] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 73.533105][ T6159] alloc_pages_noprof+0xe1/0x100 [ 73.538092][ T6159] pte_alloc_one+0x31/0x110 [ 73.542653][ T6159] __pte_alloc+0x33/0x2a0 [ 73.547075][ T6159] handle_mm_fault+0x1b4a/0x2ac0 [ 73.552035][ T6159] ? __rcu_read_unlock+0x4e/0x70 [ 73.556997][ T6159] ? mt_find+0x72a/0x890 [ 73.561251][ T6159] __get_user_pages+0xf2c/0x2670 [ 73.566242][ T6159] __mm_populate+0x25b/0x3b0 [ 73.570848][ T6159] do_mlock+0x415/0x510 [ 73.575019][ T6159] ? __bpf_trace_sys_enter+0x10/0x30 [ 73.580331][ T6159] ? trace_sys_enter+0xcd/0x110 [ 73.585207][ T6159] __x64_sys_mlock+0x36/0x40 [ 73.589820][ T6159] x64_sys_call+0x26b2/0x2dc0 [ 73.594596][ T6159] do_syscall_64+0xc9/0x1c0 [ 73.599182][ T6159] ? clear_bhb_loop+0x55/0xb0 [ 73.603850][ T6159] ? clear_bhb_loop+0x55/0xb0 [ 73.608527][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.614464][ T6159] RIP: 0033:0x7f7fafe65d29 [ 73.618909][ T6159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.638595][ T6159] RSP: 002b:00007f7fae4d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 73.647069][ T6159] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe65d29 [ 73.655030][ T6159] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020eee000 [ 73.663073][ T6159] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.671033][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.679096][ T6159] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 73.687066][ T6159] [ 73.703428][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.755614][ T3299] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 73.775158][ T6162] loop3: detected capacity change from 0 to 1024 [ 73.786552][ T6162] EXT4-fs: Ignoring removed bh option [ 73.807128][ T6166] loop2: detected capacity change from 0 to 512 [ 73.819589][ T6162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.832173][ T6166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.839280][ T6166] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.846326][ T6166] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 73.885555][ T6166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840e02c, mo2=0002] [ 73.896660][ T6166] System zones: 1-12 [ 73.944705][ T6166] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.951293][ T6166] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.980: Inode bitmap for bg 0 marked uninitialized [ 73.964054][ T6166] EXT4-fs (loop2): Remounting filesystem read-only [ 73.971075][ T6166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.983350][ T6166] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 73.996718][ T6166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.997390][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.060055][ T6176] loop5: detected capacity change from 0 to 512 [ 74.116181][ T6191] pim6reg1: entered promiscuous mode [ 74.116262][ T6191] pim6reg1: entered allmulticast mode [ 74.132164][ T6193] tmpfs: Bad value for 'mpol' [ 74.135122][ T6188] loop2: detected capacity change from 0 to 1024 [ 74.173980][ T6198] syz.3.989[6198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.174101][ T6198] syz.3.989[6198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.185698][ T6188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 74.220245][ T6198] syz.3.989[6198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.220413][ T6188] System zones: 0-1, 3-12 [ 74.239312][ T6191] loop3: detected capacity change from 0 to 512 [ 74.246793][ T6188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.254130][ T6202] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 74.258934][ T6191] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 74.277422][ T6191] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 74.285352][ T6191] EXT4-fs (loop3): failed to initialize system zone (-117) [ 74.285626][ T6202] netlink: '&\@è@['#@': attribute type 4 has an invalid length. [ 74.292665][ T6191] EXT4-fs (loop3): mount failed [ 74.390001][ T6212] loop0: detected capacity change from 0 to 512 [ 74.396579][ T6212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.407311][ T6214] loop3: detected capacity change from 0 to 1024 [ 74.414080][ T6214] EXT4-fs: Ignoring removed bh option [ 74.439460][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.511808][ T6212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.524456][ T6212] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.554366][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.618546][ T6230] FAULT_INJECTION: forcing a failure. [ 74.618546][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.631675][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.3.996 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 74.642274][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.652338][ T6230] Call Trace: [ 74.655628][ T6230] [ 74.658557][ T6230] dump_stack_lvl+0xf2/0x150 [ 74.663251][ T6230] dump_stack+0x15/0x1a [ 74.667415][ T6230] should_fail_ex+0x223/0x230 [ 74.672156][ T6230] should_fail+0xb/0x10 [ 74.676310][ T6230] should_fail_usercopy+0x1a/0x20 [ 74.681370][ T6230] _copy_from_user+0x1e/0xb0 [ 74.686035][ T6230] kstrtouint_from_user+0x76/0xe0 [ 74.691100][ T6230] ? 