last executing test programs: 1m49.595631728s ago: executing program 2 (id=447): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002400000"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0b0300000000000000000200000018000180141b020076657468315f766972745f7769666900"], 0x2c}}, 0x20000080) sendfile(r0, r1, 0x0, 0x100) 1m49.495457804s ago: executing program 2 (id=448): sync_file_range(0xffffffffffffffff, 0x3a, 0x8, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x1d, "d2f1684742d14158e6f99acdcb772808003b026b979e454a2c5b000000"}}) r1 = syz_pidfd_open(0x0, 0x0) process_mrelease(r1, 0x0) 1m49.028351012s ago: executing program 2 (id=459): r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x14d842, 0x0) (async, rerun: 64) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) (rerun: 64) fcntl$setlease(r1, 0x400, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x101, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r7 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x11) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x8401, 0x0) 1m48.71928047s ago: executing program 2 (id=463): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000700)) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x4, 0x0, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x64, 0x0, 0xff, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x55, 0x0, 0x0, [0x3bc]}, @noop, @noop, @noop, @timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0xf, [{@loopback, 0x8}, {@private=0xa010101}]}, @cipso={0x86, 0x19, 0x2, [{0x2, 0xa, "eb3a45531ceb8e31"}, {0x1, 0x9, "d46ca6ff0b0792"}]}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x5}]}, @lsrr={0x83, 0xb, 0x14, [@broadcast, @broadcast]}, @end]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x200000000000022f, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYBLOB="f225e6a5e31b7ce69a3a62b6fcbd7056de2b46d2ba706097915d7d3f54d5087688ec09c7c40c22942273834eab278167", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r5 = eventfd2(0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x7ff}}, './file0\x00'}) getpeername$packet(r9, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x100) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x1, 0x0, 0xf, r10}, 0x10) syz_emit_ethernet(0x113e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000b7000086dd606410a6110800000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='spi_message_done\x00'}, 0xffffffffffffff4b) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r3, 0x4, 0x8, 0x10, 0x9, 0x8, @loopback, @local, 0x700, 0x1, 0x10000}}) r13 = openat(r1, &(0x7f00000002c0)='./file1\x00', 0x42042, 0x22) r14 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r14, 0x0, 0x0) pwritev2(r13, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x26b8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) 1m48.562714559s ago: executing program 2 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x8000000005000}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @auto="e7fc00"}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0xa}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@filename='./bus\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 1m48.155546453s ago: executing program 2 (id=477): syz_usb_connect(0x6, 0x1fb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m48.154341973s ago: executing program 32 (id=477): syz_usb_connect(0x6, 0x1fb, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902e9010368462c30b82505203bb13c19720e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa59260600000000000000bd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d486642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07400f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.439793819s ago: executing program 0 (id=3078): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x1, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 4.312271957s ago: executing program 0 (id=3080): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="dc2e901085e0929ef94751f27eee052b796dba143ad13520ce4fe170a4dffe42a798d2c43b8ebc85950057d537f851bc012261a2034902b4ad579f9e84c4ed43c443e39c09ec3bdecc8d4b99ed11a4694a8a7a6aa5c6837c0632438a9d3843165dd06e83ac15d7009671110fdc5f3573e7f61edcf8cb8476c618e32475027cf093b400eedcb93992b689b348a471ce469e1d4805cdf302c5468bd273ed8419208bb64a01cb14a68a7365007d5ca4af0424c7c457ee5272df56eeb608fcfe6be8043aa7700a3d6e3e8e98ac038d4ea619c446c858d04373178c59", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1860000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30, 0x40400d1}}], 0x1, 0x20000011) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x400000, 0x100000000000000) 1.932211067s ago: executing program 3 (id=3107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.883528719s ago: executing program 3 (id=3109): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/nf_conntrack_expect\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="da7bc806d430") madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34197bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190001090000000004000000021880000008ff000018000108000100ac14140008000700ac141443"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r6, &(0x7f000001d600)=""/102372, 0x18fe4, 0x0, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x200, 0x20, 0x5}, 0x18) renameat2(r9, &(0x7f0000000780)='./file0\x00', r3, &(0x7f00000007c0)='./file0\x00', 0x6) 1.812571644s ago: executing program 3 (id=3110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x108, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8a4a}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000081}, 0x44000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r8, @ANYRESOCT], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) r11 = socket$kcm(0x23, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='dummy0\x00', 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000001400)) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r12, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) 1.242503787s ago: executing program 1 (id=3124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="000000000700000000000000000000007b8af8ff2832879870a7b1651fb200000000bfa20000000000000703000008000000b704000000000000850000000100000095793c36d70fc37cf1c901a161d60a40c5a5ba07dcba0b4519c1d0e6c597ea06620ac2320f4900003a7f793463b9d423588bf27382c2f07ed1c46bf71fdb033c66fe99df4ed4cf457ed51da607bea677bae415"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x810000, @mcast1, 0x40200a7a}, 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 1.237158167s ago: executing program 4 (id=3125): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0x4000000}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 1.119395094s ago: executing program 1 (id=3126): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x40, 0x20, 0x9, 0x0, {{0x14, 0x4, 0x3, 0x4, 0x50, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xa9, 0x1, 0x8, [{@empty, 0x2}, {@remote, 0x86}, {@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x0, [{@rand_addr=0x64010100, 0x7}, {@broadcast, 0xf}, {@loopback, 0x6}]}, @generic={0x82, 0x4, "a3cc"}]}}}}}) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "380086ddffffffff"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000ae396500000000006a8af8ff00000000bfa200edfbeaffffff07020000f80bffffb70358000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x140000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x5e0, &(0x7f0000000000)="$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") r2 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.104927625s ago: executing program 4 (id=3127): mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xa9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') 1.050266448s ago: executing program 4 (id=3128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002400000"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}}, 0x20000080) sendfile(r0, r1, 0x0, 0x100) 1.033681059s ago: executing program 1 (id=3129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000080000a9e8e6f4575945b89e000000b7081c6539b765bfa2000000000000008500000082ecbc936a0000000000000000000000000000000000000000000000000000fe000000baeae90b52c2d01946ef6f3cac25647a18eda69ea2e8b83a7e49b55295eddcb38b227ff11a45b3cfce3ff5f8fa09b02db9ce3b8ad1dde75e5bcbea36de1e9f3bb3fa4d8b20626a350d44bb1f4279f0578c4df8d45f6051a5bc49efa2e5686c2c692da8fd915714ed4b78c6c85621fb6c065d5250ae464ebd10366470d83c26e939ac7bc258402b45b0"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000f7ff00"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb702000008000000182300002ae3179bcd3c1fbd87b668be71ae0102aa57c61e27338a6cbe325565", @ANYRES32=r6, @ANYRES16=r3], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r7}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x33d}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd6300fedbdf250c0000001400038008000300fffffeff08000300e1090000"], 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000f1000000200000000000000060f73d793321d723c0f8cb1756f5"], 0x24, 0x0) 1.033347449s ago: executing program 4 (id=3130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.01502903s ago: executing program 4 (id=3131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002400000"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x20000080) sendfile(r0, r1, 0x0, 0x100) 978.362142ms ago: executing program 3 (id=3132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 977.909893ms ago: executing program 4 (id=3133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000400) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x8000) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 944.746075ms ago: executing program 3 (id=3134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000400) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x8000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000480)={r4, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 834.941471ms ago: executing program 5 (id=3135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0) (async) 804.651053ms ago: executing program 1 (id=3136): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRES16=r2, @ANYBLOB="ccf5eac24b8bcba77926afd891905d2046c8dc9065f7ef0039712fe3f1fa28bb3aa20f46bf13e09dd13848bfeac39a77fca16c37dfa7d00d190f43048490b9d60ac0787db2c623fedc0d7668f955b31fb5f930486bf6777b519e8d9f07"], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000445e00000000a177fafb6d55f239ad592b18ddaf7a7b37b18d31ed3b7f87119272c73ad30d7d1fdaafd546"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000069000b000000000000000000000000000000000008000100010000005ac802af2825bc44a4ba0b767ce9b7820203788c1077da023331c0c768481f63445ffd95988e9b1476bcf911f50c49a1380b3b6fa62a322e3a5451c95326934e1541ab3fb00dce4beeb6dd093c7d3b3c6f2c4573a2410f9f7a6f5e82"], 0x20}}, 0x4000000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (fail_nth: 7) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 630.993373ms ago: executing program 5 (id=3137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) (fail_nth: 8) 630.864373ms ago: executing program 5 (id=3138): mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xa9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') 214.387757ms ago: executing program 3 (id=3139): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 148.083082ms ago: executing program 5 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) inotify_init() (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) recvfrom$inet_nvme(r3, &(0x7f0000000580)=""/35, 0x23, 0x0, &(0x7f00000005c0)=@ax25={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default]}, 0x80) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) setrlimit(0x9, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000dc0), 0x1, 0x4fe, &(0x7f0000000080)="$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") setreuid(0xee01, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0) setreuid(r8, r7) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000040)={0xa, 0x4e22, 0xf9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) setreuid(0xffffffffffffffff, r7) 15.444419ms ago: executing program 1 (id=3141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14.943969ms ago: executing program 5 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = signalfd(r3, &(0x7f0000000600)={[0xffffffffffff7fff]}, 0x8) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000640)={{r5}, "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"}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x41, 0x8, 0x0, 0xd8, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x65, 0x0, 0xe, 0x4, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0xb, 0x1f, [@loopback, @multicast1]}, @lsrr={0x83, 0x17, 0xb, [@rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @multicast2, @local]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x64, r8, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40090) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x354f, 0x6, 0x4200, r0, 0x3, '\x00', r6, r9, 0x3, 0x1, 0x4, 0xb, @void, @value, @void, @value}, 0x50) 12.418869ms ago: executing program 1 (id=3143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ffffffffffffff81207b1af8ff00000000bfa100000007010000f8ffffffb701fff700000000b703000000000000850000002d00000095", @ANYRESHEX, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r9, @ANYBLOB="830004002a6000002800128008000100736974001c000280080014000500000006000d00091000000800030001"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x18) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 0s ago: executing program 5 (id=3144): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES16=r3, @ANYBLOB="ccf5eac24b8bcba77926afd891905d2046c8dc9065f7ef0039712fe3f1fa28bb3aa20f46bf13e09dd13848bfeac39a77fca16c37dfa7d00d190f43048490b9d60ac0787db2c623fedc0d7668f955b31fb5f930486bf6777b519e8d9f07"], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) fremovexattr(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d2e5c000881887f353af69d8ad9b4a15f26363a96a5a7e131b0c3f804e24d63cd9ad609fdcea068d99b21924656d6965caf2166ac0b282c61d7cdfd1c5d06cd18a0918af183b27fc2afd55424a61b53389cc9a3f9cb5b3409e7732e4adb8bb03e841cd8aa2a1e3fc9df8d6987a7fc456e5ef7309e82ff86701f414a139b89dfa872b34d36f8"]) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x80000000) poll(&(0x7f0000000380)=[{r7, 0x8450}, {r7, 0x2}], 0x2, 0xf45) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000240), 0x4) r8 = socket$inet6(0xa, 