0xffffffff81000000 [ 74.695263][ T6230] ? selinux_file_permission+0x22a/0x360 [ 74.700922][ T6230] proc_fail_nth_write+0x4f/0x150 [ 74.706020][ T6230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.711804][ T6230] vfs_write+0x281/0x920 [ 74.716080][ T6230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.721697][ T6230] ? __fget_files+0x17c/0x1c0 [ 74.726487][ T6230] ksys_write+0xe8/0x1b0 [ 74.731291][ T6230] __x64_sys_write+0x42/0x50 [ 74.735960][ T6230] x64_sys_call+0x287e/0x2dc0 [ 74.740673][ T6230] do_syscall_64+0xc9/0x1c0 [ 74.745190][ T6230] ? clear_bhb_loop+0x55/0xb0 [ 74.749988][ T6230] ? clear_bhb_loop+0x55/0xb0 [ 74.754685][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.760692][ T6230] RIP: 0033:0x7f7fafe647df [ 74.765141][ T6230] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.784759][ T6230] RSP: 002b:00007f7fae4d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.793264][ T6230] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7fafe647df [ 74.801235][ T6230] RDX: 0000000000000001 RSI: 00007f7fae4d70a0 RDI: 0000000000000004 [ 74.809216][ T6230] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.817218][ T6230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.825222][ T6230] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 74.833288][ T6230] [ 74.932405][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.961120][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.972781][ T6237] Cannot find set identified by id 0 to match [ 75.017898][ T6246] syz.0.999[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.018005][ T6246] syz.0.999[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.051241][ T6246] syz.0.999[6246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.063108][ T6244] vhci_hcd: invalid port number 255 [ 75.152829][ T6258] Cannot find add_set index 1 as target [ 75.256599][ T6268] FAULT_INJECTION: forcing a failure. [ 75.256599][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.269722][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.0.1004 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 75.280411][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.283432][ T6269] netlink: 'syz.2.1005': attribute type 4 has an invalid length. [ 75.290516][ T6268] Call Trace: [ 75.290525][ T6268] [ 75.290532][ T6268] dump_stack_lvl+0xf2/0x150 [ 75.290583][ T6268] dump_stack+0x15/0x1a [ 75.313299][ T6268] should_fail_ex+0x223/0x230 [ 75.317999][ T6268] should_fail+0xb/0x10 [ 75.322150][ T6268] should_fail_usercopy+0x1a/0x20 [ 75.327168][ T6268] _copy_from_iter+0xd5/0xd00 [ 75.331839][ T6268] ? kmalloc_reserve+0x16e/0x190 [ 75.336819][ T6268] ? __build_skb_around+0x196/0x1f0 [ 75.342048][ T6268] ? __alloc_skb+0x21f/0x310 [ 75.346705][ T6268] ? __virt_addr_valid+0x1ed/0x250 [ 75.351817][ T6268] ? __check_object_size+0x364/0x520 [ 75.357110][ T6268] netlink_sendmsg+0x460/0x6e0 [ 75.362012][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.367293][ T6268] __sock_sendmsg+0x140/0x180 [ 75.372031][ T6268] ____sys_sendmsg+0x312/0x410 [ 75.376844][ T6268] __sys_sendmsg+0x19d/0x230 [ 75.381520][ T6268] __x64_sys_sendmsg+0x46/0x50 [ 75.386339][ T6268] x64_sys_call+0x2734/0x2dc0 [ 75.391074][ T6268] do_syscall_64+0xc9/0x1c0 [ 75.395637][ T6268] ? clear_bhb_loop+0x55/0xb0 [ 75.400331][ T6268] ? clear_bhb_loop+0x55/0xb0 [ 75.405073][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.410981][ T6268] RIP: 0033:0x7ff167da5d29 [ 75.415388][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.435078][ T6268] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.443513][ T6268] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 75.451478][ T6268] RDX: 0000000000048040 RSI: 0000000020007580 RDI: 0000000000000003 [ 75.459519][ T6268] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 75.467531][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.475490][ T6268] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 75.483508][ T6268] [ 75.681629][ T6282] loop2: detected capacity change from 0 to 1024 [ 75.729964][ T6296] loop0: detected capacity change from 0 to 128 [ 75.736792][ T6282] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 75.745043][ T6282] System zones: 0-1, 3-12 [ 75.759864][ T6296] EXT4-fs: Ignoring removed nobh option [ 75.776562][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.829675][ T6296] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.856298][ T6296] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.963133][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.011968][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.3.1013 [ 76.043573][ T6325] syz.0.1012[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.043699][ T6325] syz.0.1012[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.064590][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.3.1013 [ 76.090966][ T6325] syz.0.1012[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.091760][ T6325] FAULT_INJECTION: forcing a failure. [ 76.091760][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 76.115778][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.0.1012 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 76.126467][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.136535][ T6325] Call Trace: [ 76.139834][ T6325] [ 76.142773][ T6325] dump_stack_lvl+0xf2/0x150 [ 76.147408][ T6325] dump_stack+0x15/0x1a [ 76.151691][ T6325] should_fail_ex+0x223/0x230 [ 76.156446][ T6325] should_failslab+0x8f/0xb0 [ 76.160391][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.3.1013 [ 76.161042][ T6325] __kmalloc_node_noprof+0xad/0x410 [ 76.178804][ T6325] ? alloc_slab_obj_exts+0x32/0x80 [ 76.183921][ T6325] alloc_slab_obj_exts+0x32/0x80 [ 76.188885][ T6325] __memcg_slab_post_alloc_hook+0x31b/0x660 [ 76.193382][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.3.1013 [ 76.194819][ T6325] kmem_cache_alloc_noprof+0x22c/0x320 [ 76.212882][ T6325] ? dst_alloc+0xc0/0x100 [ 76.217264][ T6325] ? __pfx_ip6_dst_gc+0x10/0x10 [ 76.222132][ T6325] dst_alloc+0xc0/0x100 [ 76.222914][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.3.1013 [ 76.226293][ T6325] ip6_pol_route+0x6ff/0xb90 [ 76.226319][ T6325] ? ip6_pol_route+0x385/0xb90 [ 76.226357][ T6325] ip6_pol_route_output+0x3f/0x50 [ 76.253338][ T6325] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 76.259072][ T6325] fib6_rule_lookup+0x137/0x4e0 [ 76.264000][ T6325] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 76.269734][ T6325] ? xas_create+0xb7f/0xbd0 [ 76.274248][ T6325] ip6_route_output_flags+0x1f1/0x2e0 [ 76.279651][ T6325] ip6_dst_lookup_tail+0x4d6/0xa60 [ 76.284818][ T6325] ? __xas_nomem+0x104/0x290 [ 76.289420][ T6325] ? __xa_insert+0x277/0x2d0 [ 76.294011][ T6325] ip6_dst_lookup_flow+0x48/0xc0 [ 76.298947][ T6325] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 76.304570][ T6325] addr_resolve+0x2f6/0xd90 [ 76.309077][ T6325] rdma_resolve_ip+0x2e1/0x4c0 [ 76.313847][ T6325] ? __pfx_addr_handler+0x10/0x10 [ 76.318867][ T6325] rdma_resolve_addr+0x47e/0x1280 [ 76.323884][ T6325] ? xas_load+0x3ae/0x3d0 [ 76.328234][ T6325] ucma_resolve_ip+0x143/0x1d0 [ 76.332997][ T6325] ucma_write+0x1a4/0x240 [ 76.337389][ T6325] ? __pfx_ucma_write+0x10/0x10 [ 76.342291][ T6325] vfs_write+0x281/0x920 [ 76.346545][ T6325] ? __fget_files+0x17c/0x1c0 [ 76.351286][ T6325] ksys_write+0xe8/0x1b0 [ 76.355524][ T6325] __x64_sys_write+0x42/0x50 [ 76.360213][ T6325] x64_sys_call+0x287e/0x2dc0 [ 76.364881][ T6325] do_syscall_64+0xc9/0x1c0 [ 76.369376][ T6325] ? clear_bhb_loop+0x55/0xb0 [ 76.374043][ T6325] ? clear_bhb_loop+0x55/0xb0 [ 76.378727][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.384620][ T6325] RIP: 0033:0x7ff167da5d29 [ 76.389164][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.408802][ T6325] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.417271][ T6325] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 76.425234][ T6325] RDX: 0000000000000048 RSI: 0000000020000d40 RDI: 0000000000000005 [ 76.433195][ T6325] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 76.441155][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.449133][ T6325] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 76.457140][ T6325] [ 76.464090][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 76.464104][ T29] audit: type=1326 audit(1734815912.576:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.499045][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.605659][ T6349] loop5: detected capacity change from 0 to 128 [ 76.612303][ T29] audit: type=1326 audit(1734815912.656:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.635895][ T29] audit: type=1326 audit(1734815912.656:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.659373][ T29] audit: type=1326 audit(1734815912.656:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.682800][ T29] audit: type=1326 audit(1734815912.656:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.706356][ T29] audit: type=1326 audit(1734815912.656:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.717209][ T6349] EXT4-fs: Ignoring removed nobh option [ 76.729820][ T29] audit: type=1326 audit(1734815912.656:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.758862][ T29] audit: type=1326 audit(1734815912.656:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.782201][ T29] audit: type=1326 audit(1734815912.656:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.805627][ T29] audit: type=1326 audit(1734815912.656:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 76.847219][ T6349] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.856943][ T6365] loop1: detected capacity change from 0 to 2048 [ 76.883555][ T6349] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.922581][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.928804][ T6365] loop1: p3 < > p4 < > [ 76.931133][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.935127][ T6365] loop1: partition table partially beyond EOD, truncated [ 76.935181][ T6365] loop1: p3 start 4284289 is beyond EOD, truncated [ 76.971481][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.974608][ T5540] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.991996][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.001515][ T2998] loop1: p3 < > p4 < > [ 77.005775][ T2998] loop1: partition table partially beyond EOD, truncated [ 77.014395][ T2998] loop1: p3 start 4284289 is beyond EOD, truncated [ 77.033422][ T6376] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.053346][ T6373] FAULT_INJECTION: forcing a failure. [ 77.053346][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 77.066024][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.2.1023 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 77.076714][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.086823][ T6373] Call Trace: [ 77.090098][ T6373] [ 77.093034][ T6373] dump_stack_lvl+0xf2/0x150 [ 77.097705][ T6373] dump_stack+0x15/0x1a [ 77.101883][ T6373] should_fail_ex+0x223/0x230 [ 77.106572][ T6373] should_failslab+0x8f/0xb0 [ 77.111220][ T6373] kmem_cache_alloc_noprof+0x52/0x320 [ 77.116658][ T6373] ? posix_lock_inode+0x211/0x2470 [ 77.121780][ T6373] posix_lock_inode+0x211/0x2470 [ 77.126763][ T6373] ? file_has_perm+0x329/0x370 [ 77.131543][ T6373] fcntl_setlk+0x686/0x980 [ 77.136036][ T6373] do_fcntl+0x58b/0xe10 [ 77.140299][ T6373] __se_sys_fcntl+0xbd/0x1b0 [ 77.144991][ T6373] __x64_sys_fcntl+0x43/0x50 [ 77.149585][ T6373] x64_sys_call+0x2129/0x2dc0 [ 77.154274][ T6373] do_syscall_64+0xc9/0x1c0 [ 77.158883][ T6373] ? clear_bhb_loop+0x55/0xb0 [ 77.163548][ T6373] ? clear_bhb_loop+0x55/0xb0 [ 77.168216][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.174172][ T6373] RIP: 0033:0x7fc0d1f25d29 [ 77.178576][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.198173][ T6373] RSP: 002b:00007fc0d0591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 77.206611][ T6373] RAX: ffffffffffffffda RBX: 00007fc0d2115fa0 RCX: 00007fc0d1f25d29 [ 77.214634][ T6373] RDX: 0000000020000000 RSI: 0000000000000026 RDI: 000000000000000c [ 77.222613][ T6373] RBP: 00007fc0d0591090 R08: 0000000000000000 R09: 0000000000000000 [ 77.230582][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.238539][ T6373] R13: 0000000000000000 R14: 00007fc0d2115fa0 R15: 00007ffc0f6db8f8 [ 77.246601][ T6373] [ 77.294225][ T6376] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.357844][ T6376] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.380484][ T6398] loop5: detected capacity change from 0 to 1024 [ 77.418473][ T6376] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.428918][ T6398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 77.438024][ T6398] System zones: 0-1, 3-12 [ 77.449641][ T6398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.481279][ T5540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.492760][ T6376] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508964][ T6376] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.521168][ T6376] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.535595][ T6376] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.858094][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 77.886915][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 77.937846][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 77.963037][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 78.018827][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 78.030796][ T6466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 78.141973][ T6521] loop2: detected capacity change from 0 to 512 [ 78.153796][ T6521] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 78.180846][ T6521] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.188193][ T6521] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.213162][ T6521] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 78.220791][ T6521] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1043: casefold flag without casefold feature [ 78.234037][ T6536] FAULT_INJECTION: forcing a failure. [ 78.234037][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 78.236415][ T6521] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1043: couldn't read orphan inode 16 (err -117) [ 78.246776][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.3.1044 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 78.259651][ T6521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.269178][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.269193][ T6536] Call Trace: [ 78.269200][ T6536] [ 78.269208][ T6536] dump_stack_lvl+0xf2/0x150 [ 78.302471][ T6536] dump_stack+0x15/0x1a [ 78.306642][ T6536] should_fail_ex+0x223/0x230 [ 78.311525][ T6536] should_failslab+0x8f/0xb0 [ 78.316135][ T6536] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 78.322497][ T6536] ? sidtab_sid2str_get+0xb8/0x140 [ 78.327610][ T6536] kmemdup_noprof+0x2a/0x60 [ 78.332219][ T6536] sidtab_sid2str_get+0xb8/0x140 [ 78.337175][ T6536] security_sid_to_context_core+0x1eb/0x2f0 [ 78.343144][ T6536] security_sid_to_context+0x27/0x30 [ 78.348495][ T6536] selinux_lsmprop_to_secctx+0x2c/0x40 [ 78.354003][ T6536] security_lsmprop_to_secctx+0x4a/0x90 [ 78.359608][ T6536] audit_log_task_context+0x93/0x1c0 [ 78.364920][ T6536] audit_log_task+0xf9/0x1c0 [ 78.369515][ T6536] ? __blk_flush_plug+0x256/0x290 [ 78.374529][ T6536] audit_seccomp+0x68/0x130 [ 78.379123][ T6536] __seccomp_filter+0x6fa/0x1180 [ 78.384053][ T6536] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.389753][ T6536] __secure_computing+0x9f/0x1c0 [ 78.394729][ T6536] syscall_trace_enter+0xd1/0x1f0 [ 78.399801][ T6536] do_syscall_64+0xaa/0x1c0 [ 78.404369][ T6536] ? clear_bhb_loop+0x55/0xb0 [ 78.409036][ T6536] ? clear_bhb_loop+0x55/0xb0 [ 78.413744][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.419648][ T6536] RIP: 0033:0x7f7fafe6473c [ 78.424115][ T6536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.443788][ T6536] RSP: 002b:00007f7fae4d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.452258][ T6536] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe6473c [ 78.460233][ T6536] RDX: 000000000000000f RSI: 00007f7fae4d70a0 RDI: 0000000000000003 [ 78.468234][ T6536] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.476325][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.484343][ T6536] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 78.492421][ T6536] [ 78.609123][ T6552] loop0: detected capacity change from 0 to 128 [ 78.624503][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 78.633540][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 78.871084][ T6567] loop1: detected capacity change from 0 to 512 [ 78.930047][ T6567] journal_path: Non-blockdev passed as './file1' [ 78.936498][ T6567] EXT4-fs: error: could not find journal device path [ 79.022885][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.126447][ T6567] loop1: detected capacity change from 0 to 1024 [ 79.139459][ T6567] EXT4-fs: Ignoring removed nobh option [ 79.145060][ T6567] EXT4-fs: Ignoring removed bh option [ 79.199978][ T6567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.704648][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.764103][ T6738] loop1: detected capacity change from 0 to 164 [ 79.961451][ T6769] bond1: entered promiscuous mode [ 79.966619][ T6769] bond1: entered allmulticast mode [ 79.972122][ T6769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.986621][ T6769] bond1 (unregistering): Released all slaves [ 80.056025][ T6773] loop0: detected capacity change from 0 to 8192 [ 80.229875][ T6790] loop2: detected capacity change from 0 to 1024 [ 80.237704][ T6790] EXT4-fs: Ignoring removed bh option [ 80.277900][ T6790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.291524][ T6793] loop3: detected capacity change from 0 to 512 [ 80.341630][ T6793] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.343533][ T6802] loop5: detected capacity change from 0 to 128 [ 80.360954][ T6802] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 80.371085][ T6802] FAT-fs (loop5): Filesystem has been set read-only [ 80.388335][ T6793] FAULT_INJECTION: forcing a failure. [ 80.388335][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 80.401036][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.3.1067 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 80.411724][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.421818][ T6793] Call Trace: [ 80.425102][ T6793] [ 80.428036][ T6793] dump_stack_lvl+0xf2/0x150 [ 80.432646][ T6793] dump_stack+0x15/0x1a [ 80.436943][ T6793] should_fail_ex+0x223/0x230 [ 80.441628][ T6793] should_failslab+0x8f/0xb0 [ 80.446228][ T6793] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 80.452613][ T6793] ? kvasprintf_const+0x5d/0x100 [ 80.457579][ T6793] kvasprintf+0x8c/0x110 [ 80.461900][ T6793] kvasprintf_const+0x5d/0x100 [ 80.466917][ T6793] kobject_set_name_vargs+0x44/0xe0 [ 80.472128][ T6793] dev_set_name+0x84/0xb0 [ 80.476467][ T6793] ? hrtimer_init+0x104/0x1f0 [ 80.481203][ T6793] ? wakeup_source_sysfs_add+0xf9/0x1a0 [ 80.486831][ T6793] ? device_initialize+0x1fe/0x210 [ 80.491962][ T6793] wakeup_source_sysfs_add+0x10c/0x1a0 [ 80.497532][ T6793] wakeup_source_register+0x106/0x250 [ 80.502989][ T6793] ep_insert+0x7d8/0xcd0 [ 80.507416][ T6793] do_epoll_ctl+0x604/0x930 [ 80.511952][ T6793] __x64_sys_epoll_ctl+0xc6/0xf0 [ 80.516909][ T6793] x64_sys_call+0x1361/0x2dc0 [ 80.521612][ T6793] do_syscall_64+0xc9/0x1c0 [ 80.526117][ T6793] ? clear_bhb_loop+0x55/0xb0 [ 80.530800][ T6793] ? clear_bhb_loop+0x55/0xb0 [ 80.535514][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.541473][ T6793] RIP: 0033:0x7f7fafe65d29 [ 80.545894][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.565598][ T6793] RSP: 002b:00007f7fae4d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 80.574148][ T6793] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe65d29 [ 80.582125][ T6793] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006 [ 80.590103][ T6793] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.598081][ T6793] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 80.606083][ T6793] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 80.614071][ T6793] [ 80.659836][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1067'. [ 80.674180][ T6809] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.719682][ T6814] netlink: 'syz.2.1074': attribute type 4 has an invalid length. [ 80.757689][ T6809] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.817367][ T6809] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.868079][ T6809] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.912369][ T6809] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.922843][ T6809] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933612][ T6809] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.943786][ T6809] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.979521][ T6822] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1076'. [ 80.988950][ T6821] loop5: detected capacity change from 0 to 512 [ 81.000984][ T6821] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 81.017474][ T6825] FAULT_INJECTION: forcing a failure. [ 81.017474][ T6825] name failslab, interval 1, probability 0, space 0, times 0 [ 81.030175][ T6825] CPU: 1 UID: 0 PID: 6825 Comm: syz.0.1077 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 81.040869][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.051053][ T6825] Call Trace: [ 81.054317][ T6825] [ 81.057236][ T6825] dump_stack_lvl+0xf2/0x150 [ 81.061881][ T6825] dump_stack+0x15/0x1a [ 81.066078][ T6825] should_fail_ex+0x223/0x230 [ 81.070745][ T6825] should_failslab+0x8f/0xb0 [ 81.075344][ T6825] kmem_cache_alloc_noprof+0x52/0x320 [ 81.080739][ T6825] ? skb_clone+0x154/0x1f0 [ 81.085139][ T6825] skb_clone+0x154/0x1f0 [ 81.089409][ T6825] nfnetlink_rcv+0x2de/0x15d0 [ 81.094300][ T6825] ? kmem_cache_free+0xdc/0x2d0 [ 81.099182][ T6825] ? nlmon_xmit+0x51/0x60 [ 81.103535][ T6825] ? __kfree_skb+0x102/0x150 [ 81.108136][ T6825] ? consume_skb+0x49/0x160 [ 81.112665][ T6825] ? nlmon_xmit+0x51/0x60 [ 81.117005][ T6825] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 81.122300][ T6825] ? __dev_queue_xmit+0xb6e/0x2090 [ 81.127421][ T6825] ? security_inode_alloc+0x37/0x100 [ 81.132697][ T6825] ? ref_tracker_free+0x3a5/0x410 [ 81.137708][ T6825] ? __dev_queue_xmit+0x186/0x2090 [ 81.142815][ T6825] netlink_unicast+0x599/0x670 [ 81.147590][ T6825] netlink_sendmsg+0x5cc/0x6e0 [ 81.152425][ T6825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.157703][ T6825] __sock_sendmsg+0x140/0x180 [ 81.162407][ T6825] ____sys_sendmsg+0x312/0x410 [ 81.167169][ T6825] __sys_sendmsg+0x19d/0x230 [ 81.171768][ T6825] __x64_sys_sendmsg+0x46/0x50 [ 81.176543][ T6825] x64_sys_call+0x2734/0x2dc0 [ 81.181294][ T6825] do_syscall_64+0xc9/0x1c0 [ 81.185793][ T6825] ? clear_bhb_loop+0x55/0xb0 [ 81.190484][ T6825] ? clear_bhb_loop+0x55/0xb0 [ 81.195182][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.201078][ T6825] RIP: 0033:0x7ff167da5d29 [ 81.205479][ T6825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.225077][ T6825] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.233482][ T6825] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 81.241437][ T6825] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 81.249443][ T6825] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 81.257517][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.265523][ T6825] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 81.273511][ T6825] [ 81.305577][ T6834] loop0: detected capacity change from 0 to 512 [ 81.590727][ T6842] syz.1.1082: attempt to access beyond end of device [ 81.590727][ T6842] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.605308][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 81.605322][ T29] audit: type=1326 audit(1734815917.716:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf420e5d29 code=0x7ffc0000 [ 81.635080][ T29] audit: type=1326 audit(1734815917.716:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf420e5d29 code=0x7ffc0000 [ 81.658733][ T29] audit: type=1326 audit(1734815917.716:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7faf420e5d29 code=0x7ffc0000 [ 81.737538][ T6859] FAULT_INJECTION: forcing a failure. [ 81.737538][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 81.750233][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.0.1083 