0x800, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x80044940, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001b80)=ANY=[@ANYRES16=r15, @ANYRES64=r14, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508d9ee39815ea151dad6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=0x0, @ANYRESDEC=r12, @ANYRESHEX=r13, @ANYRES8=r14, @ANYBLOB="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", @ANYRES8, @ANYRES64=r9], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002c80)={0x0, r12, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001900)={r10, r12, "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", "7398036e6d9a724e359da8e0f613d4aef026dd37bec96f6c878eea292330b2e94a9dee16bd7adafb4ddb09157d5baff688312cc3360cb3b041c271a985d235ffaafa0fb9e6f4ae734b44a7de13c1318108b97fd0f3ae3c2016020563b95703e69e962ab41c742f2d8c5b11ddbcc84c00a4368f0852258085927af7b9d617df30e5713814130bae18f27af1c1349f360ccf26645a24aa51e152c74cf42866e9e92e0e3181ccc7ff28df443034b769747bab16ae1328eae0146bea6858cf3085880d13ec108fa5db84c9b9d09e852324bf96fd4822794b7f2d91c4d8f42f37d128695521439cd20ab67fb3b34e4cc5115ab0fb5e47864ea6f7ad94b4e91c5ba1a692581345634b7109acdac532318c29dc43f4ce68984930da935e924d9b3be4dd436818ab357ed54f5d63f5460864544c8d15bc92a0e07d1ade2daa2dc2b2abe1ec31d7d473ec9e8a710a43ddd4e0be3374e463b156b907a8e34a96f0fecf3a5c7f2782c0b51c9bfcd786251b5b3c5ac725e348d48446d6f4984b3d6957d33cefdf13a39965c6ad88befaa43d563d62ec0ca1f090c33f2a6f629acc5fa098417f537b8f41724aab4b75653e86f548efc9a067bd784d944b845122aeab5b9c45090c7b333967de7752e77625a42b0e682d87eb852f47369f9fde9613027fccb89a874e5f67b9379408e93c1d62b0710beab6b9b63bd7dc60c17a1af6ad9c2fa1ee28e958335b301818d0c40c12e58708278d6863295de578a19661fd528a61c0a0171f8e9a1493d1e8d017cf9c67a03de59363687cf275999e1d6f69b73e5f02fc3576cb3d8f8a6435f0c5ae8ee534eebdcbdc78011f63d03ffb3dac0a8f3afd32cc7852d14cc9073c468c2a8d04d37e2b835c5f408a2589228bc2af494c0e26a46413fa054f5f4223d0a260bac507cac5210cd7d9a51877ef4b2fa42a108b3d0de61b5ad68571b276b40a78e020d21a4938d34c82f0af6ac14e7bc8f7ddf82e8d60ca1cdaed7cc2d7e062ff6a73a79de9409c84865ee86409cdde30fcbb0b3f4e9fbfff983bf54e9219cf5848a2b5d987c0eca984120a18e7cf363046c89a5a39f8e73a8303d7043f05ab4fad1710aa4d05d7fc801d3c458303391cdb426b0f163a7a78f2cf3869425b67ff8375ae21579e5f4108e593c162aca90cffd339c8a73bb4a6054efd2c1851d0beb57d4fb9b2f894bd518c368211caa5aecbe987db8015df22db4c916d7d1ac170dd97b91741269be0eb1a7da49a9ad8d9c5c8e9b0c2949b0894bf6075e6868008b7ada05ab4ba21a69ae6cc7a20517bcf236c71e9b6f6f8e14bc644a2e8f98f0c780bcebfb2f14acdb1908c1996c04bfa77b05a2e9a70ba94029f8cab42487396243437bf5371a89fa021c3715b231dcc573eb0977cfde436e94c0c712203721c863a1ef74bef8f50c2d86664b02ce62ff9e1e3342d034f2d1bcebd568e4c0ebd268eb863faa1b66088184e5b5562b356aa4a5c1ab7c83810645f948f2cfa28dd48eaab999701c0aabf296ed748d86f6a7e502e48a8a5fdc7fb3f7a9bab9eca0bbd70df237f60f1f07ee1afbfa633487e5ae51f3ee19c50c71982a44f53d6d7b79452f2ae69e879087fc1c53204de1713fa3f585a2f60b535f47feb6575b26a74416606cf4325fc17fb0a58fe9256ef384717af9d8f2a855e35254a026ae60009b5575b2eb4936ffa00ae96849e25a5999cb308018b2a441c197b97c85f22ebd9ff4a2e86b1f7d0fb1e2828ae3604f8bce3325bdc24676baeeeff63e742fd83d8915f0875b888d5bddc02c3fbbc52a79c2c12782bde674a65d6338add19baa5c74fcbfb2d6d0050d21dca397fa40915059a1ebc46c4c4bd914d05da263cb7611eca52e7455b544cbe6f4cc39e5c0b2b2598532af938570159e6b57701f11831b70c3429b609944e81d90658616be1cf11d457ca191c669b75f355e6eec45282f5956b8f6c43b898d0e556c828528cf2b2f9ff6209e9e3616cd7b82b078e6bde9b89a960aff98fa2be1b88404e121ebe69487b2fad0af8cb0266f83670506214a5b696d0629524e8d7ea6ca85ccc0f94cbf33c33db4494b64b47921b139e5f96833156cb4927270b2f36961f326338fbb1a2e9faf01a4dff65ba7e9d0f35b70db06a838c0f97450d0694bb7a8438bdcda6450248bf6cb16a208420a5acf44c5f20a7fbd12a1d2934fcf6624d209e64b51c77aafa969d27945272a9767bc718a0393ad2dd10b76d645eb2117736495984b95d7ae964433f8a350b7bbde6a1ce27b160b64b76e9c7a7c3314d1a272dd8472a98ef6956b958c26a50975de7ad799ef59f8cbac4bad3c7248d42b13b5078a92d3ff28647357bc9fc307ae5f5237b693b9da499f90ba98e2195468f74e0fdd65debb7f10955f7569efe9624ebecdd2a7bd9279fae0efce84ae415b7dda498e16f8ad6d4b2fee5ec025a8fbcfb32a4c6291de5ea9cc4bd9d360d0dc51ff1b57290c289b0faaadd5d00ae22fb94e4cdad3d18a8b83e151764fa6f127d2f6525f054c71a201c3a1da4432cdebde46a38c682fea031fd53dbac6acf1ba443d299e6fbd4b0fc5d5561454d778e2bad438a3db567a631ab8d6e22b27b9a58ad80bfd5836b95af0277231b525e16f8b933cd32161866efa2ed18fd6638ce767a38496b53c4d8e229dd332d7df7bc2a33e2d39f97f5941cd6570a2bdf35891602f1c27f39135cd27f89786414296868edf3b297737f2738e19b813a3849f31841004ea1028ec79dd1500c0374d60c47818c11b5e291146dfb9da4782fa556f78fcdbceefed2a440bb15aa71dc9fca047c30278e77da1a43186b97b6d15822b80f872557c02980efd380262975ee3915538bd051fc392339aa894d9b7888ee710eb2a336f5b84756c237e119caf3a683cd927acaa7eb977db64022f48eb0d43a8af3ff04b9be327c75910927f3fceb2e42a2681c17529ff9248560917ce496c08ee53f3bdf9e62964bf98dd3dd3118aa8e658e6f3f07f7a44647842aaf0ed89a31760174771860255b5457398186dd7b6ac6986a134e9503ff53112f23e045ddc89798f01742ef2abafdec5d9d89ab04de1a91fcba0cf16c8aeceed61725a09eb246776cf5ee698b7b2025b745b307daba10270001b8da3d8799f8d035c1f0347559d33c4ed2fb6b27535f0fc9c7023da5096cb18e8b8d69fa8edccefe1e500655f5d954ce69606178933494e64c3d17db8af160f464c279fa7d0e47bfbb7eadf551612d3cb42b2c8ea1e0ec990fadda5eebdd1f101c57f665bf1f2bfee0ab84276674e9557ec04a7b9b2c254e1e6cd06c2eba28219fa8ce40332e3f3400c20a20f815f8dfa0039aa401e260409fe02ba55c927c548856a0ac635d8842efae4810b356e2375a2814df63ecc8568dcbbc056a3d837317495e793700c2089c2b204d03ad943ec34bf35861985fa7b20cf22052d44e57bd739bb828209ed838e259859ef015674fbbf3e4ad0741342d1e5ad27f798d845bde0b78941e8cef14298112047b7ac4d99b031bbac676c8f1eb231748f96a31e3efd1c3317f3f4452dd052e6889a6c5ea5d0df272f3f1f866863df9088d4dd4f5a142fcface6cddda657f172a2bf3efbc0293ca0680821dcb03ff39070744bf512226ca331a1091f0073da71ad9dbf2b45d130b0f30fbcbc9e428b44ef4ebc46fc1d8b51351fe7d71d77b5792857a51a18e7c4e665da32d6d151596f049113203daad24f19d5ae92f10eede489387359bdf19d88e7c287be9727bda8a7efececfd7de5401587a782ac856b0056ef742a593bfef825ef3bff3cb6dc2b520c4e6debd6f78b8f215443e729ad85f8eb4ecba54bf9446fcfdcff0e270be130e301d5ff4023b68d7b64f0cc84fd1d3f4f0a6e5813a5fd0cea013cc8f9348ab6e8fc95adc9a572deaea570dceb4bbaf3910ad210eaacfaf8e1cc9f057bc1fc06443b2b757e8f9e1490a16990538847174823c3d801d6321b21420e5b41f8f3f2a2dacc9fa892dc2d7b5430e0078590c435516babd4a7a2a43e3d7942eac4614cc6766801d58a2e8de2f191bcf391d8ea3c25525d03a6ceaa7374abb89b30649f27adf141b89fa5cae1c5fab1a0b67f71e86c65e2f684e04dd376996096edabb68a3a48c9244d8f7ba7b08266d9ae24f74d37c8e19537a8126a799e4fb35856a2e9096eb74d4f31ec293f481feec65d7aeff65e97861715a1932b4246918f76adbe23c435b0122f2ce3eed7e39f22315f6458a4673d36627312e441ac9cdba0e576708f043fa715f92d63c3eeddd97f63fad52144d34fcef8c929c63ffee0690fd90ce20bdc6d3ef4e6755ab49dd5a10d6cc936dab3b9500227d3735f4d7b8fdfff9dd1a49f9b181aea2284967c7240bbaef0647cd1544f4399fa72f3117c152777538068b807bf96a8736b5995d15d0ba9152c48d10cb96d9d796a059c841aadc77b8f667cc343a578511af3aa1dd323de137e1a8e5907bdfcbe862ab53126e3cddd7e884fa9c69146f2871d3b188b3975a5801a09d5409f38644ec4e22e9d73b38423d67cf66cb7fa418705f52c70be580322567c23b50c2ef000a9795ddafe9e0033f979c530eb50262c41247618af2107e1c5c33909f1b4a2860fa147da213c5146224c7d5bea2a9590d7179d32806990d9cb0337cd05352ca08acaf92b7ba258c1083c6edef04d0d00ffdd74e9544ea4a22df520dcfed1e58371b08f06840f32b8770e7a46db7718aff85c5abaceea5de5e54a8ca7f21c16eb8ddb072939a8449e3e224422fde90ac75e3edc7fa63249746b05b300a1633788d71b91e7a136c49aaac86f114a0f0719bd9dd3ab52d18b53913cbeee64e776ac6cfcae0085fe9aa316bd5a8673023d9e8db046056c452979532ff24df4ceb03561d1ac5541bfeda7659428533380da113266cb18d9a905e1377d3b90e03ca5fa223669cb985c4944daf621fe96c229b1b16fe8dfb35b03e32a8e5a030461f986b32ed03c92e979d1061352a4a1a237095fadc63f1758f532eb59e49fc663c8d5442f6e401b99c848171a3523f6348d3c9f4118740b7200f0571f5200622b8f53927f5422977812da5240144db0eda9c912a3f1ee7aeca399f5bd60ed59bfc8c54cd3fd30214f6962259c6085c565e005c9574a6b140ed989718de13cfc17bf3ab64ea7dc58a3245540d844b7e716bdec26acbc9f447a6daf4e642861392d825657292db39ae0a32fe32c54c9c8877c1d28df3d59af866317747b0c9e206d7520bff9c57d7ccfd592316aef98e6782a09cb333ea7fe66ec2688624d95f0bceaefbdc67178d055287c5dfac0e1093157a99430198d99bbca63c333fddfeb55484466f296cc9d80d98c32d454eb59f6e906c1cbba09a2486993eaeb53e1ed05f10bfb8e4b49e2ab8cdbafd1b6ac9"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000445e00000000a177fafb6d55f239ad592b18ddaf7a7b37b18d31ed3b7f87119272c73ad30d7d1fdaafd546"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r16}, 0x4) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r16, @ANYRESOCT=r17], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r18}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60445bff002806fffc000000000000000000000000000001df0200000000000000000000000000010000000000000000000000000000000100004e2300004e2400000002000000030000000000000000"], 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) kernel console output (not intermixed with test programs): RSP: 002b:00007fceb1f27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 133.390039][T10639] RAX: ffffffffffffffda RBX: 00007fceb3ad5fa0 RCX: 00007fceb38bcde9 [ 133.390117][T10639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.390128][T10639] RBP: 00007fceb1f27090 R08: 0000000000000000 R09: 0000000000000000 [ 133.390139][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.390151][T10639] R13: 0000000000000000 R14: 00007fceb3ad5fa0 R15: 00007ffd37bd6628 [ 133.390168][T10639] [ 133.402315][T10633] lo speed is unknown, defaulting to 1000 [ 133.515652][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2495'. [ 133.527024][T10640] loop5: detected capacity change from 0 to 128 [ 133.573377][T10644] loop1: detected capacity change from 0 to 1024 [ 133.595237][T10640] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.607707][T10640] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.621345][T10644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.682187][ T4939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.693059][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.741425][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.819961][T10660] ip6gretap1: entered allmulticast mode [ 134.001931][T10679] loop5: detected capacity change from 0 to 1024 [ 134.021334][T10679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.081420][ T4939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.140112][T10695] ip6gretap1: entered allmulticast mode [ 134.176462][T10705] loop5: detected capacity change from 0 to 512 [ 134.183294][T10705] EXT4-fs: Ignoring removed i_version option [ 134.189536][T10705] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.196683][T10705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.208321][T10705] EXT4-fs (loop5): 1 truncate cleaned up [ 134.215092][T10705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.325660][T10705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.341676][T10705] bond1: entered promiscuous mode [ 134.346781][T10705] bond1: entered allmulticast mode [ 134.352269][T10705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.376698][T10705] bond1 (unregistering): Released all slaves [ 134.405636][T10722] loop0: detected capacity change from 0 to 1024 [ 134.421985][T10722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.475317][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.511747][ T4939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.523685][ T29] kauditd_printk_skb: 1041 callbacks suppressed [ 134.523704][ T29] audit: type=1326 audit(1740274695.446:10728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.553693][ T29] audit: type=1326 audit(1740274695.446:10729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.566998][T10736] loop0: detected capacity change from 0 to 8192 [ 134.577319][ T29] audit: type=1326 audit(1740274695.446:10730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.577401][ T29] audit: type=1326 audit(1740274695.446:10731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.631120][ T29] audit: type=1326 audit(1740274695.446:10732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.655118][ T29] audit: type=1326 audit(1740274695.446:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.678703][ T29] audit: type=1326 audit(1740274695.446:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.702419][ T29] audit: type=1326 audit(1740274695.446:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.730763][ T29] audit: type=1326 audit(1740274695.446:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.757138][ T29] audit: type=1326 audit(1740274695.446:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.0.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafd2eacde9 code=0x7ffc0000 [ 134.790392][T10740] FAULT_INJECTION: forcing a failure. [ 134.790392][T10740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.803571][T10740] CPU: 1 UID: 0 PID: 10740 Comm: syz.5.2535 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 134.803604][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 134.803634][T10740] Call Trace: [ 134.803641][T10740] [ 134.803650][T10740] dump_stack_lvl+0xf2/0x150 [ 134.803730][T10740] dump_stack+0x15/0x1a [ 134.803757][T10740] should_fail_ex+0x24a/0x260 [ 134.803801][T10740] should_fail+0xb/0x10 [ 134.803833][T10740] should_fail_usercopy+0x1a/0x20 [ 134.803939][T10740] copy_to_user_nofault+0x7d/0x110 [ 134.803967][T10740] bpf_probe_write_user+0x80/0xc0 [ 134.804006][T10740] bpf_prog_19072b5a3fcf5d64+0x41/0x45 [ 134.804049][T10740] bpf_trace_run2+0x104/0x1d0 [ 134.804075][T10740] ? snd_timer_instance_free+0x5e/0x70 [ 134.804213][T10740] ? snd_hrtimer_close+0x99/0xb0 [ 134.804239][T10740] ? snd_timer_instance_free+0x5e/0x70 [ 134.804275][T10740] kfree+0x247/0x2f0 [ 134.804342][T10740] snd_timer_instance_free+0x5e/0x70 [ 134.804430][T10740] snd_seq_timer_close+0x72/0xa0 [ 134.804459][T10740] snd_seq_queue_delete+0x133/0x1a0 [ 134.804501][T10740] snd_seq_ioctl_delete_queue+0x30/0x40 [ 134.804542][T10740] snd_seq_ioctl+0x169/0x2a0 [ 134.804599][T10740] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 134.804638][T10740] __se_sys_ioctl+0xc9/0x140 [ 134.804723][T10740] __x64_sys_ioctl+0x43/0x50 [ 134.804818][T10740] x64_sys_call+0x1690/0x2dc0 [ 134.804849][T10740] do_syscall_64+0xc9/0x1c0 [ 134.804882][T10740] ? clear_bhb_loop+0x55/0xb0 [ 134.804916][T10740] ? clear_bhb_loop+0x55/0xb0 [ 134.805047][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.805074][T10740] RIP: 0033:0x7f7654f7cde9 [ 134.805156][T10740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.805251][T10740] RSP: 002b:00007f76535e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.805274][T10740] RAX: ffffffffffffffda RBX: 00007f7655195fa0 RCX: 00007f7654f7cde9 [ 134.805289][T10740] RDX: 0000400000000580 RSI: 00000000408c5333 RDI: 0000000000000006 [ 134.805332][T10740] RBP: 00007f76535e7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.805344][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.805356][T10740] R13: 0000000000000000 R14: 00007f7655195fa0 R15: 00007fff6b498558 [ 134.805373][T10740] [ 135.092285][T10751] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 135.171442][T10769] loop1: detected capacity change from 0 to 512 [ 135.178112][T10769] EXT4-fs: Ignoring removed i_version option [ 135.184264][T10769] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.228324][T10769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.281255][T10769] EXT4-fs (loop1): 1 truncate cleaned up [ 135.292348][T10769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.318008][T10775] lo speed is unknown, defaulting to 1000 [ 135.330764][T10788] loop4: detected capacity change from 0 to 128 [ 135.356718][T10788] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.385216][T10779] loop5: detected capacity change from 0 to 8192 [ 135.407645][T10788] ext4 filesystem being mounted at /511/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.463539][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.510319][T10769] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.566441][T10769] bond1: entered promiscuous mode [ 135.571681][T10769] bond1: entered allmulticast mode [ 135.577183][T10769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.591579][T10769] bond1 (unregistering): Released all slaves [ 135.736246][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.866667][T10829] loop5: detected capacity change from 0 to 128 [ 135.938806][T10824] loop1: detected capacity change from 0 to 8192 [ 135.948028][T10836] pimreg: entered allmulticast mode [ 135.954930][T10829] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.005349][T10820] lo speed is unknown, defaulting to 1000 [ 136.014365][T10839] pimreg: left allmulticast mode [ 136.026995][T10841] loop0: detected capacity change from 0 to 1024 [ 136.039639][T10829] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.150965][T10841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.166840][T10844] loop3: detected capacity change from 0 to 512 [ 136.249597][ T4939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.295109][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.304424][T10844] EXT4-fs: Ignoring removed i_version option [ 136.310496][T10844] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.318902][T10844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.339723][T10844] EXT4-fs (loop3): 1 truncate cleaned up [ 136.345758][T10844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.350059][T10853] __nla_validate_parse: 8 callbacks suppressed [ 136.350079][T10853] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2576'. [ 136.455037][T10857] xt_CT: No such helper "pptp" [ 136.582960][T10844] bond1: entered promiscuous mode [ 136.588059][T10844] bond1: entered allmulticast mode [ 136.605650][T10844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.622401][T10844] bond1 (unregistering): Released all slaves [ 136.786055][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.800069][T10876] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.855304][T10878] loop3: detected capacity change from 0 to 8192 [ 137.047144][T10888] ip6gretap2: entered allmulticast mode [ 137.157054][T10889] pimreg: entered allmulticast mode [ 137.179740][T10889] pimreg: left allmulticast mode [ 137.461443][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2602'. [ 137.475998][T10910] loop5: detected capacity change from 0 to 8192 [ 137.504979][T10923] ip6gretap1: entered allmulticast mode [ 137.724855][T10940] 9pnet: Could not find request transport: r [ 137.747587][T10936] lo speed is unknown, defaulting to 1000 [ 137.757830][T10946] loop1: detected capacity change from 0 to 128 [ 137.794151][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2614'. [ 137.820504][T10946] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.853434][T10946] ext4 filesystem being mounted at /547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.929705][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.955055][T10960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2617'. [ 138.251349][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2627'. [ 138.321574][T10991] ip6gretap1: entered allmulticast mode [ 138.378679][T10997] pimreg: entered allmulticast mode [ 138.414443][T10997] pimreg: left allmulticast mode [ 138.521867][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2642'. [ 138.595238][T11021] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2653'. [ 138.629791][T11017] xt_CT: No such helper "pptp" [ 138.806978][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 138.853310][T11045] loop3: detected capacity change from 0 to 512 [ 138.859978][T11045] EXT4-fs: Ignoring removed i_version option [ 138.865993][T11045] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.874199][T11045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.896280][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2654'. [ 138.905988][T11045] EXT4-fs (loop3): 1 truncate cleaned up [ 138.918462][T11045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.125257][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.155017][T11058] loop3: detected capacity change from 0 to 1024 [ 139.183828][T11058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.261033][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.370337][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2665'. [ 139.389458][T11079] loop0: detected capacity change from 0 to 512 [ 139.397490][T11079] EXT4-fs: Ignoring removed i_version option [ 139.403619][T11079] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.411945][T11079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.422352][T11083] loop3: detected capacity change from 0 to 512 [ 139.424801][T11079] EXT4-fs (loop0): 1 truncate cleaned up [ 139.428982][T11083] EXT4-fs: Ignoring removed i_version option [ 139.440637][T11083] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.447464][T11079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.461647][T11083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.488573][T11087] loop1: detected capacity change from 0 to 1024 [ 139.499424][T11083] EXT4-fs (loop3): 1 truncate cleaned up [ 139.509020][T11087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.521870][T11083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.535417][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 139.535436][ T29] audit: type=1326 audit(1740274700.456:11532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fceb38bb750 code=0x7ffc0000 [ 139.565329][ T29] audit: type=1326 audit(1740274700.456:11533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fceb38bbb37 code=0x7ffc0000 [ 139.589238][ T29] audit: type=1326 audit(1740274700.456:11534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fceb38bb750 code=0x7ffc0000 [ 139.612938][ T29] audit: type=1326 audit(1740274700.456:11535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.637154][ T29] audit: type=1326 audit(1740274700.456:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.662808][ T29] audit: type=1326 audit(1740274700.486:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.686521][ T29] audit: type=1326 audit(1740274700.486:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.710399][ T29] audit: type=1326 audit(1740274700.516:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.734012][ T29] audit: type=1326 audit(1740274700.536:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.757754][ T29] audit: type=1326 audit(1740274700.536:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 139.792556][T11079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.833644][T11079] bond1: entered promiscuous mode [ 139.838733][T11079] bond1: entered allmulticast mode [ 139.844149][T11079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.853800][T11097] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 139.872162][T11079] bond1 (unregistering): Released all slaves [ 140.073996][T11117] xt_CT: No such helper "pptp" [ 140.103137][T11126] Process accounting resumed [ 140.113120][T11128] loop5: detected capacity change from 0 to 512 [ 140.119887][T11128] EXT4-fs: Ignoring removed i_version option [ 140.125909][T11128] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.132799][T11128] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.154676][T11128] EXT4-fs (loop5): 1 truncate cleaned up [ 140.339094][T11139] hub 9-0:1.0: USB hub found [ 140.343942][T11139] hub 9-0:1.0: 8 ports detected [ 141.209525][T11162] loop3: detected capacity change from 0 to 512 [ 141.242869][T11162] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 141.254244][T11168] loop5: detected capacity change from 0 to 512 [ 141.266509][T11166] loop1: detected capacity change from 0 to 1024 [ 141.276238][T11162] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 141.287134][T11168] EXT4-fs: Ignoring removed i_version option [ 141.293337][T11168] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.310586][T11162] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 141.327621][T11171] xt_CT: No such helper "pptp" [ 141.338017][T11168] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.351305][T11162] EXT4-fs (loop3): 1 truncate cleaned up [ 141.366512][T11162] __nla_validate_parse: 5 callbacks suppressed [ 141.366531][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 141.382262][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 141.394258][T11168] EXT4-fs (loop5): 1 truncate cleaned up [ 141.480978][T11162] EXT4-fs warning (device loop3): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 141.514266][T11179] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2702'. [ 141.569203][T11181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2703'. [ 141.627120][T11168] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.682062][T11168] bond1: entered promiscuous mode [ 141.687191][T11168] bond1: entered allmulticast mode [ 141.696986][T11168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.728920][T11168] bond1 (unregistering): Released all slaves [ 141.764533][T11187] loop3: detected capacity change from 0 to 128 [ 141.808531][T11187] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.884963][T11185] lo speed is unknown, defaulting to 1000 [ 141.893322][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2705'. [ 142.107303][T11202] xt_CT: No such helper "pptp" [ 142.162665][T11212] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2714'. [ 142.197355][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2713'. [ 142.217205][T11217] ip6gretap2: entered allmulticast mode [ 142.225500][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 142.331483][T11231] loop3: detected capacity change from 0 to 512 [ 142.338263][T11231] EXT4-fs: Ignoring removed i_version option [ 142.344428][T11231] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.358501][T11231] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.372342][T11231] EXT4-fs (loop3): 1 truncate cleaned up [ 142.517577][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2727'. [ 142.570302][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 142.726480][T11261] lo speed is unknown, defaulting to 1000 [ 142.741325][T11278] loop3: detected capacity change from 0 to 128 [ 142.755198][T11278] ext4 filesystem being mounted at /573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.843662][T11285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 142.850231][T11285] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.857972][T11285] vhci_hcd vhci_hcd.0: Device attached [ 142.874684][T11290] vhci_hcd: connection closed [ 142.879615][ T50] vhci_hcd: stop threads [ 142.888766][ T50] vhci_hcd: release socket [ 142.888888][T11295] loop5: detected capacity change from 0 to 512 [ 142.893269][ T50] vhci_hcd: disconnect device [ 142.905103][T11295] EXT4-fs: Ignoring removed i_version option [ 142.911229][T11295] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.925618][T11295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.949323][T11295] EXT4-fs (loop5): 1 truncate cleaned up [ 143.345084][T11339] lo speed is unknown, defaulting to 1000 [ 143.623834][T11380] loop0: detected capacity change from 0 to 512 [ 143.671699][T11380] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.698570][T11390] loop5: detected capacity change from 0 to 2048 [ 143.787950][T11380] lo speed is unknown, defaulting to 1000 [ 143.878492][T11410] xt_CT: No such helper "pptp" [ 144.004694][T11431] FAULT_INJECTION: forcing a failure. [ 144.004694][T11431] name failslab, interval 1, probability 0, space 0, times 0 [ 144.017479][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.5.2786 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 144.017573][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.017588][T11431] Call Trace: [ 144.017641][T11431] [ 144.017648][T11431] dump_stack_lvl+0xf2/0x150 [ 144.017674][T11431] dump_stack+0x15/0x1a [ 144.017744][T11431] should_fail_ex+0x24a/0x260 [ 144.017769][T11431] should_failslab+0x8f/0xb0 [ 144.017795][T11431] kmem_cache_alloc_noprof+0x52/0x320 [ 144.017901][T11431] ? audit_log_start+0x34c/0x6b0 [ 144.017967][T11431] audit_log_start+0x34c/0x6b0 [ 144.017995][T11431] ? kmem_cache_free+0xdc/0x2d0 [ 144.018017][T11431] audit_seccomp+0x4b/0x130 [ 144.018054][T11431] __seccomp_filter+0x6fa/0x1180 [ 144.018075][T11431] ? __perf_event_task_sched_out+0x138/0x1010 [ 144.018098][T11431] ? __dequeue_entity+0x22/0x310 [ 144.018119][T11431] __secure_computing+0x9f/0x1c0 [ 144.018139][T11431] syscall_trace_enter+0xd1/0x1f0 [ 144.018178][T11431] do_syscall_64+0xaa/0x1c0 [ 144.018205][T11431] ? clear_bhb_loop+0x55/0xb0 [ 144.018284][T11431] ? clear_bhb_loop+0x55/0xb0 [ 144.018308][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.018332][T11431] RIP: 0033:0x7f7654f7b7fc [ 144.018345][T11431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.018360][T11431] RSP: 002b:00007f76535e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.018454][T11431] RAX: ffffffffffffffda RBX: 00007f7655195fa0 RCX: 00007f7654f7b7fc [ 144.018464][T11431] RDX: 000000000000000f RSI: 00007f76535e70a0 RDI: 0000000000000003 [ 144.018474][T11431] RBP: 00007f76535e7090 R08: 0000000000000000 R09: 000000000000000b [ 144.018484][T11431] R10: 0000000000008540 R11: 0000000000000246 R12: 0000000000000001 [ 144.018494][T11431] R13: 0000000000000000 R14: 00007f7655195fa0 R15: 00007fff6b498558 [ 144.018510][T11431] [ 144.240391][T11433] ip6gretap1: entered allmulticast mode [ 144.471192][T11469] loop0: detected capacity change from 0 to 1024 [ 144.478242][T11469] EXT4-fs: Ignoring removed bh option [ 144.497476][T11473] pimreg: entered allmulticast