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 81.760960][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.771020][ T6859] Call Trace: [ 81.774302][ T6859] [ 81.777229][ T6859] dump_stack_lvl+0xf2/0x150 [ 81.782016][ T6859] dump_stack+0x15/0x1a [ 81.786203][ T6859] should_fail_ex+0x223/0x230 [ 81.790948][ T6859] should_failslab+0x8f/0xb0 [ 81.795612][ T6859] kmem_cache_alloc_noprof+0x52/0x320 [ 81.800992][ T6859] ? skb_clone+0x154/0x1f0 [ 81.805491][ T6859] skb_clone+0x154/0x1f0 [ 81.809750][ T6859] __netlink_deliver_tap+0x2bd/0x4f0 [ 81.815050][ T6859] netlink_unicast+0x64a/0x670 [ 81.819824][ T6859] netlink_sendmsg+0x5cc/0x6e0 [ 81.824679][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.830059][ T6859] __sock_sendmsg+0x140/0x180 [ 81.834771][ T6859] ____sys_sendmsg+0x312/0x410 [ 81.839560][ T6859] __sys_sendmsg+0x19d/0x230 [ 81.844163][ T6859] __x64_sys_sendmsg+0x46/0x50 [ 81.848993][ T6859] x64_sys_call+0x2734/0x2dc0 [ 81.853719][ T6859] do_syscall_64+0xc9/0x1c0 [ 81.858213][ T6859] ? clear_bhb_loop+0x55/0xb0 [ 81.862906][ T6859] ? clear_bhb_loop+0x55/0xb0 [ 81.867680][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.873572][ T6859] RIP: 0033:0x7ff167da5d29 [ 81.878054][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.897699][ T6859] RSP: 002b:00007ff166411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.906193][ T6859] RAX: ffffffffffffffda RBX: 00007ff167f95fa0 RCX: 00007ff167da5d29 [ 81.914218][ T6859] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 81.922289][ T6859] RBP: 00007ff166411090 R08: 0000000000000000 R09: 0000000000000000 [ 81.930250][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.938224][ T6859] R13: 0000000000000000 R14: 00007ff167f95fa0 R15: 00007ffcf521c548 [ 81.946204][ T6859] [ 81.987694][ T6877] bridge0: port 3(vlan0) entered blocking state [ 81.994081][ T6877] bridge0: port 3(vlan0) entered disabled state [ 82.001134][ T6877] vlan0: entered allmulticast mode [ 82.007681][ T6877] vlan0: left allmulticast mode [ 82.029921][ T6878] loop5: detected capacity change from 0 to 1024 [ 82.047663][ T6878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 82.056998][ T6878] System zones: 0-1, 3-12 [ 82.088196][ T29] audit: type=1400 audit(1734815918.196:3392): avc: denied { connect } for pid=6887 comm="syz.5.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.107919][ T29] audit: type=1400 audit(1734815918.196:3393): avc: denied { name_connect } for pid=6887 comm="syz.5.1089" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 82.155133][ T6894] Cannot find add_set index 0 as target [ 82.191958][ T6895] batadv0: entered promiscuous mode [ 82.197334][ T6895] macvtap1: entered promiscuous mode [ 82.203406][ T6895] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 82.211799][ T6895] batadv0: left promiscuous mode [ 82.219120][ T29] audit: type=1400 audit(1734815918.336:3394): avc: denied { connect } for pid=6891 comm="syz.5.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.532779][ T6916] FAULT_INJECTION: forcing a failure. [ 82.532779][ T6916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.545921][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.0.1098 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 82.556592][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.566676][ T6916] Call Trace: [ 82.570009][ T6916] [ 82.572976][ T6916] dump_stack_lvl+0xf2/0x150 [ 82.577563][ T6916] dump_stack+0x15/0x1a [ 82.581782][ T6916] should_fail_ex+0x223/0x230 [ 82.586457][ T6916] should_fail+0xb/0x10 [ 82.590610][ T6916] should_fail_usercopy+0x1a/0x20 [ 82.595619][ T6916] _copy_to_user+0x20/0xa0 [ 82.600085][ T6916] simple_read_from_buffer+0xa0/0x110 [ 82.605465][ T6916] proc_fail_nth_read+0xf9/0x140 [ 82.610393][ T6916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.615965][ T6916] vfs_read+0x1a2/0x700 [ 82.620109][ T6916] ? __rcu_read_unlock+0x4e/0x70 [ 82.625046][ T6916] ? __fget_files+0x17c/0x1c0 [ 82.629711][ T6916] ksys_read+0xe8/0x1b0 [ 82.633970][ T6916] __x64_sys_read+0x42/0x50 [ 82.638522][ T6916] x64_sys_call+0x2874/0x2dc0 [ 82.643185][ T6916] do_syscall_64+0xc9/0x1c0 [ 82.647683][ T6916] ? clear_bhb_loop+0x55/0xb0 [ 82.652391][ T6916] ? clear_bhb_loop+0x55/0xb0 [ 82.657112][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.662996][ T6916] RIP: 0033:0x7ff167da473c [ 82.667395][ T6916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.687067][ T6916] RSP: 002b:00007ff1663f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.695477][ T6916] RAX: ffffffffffffffda RBX: 00007ff167f96080 RCX: 00007ff167da473c [ 82.703432][ T6916] RDX: 000000000000000f RSI: 00007ff1663f00a0 RDI: 0000000000000007 [ 82.711412][ T6916] RBP: 00007ff1663f0090 R08: 0000000000000000 R09: 0000000000000000 [ 82.719428][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.727426][ T6916] R13: 0000000000000000 R14: 00007ff167f96080 R15: 00007ffcf521c548 [ 82.735402][ T6916] [ 82.833747][ T6918] loop0: detected capacity change from 0 to 1024 [ 82.846773][ T6918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0082] [ 82.854932][ T6918] System zones: 0-1, 3-12 [ 82.945443][ T6926] syz.3.1101[6926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.945516][ T6926] syz.3.1101[6926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.956964][ T6926] syz.3.1101[6926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.018912][ T6933] loop5: detected capacity change from 0 to 164 [ 83.041591][ T29] audit: type=1326 audit(1734815919.156:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 83.046943][ T6933] syz.5.1104: attempt to access beyond end of device [ 83.046943][ T6933] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 83.067564][ T29] audit: type=1326 audit(1734815919.156:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 83.079903][ T6933] syz.5.1104: attempt to access beyond end of device [ 83.079903][ T6933] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.102205][ T29] audit: type=1326 audit(1734815919.156:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 83.139067][ T29] audit: type=1326 audit(1734815919.156:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501e765d29 code=0x7ffc0000 [ 83.284004][ T5302] IPVS: starting estimator thread 0... [ 83.377347][ T6947] IPVS: using max 2880 ests per chain, 144000 per kthread [ 83.640731][ T2983] ================================================================== [ 83.648814][ T2983] BUG: KCSAN: data-race in evdev_pass_values / evdev_poll [ 83.655916][ T2983] [ 83.658218][ T2983] write to 0xffff8881045d6008 of 4 bytes by task 6955 on cpu 0: [ 83.665824][ T2983] evdev_pass_values+0x3ac/0x510 [ 83.670749][ T2983] evdev_events+0x90/0xd0 [ 83.675071][ T2983] input_pass_values+0x11a/0x390 [ 83.680003][ T2983] input_event_dispose+0x232/0x300 [ 83.685101][ T2983] input_handle_event+0xac4/0xb00 [ 83.690110][ T2983] input_inject_event+0xd1/0x100 [ 83.695029][ T2983] evdev_write+0x33f/0x440 [ 83.699430][ T2983] vfs_write+0x281/0x920 [ 83.703652][ T2983] ksys_write+0xe8/0x1b0 [ 83.707875][ T2983] __x64_sys_write+0x42/0x50 [ 83.712458][ T2983] x64_sys_call+0x287e/0x2dc0 [ 83.717125][ T2983] do_syscall_64+0xc9/0x1c0 [ 83.721607][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.727486][ T2983] [ 83.729793][ T2983] read to 0xffff8881045d6008 of 4 bytes by task 2983 on cpu 1: [ 83.737320][ T2983] evdev_poll+0xde/0x120 [ 83.741550][ T2983] do_select+0x8d4/0xfc0 [ 83.745780][ T2983] core_sys_select+0x362/0x530 [ 83.750528][ T2983] __se_sys_pselect6+0x20d/0x270 [ 83.755449][ T2983] __x64_sys_pselect6+0x78/0x90 [ 83.760285][ T2983] x64_sys_call+0x2ac2/0x2dc0 [ 83.764946][ T2983] do_syscall_64+0xc9/0x1c0 [ 83.769432][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.775317][ T2983] [ 83.777628][ T2983] value changed: 0x0000000e -> 0x00000010 [ 83.783340][ T2983] [ 83.785647][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 83.791788][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: acpid Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 83.802004][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.812125][ T2983] ================================================================== [ 83.820735][ T6929] FAULT_INJECTION: forcing a failure. [ 83.820735][ T6929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.833849][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.3.1102 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 83.833934][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.833944][ T6929] Call Trace: [ 83.833949][ T6929] [ 83.833957][ T6929] dump_stack_lvl+0xf2/0x150 [ 83.833991][ T6929] dump_stack+0x15/0x1a [ 83.834083][ T6929] should_fail_ex+0x223/0x230 [ 83.834108][ T6929] should_fail+0xb/0x10 [ 83.834125][ T6929] should_fail_usercopy+0x1a/0x20 [ 83.834148][ T6929] set_fd_set+0x29/0x90 [ 83.834172][ T6929] core_sys_select+0x3ff/0x530 [ 83.834251][ T6929] ? set_user_sigmask+0x83/0x190 [ 83.834282][ T6929] __se_sys_pselect6+0x20d/0x270 [ 83.834314][ T6929] __x64_sys_pselect6+0x78/0x90 [ 83.834411][ T6929] x64_sys_call+0x2ac2/0x2dc0 [ 83.834430][ T6929] do_syscall_64+0xc9/0x1c0 [ 83.834450][ T6929] ? clear_bhb_loop+0x55/0xb0 [ 83.834469][ T6929] ? clear_bhb_loop+0x55/0xb0 [ 83.834486][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.834586][ T6929] RIP: 0033:0x7f7fafe65d29 [ 83.834602][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.834693][ T6929] RSP: 002b:00007f7fae4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 83.956034][ T6929] RAX: ffffffffffffffda RBX: 00007f7fb0055fa0 RCX: 00007f7fafe65d29 [ 83.956048][ T6929] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 83.980436][ T6929] RBP: 00007f7fae4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.988395][ T6929] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 83.996467][ T6929] R13: 0000000000000000 R14: 00007f7fb0055fa0 R15: 00007ffe852e5218 [ 84.004450][ T6929]