mode [ 144.604089][T11490] ip6gretap1: entered allmulticast mode [ 144.822094][T11509] loop3: detected capacity change from 0 to 512 [ 144.830297][T11509] ext4: Unknown parameter 'nouser_xattr' [ 144.862886][T11517] loop5: detected capacity change from 0 to 1024 [ 144.914041][T11524] xt_CT: No such helper "pptp" [ 144.954075][T11533] pimreg: entered allmulticast mode [ 144.960004][T11533] pimreg: left allmulticast mode [ 145.014253][ T3373] IPVS: starting estimator thread 0... [ 145.077431][T11541] FAULT_INJECTION: forcing a failure. [ 145.077431][T11541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.090700][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.0.2823 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 145.090726][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 145.090742][T11541] Call Trace: [ 145.090749][T11541] [ 145.090758][T11541] dump_stack_lvl+0xf2/0x150 [ 145.090813][T11541] dump_stack+0x15/0x1a [ 145.090839][T11541] should_fail_ex+0x24a/0x260 [ 145.090891][T11541] should_fail+0xb/0x10 [ 145.090923][T11541] should_fail_usercopy+0x1a/0x20 [ 145.090959][T11541] _copy_to_user+0x20/0xa0 [ 145.090993][T11541] simple_read_from_buffer+0xa0/0x110 [ 145.091027][T11541] proc_fail_nth_read+0xf9/0x140 [ 145.091081][T11541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.091173][T11541] vfs_read+0x19b/0x6f0 [ 145.091202][T11541] ? __rcu_read_unlock+0x4e/0x70 [ 145.091257][T11541] ? __fget_files+0x17c/0x1c0 [ 145.091291][T11541] ksys_read+0xe8/0x1b0 [ 145.091377][T11541] __x64_sys_read+0x42/0x50 [ 145.091411][T11541] x64_sys_call+0x2874/0x2dc0 [ 145.091511][T11541] do_syscall_64+0xc9/0x1c0 [ 145.091547][T11541] ? clear_bhb_loop+0x55/0xb0 [ 145.091580][T11541] ? clear_bhb_loop+0x55/0xb0 [ 145.091608][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.091633][T11541] RIP: 0033:0x7fafd2eab7fc [ 145.091668][T11541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.091685][T11541] RSP: 002b:00007fafd1517030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.091704][T11541] RAX: ffffffffffffffda RBX: 00007fafd30c5fa0 RCX: 00007fafd2eab7fc [ 145.091717][T11541] RDX: 000000000000000f RSI: 00007fafd15170a0 RDI: 0000000000000006 [ 145.091732][T11541] RBP: 00007fafd1517090 R08: 0000000000000000 R09: 0000000000000000 [ 145.091746][T11541] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001 [ 145.091760][T11541] R13: 0000000000000000 R14: 00007fafd30c5fa0 R15: 00007ffea5faeb88 [ 145.091778][T11541] [ 145.305921][T11537] IPVS: using max 2160 ests per chain, 108000 per kthread [ 145.354118][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 145.354194][ T29] audit: type=1326 audit(1740274706.276:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.3.2824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8641cde9 code=0x0 [ 145.437813][ T29] audit: type=1326 audit(1740274706.356:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz.0.2829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd2eacde9 code=0x7ffb0000 [ 145.793068][T11577] loop5: detected capacity change from 0 to 2048 [ 145.844468][ T29] audit: type=1326 audit(1740274706.766:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 145.867680][ T29] audit: type=1326 audit(1740274706.766:11782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 145.892312][ T29] audit: type=1326 audit(1740274706.766:11783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 145.915491][ T29] audit: type=1326 audit(1740274706.766:11784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 145.938578][ T29] audit: type=1326 audit(1740274706.766:11785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 145.961635][ T29] audit: type=1326 audit(1740274706.816:11786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 145.984811][ T29] audit: type=1326 audit(1740274706.816:11787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 146.008432][ T29] audit: type=1326 audit(1740274706.816:11788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11580 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb38bcde9 code=0x7ffc0000 [ 146.105621][T11583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.535126][T11595] lo speed is unknown, defaulting to 1000 [ 146.605848][T11595] chnl_net:caif_netlink_parms(): no params data found [ 146.644984][T11619] loop0: detected capacity change from 0 to 1024 [ 146.652792][T11619] EXT4-fs: Ignoring removed bh option [ 146.690531][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.697646][T11595] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.715534][T11595] bridge_slave_0: entered allmulticast mode [ 146.732867][T11595] bridge_slave_0: entered promiscuous mode [ 146.740230][T11595] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.747329][T11595] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.756386][T11595] bridge_slave_1: entered allmulticast mode [ 146.763451][T11595] bridge_slave_1: entered promiscuous mode [ 146.827745][T11595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.849404][T11595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.860172][ T3318] bridge_slave_1: left allmulticast mode [ 146.865911][ T3318] bridge_slave_1: left promiscuous mode [ 146.872027][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.896648][ T3318] bridge_slave_0: left allmulticast mode [ 146.902843][ T3318] bridge_slave_0: left promiscuous mode [ 146.908761][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.941693][T11644] loop1: detected capacity change from 0 to 128 [ 146.951108][T11644] ext4 filesystem being mounted at /597/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.970460][T11646] xt_CT: No such helper "pptp" [ 146.988549][ T3318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.998872][ T3318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.008470][ T3318] bond0 (unregistering): Released all slaves [ 147.052852][T11595] team0: Port device team_slave_0 added [ 147.061311][T11595] team0: Port device team_slave_1 added [ 147.091345][T11635] lo speed is unknown, defaulting to 1000 [ 147.097465][T11595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.104520][T11595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.130520][T11595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.153253][T11595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.160328][T11595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.186311][T11595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.210927][ T3318] hsr_slave_0: left promiscuous mode [ 147.216790][ T3318] hsr_slave_1: left promiscuous mode [ 147.222402][ T3318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.229921][ T3318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.237996][ T3318] pimreg (unregistering): left allmulticast mode [ 147.262025][ T3318] team0 (unregistering): Port device team_slave_1 removed [ 147.272198][ T3318] team0 (unregistering): Port device team_slave_0 removed [ 147.272357][T11656] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 147.358992][T11595] hsr_slave_0: entered promiscuous mode [ 147.365411][T11595] hsr_slave_1: entered promiscuous mode [ 147.372621][T11595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.382267][T11595] Cannot create hsr debugfs directory [ 147.456259][T11662] loop0: detected capacity change from 0 to 1024 [ 147.523005][T11671] loop0: detected capacity change from 0 to 1024 [ 147.530723][T11671] EXT4-fs: Ignoring removed bh option [ 147.558354][T11673] pimreg: entered allmulticast mode [ 147.564330][T11673] pimreg: left allmulticast mode [ 147.660079][T11680] ip6gretap1: entered allmulticast mode [ 147.933313][T11595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.959502][T11693] xt_CT: No such helper "pptp" [ 148.025199][T11595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.037490][T11595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.046366][T11595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.072066][T11695] loop4: detected capacity change from 0 to 128 [ 148.081530][T11695] ext4 filesystem being mounted at /564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.141778][T11691] lo speed is unknown, defaulting to 1000 [ 148.148498][T11595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.211537][T11595] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.238270][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.245496][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.259960][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.267059][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.314710][T11715] loop5: detected capacity change from 0 to 128 [ 148.322844][T11713] loop1: detected capacity change from 0 to 512 [ 148.328439][T11595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.339858][T11595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.388069][T11713] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #4: comm syz.1.2884: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 9(4), depth 0(0) [ 148.406722][T11713] EXT4-fs error (device loop1): ext4_quota_enable:7104: comm syz.1.2884: Bad quota inode: 4, type: 1 [ 148.418198][T11713] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.437873][T11713] EXT4-fs (loop1): mount failed [ 148.454381][T11713] __nla_validate_parse: 25 callbacks suppressed [ 148.454396][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 148.491339][T11595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.532326][T11713] sctp: [Deprecated]: syz.1.2884 (pid 11713) Use of int in maxseg socket option. [ 148.532326][T11713] Use struct sctp_assoc_value instead [ 148.596559][T11595] veth0_vlan: entered promiscuous mode [ 148.609526][T11595] veth1_vlan: entered promiscuous mode [ 148.668329][T11595] veth0_macvtap: entered promiscuous mode [ 148.725417][T11595] veth1_macvtap: entered promiscuous mode [ 148.736146][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.746748][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.756743][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.767362][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.777302][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.787804][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.797696][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.797856][T11745] loop4: detected capacity change from 0 to 128 [ 148.808225][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.809394][T11595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.833786][T11741] lo speed is unknown, defaulting to 1000 [ 148.865406][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.876095][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.886000][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.896456][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.906284][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.916822][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.926660][T11595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.937206][T11595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.974128][T11745] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.032801][T11747] loop0: detected capacity change from 0 to 128 [ 149.094420][T11747] ext4 filesystem being mounted at /576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.197045][T11595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.210372][T11749] pimreg: entered allmulticast mode [ 149.223041][T11752] pimreg: left allmulticast mode [ 149.255930][T11595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.264756][T11595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.273605][T11595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.282364][T11595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.323600][T11750] lo speed is unknown, defaulting to 1000 [ 149.453164][T11775] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2898'. [ 149.710127][T11786] lo speed is unknown, defaulting to 1000 [ 149.772080][T11786] chnl_net:caif_netlink_parms(): no params data found [ 149.799494][T11809] loop5: detected capacity change from 0 to 512 [ 149.811461][T11809] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 149.831174][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.867644][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.874824][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.883248][T11786] bridge_slave_0: entered allmulticast mode [ 149.889912][T11786] bridge_slave_0: entered promiscuous mode [ 149.899057][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.906958][T11820] loop5: detected capacity change from 0 to 256 [ 149.915852][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.923029][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.930349][T11786] bridge_slave_1: entered allmulticast mode [ 149.931331][T11820] FAT-fs (loop5): Directory bread(block 64) failed [ 149.936869][T11786] bridge_slave_1: entered promiscuous mode [ 149.944499][T11820] FAT-fs (loop5): Directory bread(block 65) failed [ 149.955693][T11820] FAT-fs (loop5): Directory bread(block 66) failed [ 149.963731][T11820] FAT-fs (loop5): Directory bread(block 67) failed [ 149.965052][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.971429][T11820] FAT-fs (loop5): Directory bread(block 68) failed [ 149.986325][T11820] FAT-fs (loop5): Directory bread(block 69) failed [ 149.993292][T11820] FAT-fs (loop5): Directory bread(block 70) failed [ 149.994402][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.000146][T11820] FAT-fs (loop5): Directory bread(block 71) failed [ 150.017080][T11820] FAT-fs (loop5): Directory bread(block 72) failed [ 150.018336][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.023712][T11820] FAT-fs (loop5): Directory bread(block 73) failed [ 150.047755][T11786] team0: Port device team_slave_0 added [ 150.055139][T11786] team0: Port device team_slave_1 added [ 150.063561][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.086859][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.093897][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.116845][T11821] syz.5.2910: attempt to access beyond end of device [ 150.116845][T11821] loop5: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 150.119903][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.156252][T11821] syz.5.2910: attempt to access beyond end of device [ 150.156252][T11821] loop5: rw=2049, sector=1288, nr_sectors = 544 limit=256 [ 150.161507][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.178558][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.195578][T11821] syz.5.2910: attempt to access beyond end of device [ 150.195578][T11821] loop5: rw=2049, sector=1864, nr_sectors = 2072 limit=256 [ 150.205939][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.233321][T11821] syz.5.2910: attempt to access beyond end of device [ 150.233321][T11821] loop5: rw=2049, sector=3936, nr_sectors = 2048 limit=256 [ 150.251501][T11821] syz.5.2910: attempt to access beyond end of device [ 150.251501][T11821] loop5: rw=2049, sector=5984, nr_sectors = 2048 limit=256 [ 150.269087][T11821] syz.5.2910: attempt to access beyond end of device [ 150.269087][T11821] loop5: rw=2049, sector=8032, nr_sectors = 184 limit=256 [ 150.286207][ T28] bridge_slave_1: left allmulticast mode [ 150.291959][ T28] bridge_slave_1: left promiscuous mode [ 150.297720][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.306435][ T28] bridge_slave_0: left allmulticast mode [ 150.312175][ T28] bridge_slave_0: left promiscuous mode [ 150.317837][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.518991][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.538546][ T4974] kworker/u8:8: attempt to access beyond end of device [ 150.538546][ T4974] loop5: rw=1, sector=8216, nr_sectors = 2056 limit=256 [ 150.557714][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.572283][ T28] bond0 (unregistering): Released all slaves [ 150.587151][ T4974] kworker/u8:8: attempt to access beyond end of device [ 150.587151][ T4974] loop5: rw=1, sector=10272, nr_sectors = 4832 limit=256 [ 150.670454][ T28] tipc: Disabling bearer [ 150.675560][ T28] tipc: Left network mode [ 150.701891][ T4974] kworker/u8:8: attempt to access beyond end of device [ 150.701891][ T4974] loop5: rw=1, sector=15104, nr_sectors = 2048 limit=256 [ 150.791887][ T28] hsr_slave_0: left promiscuous mode [ 150.808097][ T4974] kworker/u8:8: attempt to access beyond end of device [ 150.808097][ T4974] loop5: rw=1, sector=17152, nr_sectors = 2064 limit=256 [ 150.836737][ T28] hsr_slave_1: left promiscuous mode [ 150.857458][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.864989][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.882260][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.889838][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.900470][ T28] veth1_macvtap: left promiscuous mode [ 150.906132][ T28] veth0_macvtap: left promiscuous mode [ 150.955822][ T28] team0 (unregistering): Port device team_slave_1 removed [ 150.965673][ T28] team0 (unregistering): Port device team_slave_0 removed [ 150.973833][ T36] smc: removing ib device syz! [ 151.009094][T11829] ip6gretap1: entered allmulticast mode [ 151.026895][T11832] pimreg: entered allmulticast mode [ 151.036002][T11833] pimreg: left allmulticast mode [ 151.071022][T11786] hsr_slave_0: entered promiscuous mode [ 151.077270][T11786] hsr_slave_1: entered promiscuous mode [ 151.115089][T11847] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 151.127959][T11849] ip6gretap1: entered allmulticast mode [ 151.128027][T11847] SELinux: syz.5.2920 (11847) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.278836][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 151.278854][ T29] audit: type=1326 audit(1740274712.196:11960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.0.2923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafd2eacde9 code=0x0 [ 151.312204][T11854] xt_CT: No such helper "pptp" [ 151.321713][ T29] audit: type=1326 audit(1740274712.246:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.346688][T11859] loop5: detected capacity change from 0 to 1024 [ 151.354365][ T29] audit: type=1326 audit(1740274712.246:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.378085][ T29] audit: type=1326 audit(1740274712.246:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.401672][ T29] audit: type=1326 audit(1740274712.246:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.425285][ T29] audit: type=1326 audit(1740274712.246:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.448878][ T29] audit: type=1326 audit(1740274712.246:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.472529][ T29] audit: type=1326 audit(1740274712.246:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.496051][ T29] audit: type=1326 audit(1740274712.246:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.519752][ T29] audit: type=1326 audit(1740274712.246:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.5.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 151.661801][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 151.670848][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 151.680013][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 151.738913][T11786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.749591][T11786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.762206][T11786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.774035][T11786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.823603][T11872] loop4: detected capacity change from 0 to 512 [ 151.839939][T11872] EXT4-fs: Ignoring removed i_version option [ 151.846015][T11872] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.852653][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.870151][T11872] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.881076][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.891870][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.898944][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.911077][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.918162][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.928023][T11872] EXT4-fs (loop4): 1 truncate cleaned up [ 152.068030][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.186374][T11889] loop3: detected capacity change from 0 to 256 [ 152.194381][T11889] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.196009][T11872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.235781][T11892] loop0: detected capacity change from 0 to 512 [ 152.246780][T11786] veth0_vlan: entered promiscuous mode [ 152.252948][T11892] EXT4-fs: Ignoring removed i_version option [ 152.259010][T11892] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.266171][T11892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.301096][T11872] bond0: entered promiscuous mode [ 152.306191][T11872] bond0: entered allmulticast mode [ 152.311901][T11872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.314929][T11892] EXT4-fs (loop0): 1 truncate cleaned up [ 152.329878][T11872] bond0 (unregistering): Released all slaves [ 152.350844][T11786] veth1_vlan: entered promiscuous mode [ 152.384952][T11786] veth0_macvtap: entered promiscuous mode [ 152.393530][T11786] veth1_macvtap: entered promiscuous mode [ 152.405948][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.416551][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.426451][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.437028][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.447029][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.457584][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.467681][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.478152][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.490038][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.503597][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.514511][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.524430][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.535512][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.547439][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.558064][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.568067][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.578553][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.590047][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.602318][T11786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.611093][T11786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.620274][T11786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.629068][T11786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.744422][T11907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2901'. [ 152.754026][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 152.817347][T11910] lo speed is unknown, defaulting to 1000 [ 152.862092][T11892] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.864523][T11913] xt_CT: No such helper "pptp" [ 152.916033][T11892] bond1: entered promiscuous mode [ 152.921554][T11892] bond1: entered allmulticast mode [ 152.927038][T11892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.946625][T11892] bond1 (unregistering): Released all slaves [ 152.973588][T11921] ip6gretap1: entered allmulticast mode [ 153.143243][T11931] loop0: detected capacity change from 0 to 1024 [ 153.153201][T11931] EXT4-fs: Ignoring removed bh option [ 153.159943][T11933] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 153.204400][T11937] loop0: detected capacity change from 0 to 512 [ 153.211213][T11937] EXT4-fs: Ignoring removed i_version option [ 153.217424][T11937] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.224363][T11937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.236519][T11937] EXT4-fs (loop0): 1 truncate cleaned up [ 153.246501][T11938] lo speed is unknown, defaulting to 1000 [ 153.343468][T11937] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.361354][T11937] bond1: entered promiscuous mode [ 153.366468][T11937] bond1: entered allmulticast mode [ 153.372187][T11937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.392517][T11937] bond1 (unregistering): Released all slaves [ 153.570298][T11946] pimreg: entered allmulticast mode [ 153.577626][T11946] pimreg: left allmulticast mode [ 153.899883][T11954] loop4: detected capacity change from 0 to 512 [ 153.972775][T11954] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 154.000270][T11954] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 154.011393][T11954] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 154.026745][T11954] EXT4-fs (loop4): 1 truncate cleaned up [ 154.042579][T11962] loop0: detected capacity change from 0 to 1024 [ 154.049536][T11962] EXT4-fs: Ignoring removed orlov option [ 154.055405][T11962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.086558][T11964] netlink: 'syz.3.2954': attribute type 1 has an invalid length. [ 154.116402][T11964] team0: Port device team_slave_1 removed [ 154.127013][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2954'. [ 154.147330][T11964] loop3: detected capacity change from 0 to 512 [ 154.154338][T11964] EXT4-fs: Ignoring removed orlov option [ 154.163016][T11964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.172203][T11964] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.179440][T11964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2954: bg 0: block 248: padding at end of block bitmap is not set [ 154.196772][T11964] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2954: Failed to acquire dquot type 1 [ 154.231682][T11964] EXT4-fs (loop3): 1 truncate cleaned up [ 154.239230][T11964] EXT4-fs: Ignoring removed orlov option [ 154.247375][T11964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.265224][T11964] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 154.292659][T11964] EXT4-fs error (device loop3): __ext4_remount:6738: comm +}[@: Abort forced by user [ 154.293647][T11962] FAULT_INJECTION: forcing a failure. [ 154.293647][T11962] name failslab, interval 1, probability 0, space 0, times 0 [ 154.302825][T11964] EXT4-fs (loop3): Remounting filesystem read-only [ 154.314933][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.0.2949 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 154.314966][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.314981][T11962] Call Trace: [ 154.314989][T11962] [ 154.314999][T11962] dump_stack_lvl+0xf2/0x150 [ 154.315060][T11962] dump_stack+0x15/0x1a [ 154.315090][T11962] should_fail_ex+0x24a/0x260 [ 154.315130][T11962] should_failslab+0x8f/0xb0 [ 154.315169][T11962] kmem_cache_alloc_noprof+0x52/0x320 [ 154.315244][T11962] ? getname_flags+0x81/0x3b0 [ 154.315285][T11962] ? should_fail_ex+0xd7/0x260 [ 154.315319][T11962] getname_flags+0x81/0x3b0 [ 154.315442][T11962] getname+0x17/0x20 [ 154.315480][T11962] path_setxattrat+0x23a/0x310 [ 154.315518][T11962] __x64_sys_setxattr+0x6e/0x90 [ 154.315557][T11962] x64_sys_call+0x2247/0x2dc0 [ 154.315623][T11962] do_syscall_64+0xc9/0x1c0 [ 154.315660][T11962] ? clear_bhb_loop+0x55/0xb0 [ 154.315694][T11962] ? clear_bhb_loop+0x55/0xb0 [ 154.315736][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.315769][T11962] RIP: 0033:0x7fafd2eacde9 [ 154.315826][T11962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.315849][T11962] RSP: 002b:00007fafd1517038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 154.315873][T11962] RAX: ffffffffffffffda RBX: 00007fafd30c5fa0 RCX: 00007fafd2eacde9 [ 154.315889][T11962] RDX: 0000400000001400 RSI: 00004000000001c0 RDI: 0000400000000200 [ 154.315966][T11962] RBP: 00007fafd1517090 R08: 0000000000000000 R09: 0000000000000000 [ 154.315981][T11962] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 154.315997][T11962] R13: 0000000000000000 R14: 00007fafd30c5fa0 R15: 00007ffea5faeb88 [ 154.316055][T11962] [ 154.429503][T11986] xt_CT: No such helper "pptp" [ 154.449075][T11964] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 154.536844][T11993] loop0: detected capacity change from 0 to 128 [ 154.835368][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 154.913064][T12007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2966'. [ 155.084518][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 155.118974][T12015] loop1: detected capacity change from 0 to 1024 [ 155.170382][T12020] syzkaller0: entered promiscuous mode [ 155.192027][T12024] loop1: detected capacity change from 0 to 512 [ 155.198781][T12024] EXT4-fs: Ignoring removed i_version option [ 155.204878][T12024] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.211923][T12024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.223561][T12024] EXT4-fs (loop1): 1 truncate cleaned up [ 155.365547][T12024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.382994][T12024] bond1: entered promiscuous mode [ 155.388100][T12024] bond1: entered allmulticast mode [ 155.393640][T12024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.404264][T12024] bond1 (unregistering): Released all slaves [ 155.445203][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2979'. [ 155.454339][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2979'. [ 155.467740][T12048] random: crng reseeded on system resumption [ 155.635887][T12059] xt_CT: No such helper "pptp" [ 155.658103][T12062] loop0: detected capacity change from 0 to 1024 [ 155.742234][T12067] ALSA: seq fatal error: cannot create timer (-22) [ 155.752802][T12067] ip6tnl1: entered promiscuous mode [ 155.758051][T12067] ip6tnl1: entered allmulticast mode [ 155.813944][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 155.823952][T12071] veth1_macvtap: left promiscuous mode [ 156.835685][T12082] pimreg: entered allmulticast mode [ 156.843732][T12082] pimreg: left allmulticast mode [ 156.876851][T12085] pimreg: entered allmulticast mode [ 156.887641][T12085] pimreg: left allmulticast mode [ 157.037468][T12089] loop4: detected capacity change from 0 to 8192 [ 157.071039][T12089] loop4: p2 p3 p4[EZD] [ 157.077528][T12089] loop4: p3 start 4294639647 is beyond EOD, truncated [ 157.084441][T12089] loop4: p4 size 65536 extends beyond EOD, truncated [ 157.152464][T12095] loop1: detected capacity change from 0 to 128 [ 157.197408][T12098] loop5: detected capacity change from 0 to 1024 [ 157.206509][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 157.206529][ T29] audit: type=1326 audit(157.247:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.235975][ T29] audit: type=1326 audit(157.247:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.236193][T12097] lo speed is unknown, defaulting to 1000 [ 157.258964][ T29] audit: type=1326 audit(157.247:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.287626][ T29] audit: type=1326 audit(157.247:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.311037][ T29] audit: type=1326 audit(157.247:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.315655][T12104] loop0: detected capacity change from 0 to 128 [ 157.334400][ T29] audit: type=1326 audit(157.247:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.363597][ T29] audit: type=1326 audit(157.247:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.386534][ T29] audit: type=1326 audit(157.247:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.409834][ T29] audit: type=1326 audit(157.247:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.433071][ T29] audit: type=1326 audit(157.247:12263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.5.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 157.471145][T12104] EXT4-fs mount: 63 callbacks suppressed [ 157.471164][T12104] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.501604][T12098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.520954][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.536354][T12095] bio_check_eod: 7 callbacks suppressed [ 157.536370][T12095] syz.1.2992: attempt to access beyond end of device [ 157.536370][T12095] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 157.568843][ T4939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.587502][T12111] loop0: detected capacity change from 0 to 512 [ 157.617551][T12111] EXT4-fs (loop0): 1 orphan inode deleted [ 157.626374][T12111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.640607][ T28] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 157.655365][T12111] FAULT_INJECTION: forcing a failure. [ 157.655365][T12111] name failslab, interval 1, probability 0, space 0, times 0 [ 157.668583][T12111] CPU: 0 UID: 0 PID: 12111 Comm: syz.0.2998 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 157.668612][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.668628][T12111] Call Trace: [ 157.668637][T12111] [ 157.668646][T12111] dump_stack_lvl+0xf2/0x150 [ 157.668731][T12111] dump_stack+0x15/0x1a [ 157.668758][T12111] should_fail_ex+0x24a/0x260 [ 157.668796][T12111] ? ext4_getfsmap_datadev+0x3ef/0x1390 [ 157.668894][T12111] should_failslab+0x8f/0xb0 [ 157.669010][T12111] __kmalloc_cache_noprof+0x4e/0x320 [ 157.669040][T12111] ? ext4_get_group_desc+0x16e/0x190 [ 157.669072][T12111] ext4_getfsmap_datadev+0x3ef/0x1390 [ 157.669119][T12111] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 157.669214][T12111] ext4_getfsmap+0x7eb/0x840 [ 157.669246][T12111] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 157.669295][T12111] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 157.669334][T12111] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 157.669510][T12111] ? memchr_inv+0x13a/0x2e0 [ 157.669553][T12111] ext4_ioctl+0x20cd/0x2e50 [ 157.669596][T12111] ? __pfx_ext4_ioctl+0x10/0x10 [ 157.669656][T12111] __se_sys_ioctl+0xc9/0x140 [ 157.669685][T12111] __x64_sys_ioctl+0x43/0x50 [ 157.669709][T12111] x64_sys_call+0x1690/0x2dc0 [ 157.669739][T12111] do_syscall_64+0xc9/0x1c0 [ 157.669808][T12111] ? clear_bhb_loop+0x55/0xb0 [ 157.669842][T12111] ? clear_bhb_loop+0x55/0xb0 [ 157.669875][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.669904][T12111] RIP: 0033:0x7fafd2eacde9 [ 157.669926][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.669957][T12111] RSP: 002b:00007fafd1517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.669977][T12111] RAX: ffffffffffffffda RBX: 00007fafd30c5fa0 RCX: 00007fafd2eacde9 [ 157.669992][T12111] RDX: 0000400000000d40 RSI: 00000000c0c0583b RDI: 0000000000000005 [ 157.670007][T12111] RBP: 00007fafd1517090 R08: 0000000000000000 R09: 0000000000000000 [ 157.670072][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.670086][T12111] R13: 0000000000000000 R14: 00007fafd30c5fa0 R15: 00007ffea5faeb88 [ 157.670107][T12111] [ 157.680990][T12119] loop1: detected capacity change from 0 to 2048 [ 157.900792][T12122] ip6gretap1: entered allmulticast mode [ 157.914905][T12119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.959031][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.993607][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3003'. [ 158.081187][T12136] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3006'. [ 158.100300][T12138] FAULT_INJECTION: forcing a failure. [ 158.100300][T12138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.113650][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.5.3007 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 158.113683][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.113699][T12138] Call Trace: [ 158.113706][T12138] [ 158.113716][T12138] dump_stack_lvl+0xf2/0x150 [ 158.113744][T12138] dump_stack+0x15/0x1a [ 158.113825][T12138] should_fail_ex+0x24a/0x260 [ 158.113862][T12138] should_fail+0xb/0x10 [ 158.113896][T12138] should_fail_usercopy+0x1a/0x20 [ 158.113939][T12138] _copy_from_iter+0xd5/0xd00 [ 158.113975][T12138] ? alloc_pages_mpol+0x208/0x260 [ 158.114008][T12138] copy_page_from_iter+0x14f/0x280 [ 158.114051][T12138] tun_get_user+0x68b/0x25c0 [ 158.114156][T12138] ? _parse_integer+0x27/0x30 [ 158.114189][T12138] ? ref_tracker_alloc+0x1f5/0x2f0 [ 158.114330][T12138] tun_chr_write_iter+0x188/0x240 [ 158.114424][T12138] vfs_write+0x77b/0x920 [ 158.114535][T12138] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 158.114569][T12138] ksys_write+0xe8/0x1b0 [ 158.114678][T12138] __x64_sys_write+0x42/0x50 [ 158.114711][T12138] x64_sys_call+0x287e/0x2dc0 [ 158.114744][T12138] do_syscall_64+0xc9/0x1c0 [ 158.114781][T12138] ? clear_bhb_loop+0x55/0xb0 [ 158.114859][T12138] ? clear_bhb_loop+0x55/0xb0 [ 158.114891][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.114920][T12138] RIP: 0033:0x7f7654f7b89f [ 158.114938][T12138] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 158.114965][T12138] RSP: 002b:00007f76535e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 158.115039][T12138] RAX: ffffffffffffffda RBX: 00007f7655195fa0 RCX: 00007f7654f7b89f [ 158.115055][T12138] RDX: 0000000000000032 RSI: 0000400000000300 RDI: 00000000000000c8 [ 158.115070][T12138] RBP: 00007f76535e7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.115084][T12138] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 158.115097][T12138] R13: 0000000000000000 R14: 00007f7655195fa0 R15: 00007fff6b498558 [ 158.115118][T12138] [ 158.335288][T11786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.365593][T12130] lo speed is unknown, defaulting to 1000 [ 158.373586][ T3400] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.436800][ T3400] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.454130][T12149] lo speed is unknown, defaulting to 1000 [ 158.475423][T12151] loop1: detected capacity change from 0 to 128 [ 158.495484][T12151] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.515704][T12130] chnl_net:caif_netlink_parms(): no params data found [ 158.528931][ T3400] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.539002][T12156] loop5: detected capacity change from 0 to 1024 [ 158.551539][T12156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.567215][T11786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.590276][ T3400] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.616862][ T4939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.627283][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.634447][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.643381][T12130] bridge_slave_0: entered allmulticast mode [ 158.651644][T12130] bridge_slave_0: entered promiscuous mode [ 158.659093][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.666366][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.677387][T12130] bridge_slave_1: entered allmulticast mode [ 158.685225][T12130] bridge_slave_1: entered promiscuous mode [ 158.703628][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.714436][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.738083][T12168] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.746780][T12130] team0: Port device team_slave_0 added [ 158.758818][T12130] team0: Port device team_slave_1 added [ 158.772914][ T3400] bridge_slave_1: left allmulticast mode [ 158.778618][ T3400] bridge_slave_1: left promiscuous mode [ 158.784393][ T3400] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.792265][ T3400] bridge_slave_0: left allmulticast mode [ 158.797985][ T3400] bridge_slave_0: left promiscuous mode [ 158.803738][ T3400] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.882772][ T3400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.893966][ T3400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.903975][ T3400] bond0 (unregistering): Released all slaves [ 158.920455][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.927583][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.953665][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.965302][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.972349][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.998437][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.015602][ T3400] hsr_slave_0: left promiscuous mode [ 159.021537][ T3400] hsr_slave_1: left promiscuous mode [ 159.027277][ T3400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.034943][ T3400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.042505][ T3400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.049965][ T3400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.058540][ T3400] veth0_macvtap: left promiscuous mode [ 159.142568][T12173] ip6gretap1: entered allmulticast mode [ 159.155803][ T4686] lo speed is unknown, defaulting to 1000 [ 159.162308][ T4686] infiniband s›z0: ib_query_port failed (-19) [ 159.172123][T12130] hsr_slave_0: entered promiscuous mode [ 159.178191][T12130] hsr_slave_1: entered promiscuous mode [ 159.184079][T12130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.191864][T12130] Cannot create hsr debugfs directory [ 159.303463][T12178] xt_bpf: check failed: parse error [ 159.429092][T12188] FAULT_INJECTION: forcing a failure. [ 159.429092][T12188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.442369][T12188] CPU: 0 UID: 0 PID: 12188 Comm: syz.3.3019 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 159.442401][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.442413][T12188] Call Trace: [ 159.442418][T12188] [ 159.442488][T12188] dump_stack_lvl+0xf2/0x150 [ 159.442522][T12188] dump_stack+0x15/0x1a [ 159.442549][T12188] should_fail_ex+0x24a/0x260 [ 159.442644][T12188] should_fail+0xb/0x10 [ 159.442669][T12188] should_fail_usercopy+0x1a/0x20 [ 159.442703][T12188] _copy_to_user+0x20/0xa0 [ 159.442745][T12188] put_timespec64+0x64/0xb0 [ 159.442844][T12188] poll_select_finish+0x30e/0x420 [ 159.442950][T12188] __se_sys_ppoll+0x1c3/0x1f0 [ 159.443025][T12188] __x64_sys_ppoll+0x67/0x80 [ 159.443130][T12188] x64_sys_call+0x2acc/0x2dc0 [ 159.443161][T12188] do_syscall_64+0xc9/0x1c0 [ 159.443194][T12188] ? clear_bhb_loop+0x55/0xb0 [ 159.443218][T12188] ? clear_bhb_loop+0x55/0xb0 [ 159.443276][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.443299][T12188] RIP: 0033:0x7feae9f9cde9 [ 159.443312][T12188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.443470][T12188] RSP: 002b:00007feae8601038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 159.443486][T12188] RAX: ffffffffffffffda RBX: 00007feaea1b5fa0 RCX: 00007feae9f9cde9 [ 159.443497][T12188] RDX: 0000400000000300 RSI: 0000000000000001 RDI: 0000400000000000 [ 159.443508][T12188] RBP: 00007feae8601090 R08: 0000000000000000 R09: 0000000000000000 [ 159.443518][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.443556][T12188] R13: 0000000000000000 R14: 00007feaea1b5fa0 R15: 00007fffb186bd28 [ 159.443571][T12188] [ 159.647575][T12130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.663903][T12130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.677715][T12192] loop3: detected capacity change from 0 to 1024 [ 159.687753][T12194] loop1: detected capacity change from 0 to 764 [ 159.703080][T12130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.714309][T12192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.736832][T12130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.766152][T12200] loop5: detected capacity change from 0 to 128 [ 159.782970][T12200] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.800945][T11595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.834312][T12130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.857358][ T4939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.858157][T12130] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.878121][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.885261][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.895174][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.902340][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.909604][T12206] xt_CT: No such helper "pptp" [ 159.927520][T12130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.938032][T12130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.965502][T12210] loop5: detected capacity change from 0 to 256 [ 159.989048][T12210] FAT-fs (loop5): Directory bread(block 64) failed [ 159.996337][T12210] FAT-fs (loop5): Directory bread(block 65) failed [ 160.005407][T12210] FAT-fs (loop5): Directory bread(block 66) failed [ 160.012591][T12210] FAT-fs (loop5): Directory bread(block 67) failed [ 160.019352][T12210] FAT-fs (loop5): Directory bread(block 68) failed [ 160.024377][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.029514][T12210] FAT-fs (loop5): Directory bread(block 69) failed [ 160.041944][T12210] FAT-fs (loop5): Directory bread(block 70) failed [ 160.049482][T12210] FAT-fs (loop5): Directory bread(block 71) failed [ 160.056325][T12210] FAT-fs (loop5): Directory bread(block 72) failed [ 160.063105][T12210] FAT-fs (loop5): Directory bread(block 73) failed [ 160.103933][T12130] veth0_vlan: entered promiscuous mode [ 160.111736][T12130] veth1_vlan: entered promiscuous mode [ 160.124560][T12130] veth0_macvtap: entered promiscuous mode [ 160.131884][T12130] veth1_macvtap: entered promiscuous mode [ 160.144832][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.155329][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.160844][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3025'. [ 160.165157][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.165175][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.165271][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.205177][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.215082][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.225697][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.237087][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.246457][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.256935][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.266855][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.277361][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.287247][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.298904][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.308775][T12130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.319767][T12130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.330605][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.342063][T12130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.351201][T12130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.360001][T12130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.368816][T12130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.416206][T12229] FAULT_INJECTION: forcing a failure. [ 160.416206][T12229] name failslab, interval 1, probability 0, space 0, times 0 [ 160.429465][T12229] CPU: 0 UID: 0 PID: 12229 Comm: syz.4.3028 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 160.429496][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.429513][T12229] Call Trace: [ 160.429522][T12229] [ 160.429541][T12229] dump_stack_lvl+0xf2/0x150 [ 160.429613][T12229] dump_stack+0x15/0x1a [ 160.429632][T12229] should_fail_ex+0x24a/0x260 [ 160.429678][T12229] should_failslab+0x8f/0xb0 [ 160.429714][T12229] kmem_cache_alloc_noprof+0x52/0x320 [ 160.429739][T12229] ? alloc_empty_file+0xd0/0x200 [ 160.429763][T12229] alloc_empty_file+0xd0/0x200 [ 160.429785][T12229] alloc_file_pseudo+0xc9/0x160 [ 160.429887][T12229] __shmem_file_setup+0x1bb/0x1f0 [ 160.429929][T12229] shmem_file_setup+0x3b/0x50 [ 160.429971][T12229] __se_sys_memfd_create+0x2e1/0x5a0 [ 160.430035][T12229] __x64_sys_memfd_create+0x31/0x40 [ 160.430060][T12229] x64_sys_call+0x2d4c/0x2dc0 [ 160.430094][T12229] do_syscall_64+0xc9/0x1c0 [ 160.430130][T12229] ? clear_bhb_loop+0x55/0xb0 [ 160.430163][T12229] ? clear_bhb_loop+0x55/0xb0 [ 160.430269][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.430302][T12229] RIP: 0033:0x7fc52414cde9 [ 160.430320][T12229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.430341][T12229] RSP: 002b:00007fc5227b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 160.430360][T12229] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007fc52414cde9 [ 160.430382][T12229] RDX: 00007fc5227b6ef0 RSI: 0000000000000000 RDI: 00007fc5241cec51 [ 160.430476][T12229] RBP: 0000400000002400 R08: 00007fc5227b6bb7 R09: 00007fc5227b6e40 [ 160.430490][T12229] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000000 [ 160.430530][T12229] R13: 00007fc5227b6ef0 R14: 00007fc5227b6eb0 R15: 0000400000000180 [ 160.430552][T12229] [ 160.647692][T12231] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3031'. [ 160.654252][T12233] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 160.672348][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3029'. [ 160.681514][T12235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3029'. [ 160.705464][T12235] random: crng reseeded on system resumption [ 160.739582][T12239] loop4: detected capacity change from 0 to 1024 [ 160.763011][T12239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.810640][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.819183][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.852719][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.870074][T12247] loop5: detected capacity change from 0 to 2048 [ 160.888798][T12247] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 160.889404][T12254] ip6gretap1: entered allmulticast mode [ 160.907996][T12247] System zones: 0-7 [ 160.912707][T12247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.943005][ T4939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.961251][T12258] FAULT_INJECTION: forcing a failure. [ 160.961251][T12258] name failslab, interval 1, probability 0, space 0, times 0 [ 160.973941][T12258] CPU: 1 UID: 0 PID: 12258 Comm: syz.0.3039 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 160.973974][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.973989][T12258] Call Trace: [ 160.973996][T12258] [ 160.974005][T12258] dump_stack_lvl+0xf2/0x150 [ 160.974040][T12258] dump_stack+0x15/0x1a [ 160.974130][T12258] should_fail_ex+0x24a/0x260 [ 160.974167][T12258] should_failslab+0x8f/0xb0 [ 160.974204][T12258] __kmalloc_noprof+0xab/0x3f0 [ 160.974300][T12258] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 160.974377][T12258] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 160.974408][T12258] ? __pfx_ethnl_default_done+0x10/0x10 [ 160.974447][T12258] ? __pfx_ethnl_default_start+0x10/0x10 [ 160.974489][T12258] genl_rcv_msg+0x475/0x6d0 [ 160.974533][T12258] ? __pfx_ethnl_default_doit+0x10/0x10 [ 160.974570][T12258] ? __dev_queue_xmit+0xb6e/0x2090 [ 160.974600][T12258] ? ref_tracker_free+0x3a5/0x410 [ 160.974635][T12258] netlink_rcv_skb+0x12c/0x230 [ 160.974724][T12258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.974757][T12258] genl_rcv+0x28/0x40 [ 160.974780][T12258] netlink_unicast+0x599/0x670 [ 160.974816][T12258] netlink_sendmsg+0x5cc/0x6e0 [ 160.974861][T12258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.974899][T12258] __sock_sendmsg+0x140/0x180 [ 160.974946][T12258] ____sys_sendmsg+0x326/0x4b0 [ 160.974979][T12258] __sys_sendmsg+0x19d/0x230 [ 160.975071][T12258] __x64_sys_sendmsg+0x46/0x50 [ 160.975101][T12258] x64_sys_call+0x2734/0x2dc0 [ 160.975133][T12258] do_syscall_64+0xc9/0x1c0 [ 160.975189][T12258] ? clear_bhb_loop+0x55/0xb0 [ 160.975223][T12258] ? clear_bhb_loop+0x55/0xb0 [ 160.975255][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.975363][T12258] RIP: 0033:0x7fc31566cde9 [ 160.975382][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.975404][T12258] RSP: 002b:00007fc313cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.975427][T12258] RAX: ffffffffffffffda RBX: 00007fc315885fa0 RCX: 00007fc31566cde9 [ 160.975441][T12258] RDX: 0000000004008800 RSI: 0000400000000840 RDI: 0000000000000003 [ 160.975505][T12258] RBP: 00007fc313cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.975520][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.975547][T12258] R13: 0000000000000000 R14: 00007fc315885fa0 R15: 00007ffdf912fc98 [ 160.975569][T12258] [ 161.223136][T12261] FAULT_INJECTION: forcing a failure. [ 161.223136][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 161.236005][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.4.3040 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 161.236034][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.236055][T12261] Call Trace: [ 161.236062][T12261] [ 161.236071][T12261] dump_stack_lvl+0xf2/0x150 [ 161.236153][T12261] dump_stack+0x15/0x1a [ 161.236173][T12261] should_fail_ex+0x24a/0x260 [ 161.236208][T12261] should_failslab+0x8f/0xb0 [ 161.236275][T12261] __kmalloc_noprof+0xab/0x3f0 [ 161.236296][T12261] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 161.236361][T12261] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 161.236391][T12261] ? mod_objcg_state+0x2ea/0x4f0 [ 161.236415][T12261] ? __rcu_read_unlock+0x34/0x70 [ 161.236438][T12261] genl_start+0xe7/0x3a0 [ 161.236506][T12261] __netlink_dump_start+0x32a/0x520 [ 161.236539][T12261] genl_rcv_msg+0x4ea/0x6d0 [ 161.236559][T12261] ? __pfx_ethnl_default_start+0x10/0x10 [ 161.236669][T12261] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 161.236700][T12261] ? __pfx_ethnl_default_done+0x10/0x10 [ 161.236780][T12261] ? __pfx_genl_start+0x10/0x10 [ 161.236860][T12261] ? __pfx_genl_dumpit+0x10/0x10 [ 161.236886][T12261] ? __pfx_genl_done+0x10/0x10 [ 161.236920][T12261] netlink_rcv_skb+0x12c/0x230 [ 161.237019][T12261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.237058][T12261] genl_rcv+0x28/0x40 [ 161.237081][T12261] netlink_unicast+0x599/0x670 [ 161.237165][T12261] netlink_sendmsg+0x5cc/0x6e0 [ 161.237199][T12261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.237309][T12261] __sock_sendmsg+0x140/0x180 [ 161.237347][T12261] ____sys_sendmsg+0x326/0x4b0 [ 161.237381][T12261] __sys_sendmsg+0x19d/0x230 [ 161.237461][T12261] __x64_sys_sendmsg+0x46/0x50 [ 161.237487][T12261] x64_sys_call+0x2734/0x2dc0 [ 161.237562][T12261] do_syscall_64+0xc9/0x1c0 [ 161.237597][T12261] ? clear_bhb_loop+0x55/0xb0 [ 161.237626][T12261] ? clear_bhb_loop+0x55/0xb0 [ 161.237676][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.237713][T12261] RIP: 0033:0x7fc52414cde9 [ 161.237731][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.237854][T12261] RSP: 002b:00007fc5227b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.237877][T12261] RAX: ffffffffffffffda RBX: 00007fc524365fa0 RCX: 00007fc52414cde9 [ 161.237892][T12261] RDX: 0000000020000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 161.237907][T12261] RBP: 00007fc5227b7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.237921][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.238015][T12261] R13: 0000000000000000 R14: 00007fc524365fa0 R15: 00007fffdc82d058 [ 161.238032][T12261] [ 161.673550][T12276] xt_CT: No such helper "pptp" [ 161.748275][T12279] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3046'. [ 161.783395][T12265] 9pnet: Could not find request transport: 0xffffffffffffffff [ 161.783739][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3046'. [ 161.825426][T12265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'. [ 161.833496][T12289] loop5: detected capacity change from 0 to 1024 [ 161.846115][T12282] loop1: detected capacity change from 0 to 128 [ 161.851546][T12289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.876843][T12282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.905072][T11786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.931747][ T4939] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.971371][T12297] loop5: detected capacity change from 0 to 512 [ 161.984301][T12299] ip6gretap1: entered allmulticast mode [ 161.991660][T12297] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 161.998270][T12297] EXT4-fs (loop5): mount failed [ 162.056234][T12304] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3053'. [ 162.301242][T12315] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3056'. [ 162.375639][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3057'. [ 162.424229][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 162.424250][ T29] audit: type=1326 audit(162.477:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12318 comm="syz.5.3058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7654f7cde9 code=0x0 [ 162.516166][T12321] loop4: detected capacity change from 0 to 128 [ 162.524542][T12321] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.539363][ T29] audit: type=1326 audit(162.587:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52414cde9 code=0x7ffc0000 [ 162.563587][ T29] audit: type=1326 audit(162.587:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52414cde9 code=0x7ffc0000 [ 162.586839][ T29] audit: type=1326 audit(162.587:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc52414cde9 code=0x7ffc0000 [ 162.610053][ T29] audit: type=1326 audit(162.587:12656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52414cde9 code=0x7ffc0000 [ 162.633147][ T29] audit: type=1326 audit(162.587:12657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc52414cde9 code=0x7ffc0000 [ 162.656289][ T29] audit: type=1326 audit(162.597:12658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12320 comm="syz.4.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52414cde9 code=0x7ffc0000 [ 162.680721][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.800482][T12333] loop4: detected capacity change from 0 to 164 [ 162.811605][T12333] syz.4.3061: attempt to access beyond end of device [ 162.811605][T12333] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 162.836434][T12333] syz.4.3061: attempt to access beyond end of device [ 162.836434][T12333] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 162.920482][T12339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.952712][T12341] ip6gretap1: entered allmulticast mode [ 163.063915][T12347] loop3: detected capacity change from 0 to 128 [ 163.149809][ T3318] kworker/u8:6: attempt to access beyond end of device [ 163.149809][ T3318] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 163.397462][T12359] xt_CT: No such helper "pptp" [ 163.934005][T12362] 9pnet: p9_errstr2errno: server reported unknown error [ 164.016202][T12368] FAULT_INJECTION: forcing a failure. [ 164.016202][T12368] name failslab, interval 1, probability 0, space 0, times 0 [ 164.029087][T12368] CPU: 1 UID: 0 PID: 12368 Comm: +}[@ Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 164.029155][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.029171][T12368] Call Trace: [ 164.029178][T12368] [ 164.029188][T12368] dump_stack_lvl+0xf2/0x150 [ 164.029224][T12368] dump_stack+0x15/0x1a [ 164.029251][T12368] should_fail_ex+0x24a/0x260 [ 164.029338][T12368] should_failslab+0x8f/0xb0 [ 164.029378][T12368] __kmalloc_noprof+0xab/0x3f0 [ 164.029468][T12368] ? io_cache_alloc_new+0x2b/0xa0 [ 164.029503][T12368] io_cache_alloc_new+0x2b/0xa0 [ 164.029568][T12368] io_msg_alloc_async+0xef/0x180 [ 164.029611][T12368] io_connect_prep+0x116/0x170 [ 164.029662][T12368] io_submit_sqes+0x5fb/0x1060 [ 164.029712][T12368] __se_sys_io_uring_enter+0x1c0/0x1b00 [ 164.029808][T12368] ? 0xffffffff81000000 [ 164.029824][T12368] ? __rcu_read_unlock+0x4e/0x70 [ 164.029847][T12368] ? get_pid_task+0x8e/0xc0 [ 164.029874][T12368] ? proc_fail_nth_write+0x12a/0x150 [ 164.029920][T12368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.030010][T12368] ? vfs_write+0x644/0x920 [ 164.030039][T12368] ? __fget_files+0x17c/0x1c0 [ 164.030074][T12368] ? fput+0x1c4/0x200 [ 164.030098][T12368] ? ksys_write+0x176/0x1b0 [ 164.030222][T12368] __x64_sys_io_uring_enter+0x78/0x90 [ 164.030263][T12368] x64_sys_call+0xb5e/0x2dc0 [ 164.030290][T12368] do_syscall_64+0xc9/0x1c0 [ 164.030319][T12368] ? clear_bhb_loop+0x55/0xb0 [ 164.030413][T12368] ? clear_bhb_loop+0x55/0xb0 [ 164.030473][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.030660][T12368] RIP: 0033:0x7fc31566cde9 [ 164.030680][T12368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.030704][T12368] RSP: 002b:00007fc313cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 164.030781][T12368] RAX: ffffffffffffffda RBX: 00007fc315885fa0 RCX: 00007fc31566cde9 [ 164.030798][T12368] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000004 [ 164.030813][T12368] RBP: 00007fc313cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.030828][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.030842][T12368] R13: 0000000000000000 R14: 00007fc315885fa0 R15: 00007ffdf912fc98 [ 164.030863][T12368] [ 164.140115][T12364] chnl_net:caif_netlink_parms(): no params data found [ 164.293216][ T29] audit: type=1326 audit(164.347:12659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566cde9 code=0x7ffc0000 [ 164.316300][ T29] audit: type=1326 audit(164.347:12660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566cde9 code=0x7ffc0000 [ 164.353298][ T29] audit: type=1326 audit(164.367:12661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc31566cde9 code=0x7ffc0000 [ 164.386163][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.393658][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.395542][T12388] random: crng reseeded on system resumption [ 164.401137][T12364] bridge_slave_0: entered allmulticast mode [ 164.413876][T12364] bridge_slave_0: entered promiscuous mode [ 164.420818][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.427941][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.435246][T12364] bridge_slave_1: entered allmulticast mode [ 164.441747][T12364] bridge_slave_1: entered promiscuous mode [ 164.483065][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.495167][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.526992][T12364] team0: Port device team_slave_0 added [ 164.536912][T12364] team0: Port device team_slave_1 added [ 164.572521][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.579500][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.605684][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.617185][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.624286][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.650279][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.679348][T12364] hsr_slave_0: entered promiscuous mode [ 164.685558][T12364] hsr_slave_1: entered promiscuous mode [ 164.692721][T12364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.700377][T12364] Cannot create hsr debugfs directory [ 164.766926][T12364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.777337][T12364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 29541 - 0 [ 164.823732][T12364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.834125][T12364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 29541 - 0 [ 164.862022][T12364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.872567][T12364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 29541 - 0 [ 164.922160][T12364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.932582][T12364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 29541 - 0 [ 164.995714][T12364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.004699][T12364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.013426][T12364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.022345][T12364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.036586][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.043753][T12364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.051127][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.058294][T12364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.088699][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.100270][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.108166][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.120827][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.131610][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.138755][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.149132][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.156357][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.218275][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.321722][T12364] veth0_vlan: entered promiscuous mode [ 165.329511][T12364] veth1_vlan: entered promiscuous mode [ 165.345485][T12364] veth0_macvtap: entered promiscuous mode [ 165.353400][T12364] veth1_macvtap: entered promiscuous mode [ 165.363977][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.374580][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.384650][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.395255][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.405164][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.415610][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.425466][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.435931][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.445770][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.456265][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.467897][T12364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.479473][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.490111][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.500174][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.510659][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.520706][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.531180][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.541185][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.551920][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.561755][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.572356][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.583458][T12364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.593297][T12364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.602270][T12364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.611138][T12364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.620090][T12364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.721429][T12434] loop4: detected capacity change from 0 to 2048 [ 165.732480][T12434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.746726][T12433] __nla_validate_parse: 7 callbacks suppressed [ 165.746744][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3088'. [ 165.787165][T12364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.796987][T12437] xt_CT: No such helper "pptp" [ 165.818661][T12446] loop4: detected capacity change from 0 to 1024 [ 165.832143][T12446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.890178][T12364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.002872][T12455] FAULT_INJECTION: forcing a failure. [ 166.002872][T12455] name failslab, interval 1, probability 0, space 0, times 0 [ 166.015575][T12455] CPU: 0 UID: 0 PID: 12455 Comm: syz.4.3092 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 166.015597][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 166.015627][T12455] Call Trace: [ 166.015632][T12455] [ 166.015638][T12455] dump_stack_lvl+0xf2/0x150 [ 166.015663][T12455] dump_stack+0x15/0x1a [ 166.015681][T12455] should_fail_ex+0x24a/0x260 [ 166.015706][T12455] ? audit_log_d_path+0x8e/0x150 [ 166.015799][T12455] should_failslab+0x8f/0xb0 [ 166.015856][T12455] __kmalloc_cache_noprof+0x4e/0x320 [ 166.015877][T12455] audit_log_d_path+0x8e/0x150 [ 166.015983][T12455] audit_log_d_path_exe+0x42/0x70 [ 166.016013][T12455] audit_log_task+0x1ec/0x250 [ 166.016042][T12455] audit_seccomp+0x68/0x130 [ 166.016142][T12455] __seccomp_filter+0x6fa/0x1180 [ 166.016162][T12455] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.016248][T12455] ? vfs_write+0x644/0x920 [ 166.016299][T12455] ? putname+0xcf/0xf0 [ 166.016343][T12455] __secure_computing+0x9f/0x1c0 [ 166.016365][T12455] syscall_trace_enter+0xd1/0x1f0 [ 166.016463][T12455] ? fpregs_assert_state_consistent+0x83/0xa0 [ 166.016485][T12455] do_syscall_64+0xaa/0x1c0 [ 166.016511][T12455] ? clear_bhb_loop+0x55/0xb0 [ 166.016553][T12455] ? clear_bhb_loop+0x55/0xb0 [ 166.016577][T12455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.016648][T12455] RIP: 0033:0x7fa9451ccde9 [ 166.016661][T12455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.016707][T12455] RSP: 002b:00007fa943831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 166.016722][T12455] RAX: ffffffffffffffda RBX: 00007fa9453e5fa0 RCX: 00007fa9451ccde9 [ 166.016733][T12455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.016744][T12455] RBP: 00007fa943831090 R08: 0000000000000000 R09: 0000000000000000 [ 166.016757][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.016775][T12455] R13: 0000000000000000 R14: 00007fa9453e5fa0 R15: 00007ffeb390a508 [ 166.016859][T12455] [ 166.016885][T12455] syz.4.3092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 166.319546][T12460] loop4: detected capacity change from 0 to 128 [ 166.327045][T12462] pim6reg1: entered promiscuous mode [ 166.331429][T12460] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.332441][T12462] pim6reg1: entered allmulticast mode [ 166.371087][T12364] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.388935][T12466] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3096'. [ 166.554177][T12475] loop3: detected capacity change from 0 to 1024 [ 166.573689][T12475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.638324][T11595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.711397][T12490] loop5: detected capacity change from 0 to 128 [ 166.732148][T12490] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.754200][T12489] loop3: detected capacity change from 0 to 128 [ 166.765028][T12489] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.796531][T11595] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.822749][ T4939] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.010993][T12516] loop1: detected capacity change from 0 to 1024 [ 167.021755][T12516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.128028][T11786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.216019][T12522] loop1: detected capacity change from 0 to 128 [ 167.226340][T12522] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.251101][T12526] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.262708][T12526] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 167.273065][T11786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.294197][T12528] ip6gretap1: entered allmulticast mode [ 167.318145][T12532] loop1: detected capacity change from 0 to 128 [ 167.327750][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 167.341076][T12532] syzkaller1: entered promiscuous mode [ 167.346620][T12532] syzkaller1: entered allmulticast mode [ 167.480660][T12541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.493692][T12543] loop4: detected capacity change from 0 to 512 [ 167.511612][T12543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3125: bg 0: block 248: padding at end of block bitmap is not set [ 167.527947][T12543] __quota_error: 252 callbacks suppressed [ 167.527968][T12543] Quota error (device loop4): write_blk: dquota write failed [ 167.541322][T12543] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.552072][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3125: Failed to acquire dquot type 1 [ 167.564030][T12543] EXT4-fs (loop4): 1 truncate cleaned up [ 167.570711][T12543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.586085][T12547] loop1: detected capacity change from 0 to 2048 [ 167.621378][T12364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.640721][T12547] loop1: p3 p4 < > [ 167.655354][T12547] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 167.766720][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 167.781311][T12555] loop1: detected capacity change from 0 to 128 [ 167.797641][T12555] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.825259][ T29] audit: type=1326 audit(167.877:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efad8cde9 code=0x7ffc0000 [ 167.859067][ T29] audit: type=1326 audit(167.897:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1efad8cde9 code=0x7ffc0000 [ 167.882488][ T29] audit: type=1326 audit(167.897:12916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efad8cde9 code=0x7ffc0000 [ 167.905499][ T29] audit: type=1326 audit(167.897:12917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f1efad8cde9 code=0x7ffc0000 [ 167.923183][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3135'. [ 167.928562][ T29] audit: type=1326 audit(167.897:12918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.1.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efad8cde9 code=0x7ffc0000 [ 167.938195][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3134'. [ 167.978054][T11786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.025829][T12578] FAULT_INJECTION: forcing a failure. [ 168.025829][T12578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.045448][T12580] FAULT_INJECTION: forcing a failure. [ 168.045448][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 168.045480][T12580] CPU: 0 UID: 0 PID: 12580 Comm: syz.5.3137 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 168.045512][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.045614][T12580] Call Trace: [ 168.045621][T12580] [ 168.045628][T12580] dump_stack_lvl+0xf2/0x150 [ 168.045745][T12580] dump_stack+0x15/0x1a [ 168.045768][T12580] should_fail_ex+0x24a/0x260 [ 168.045805][T12580] should_failslab+0x8f/0xb0 [ 168.045842][T12580] kmem_cache_alloc_node_noprof+0x59/0x320 [ 168.045929][T12580] ? __alloc_skb+0x10b/0x310 [ 168.045953][T12580] __alloc_skb+0x10b/0x310 [ 168.045974][T12580] netlink_ack+0xef/0x4f0 [ 168.046074][T12580] netlink_rcv_skb+0x19c/0x230 [ 168.046109][T12580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.046143][T12580] genl_rcv+0x28/0x40 [ 168.046200][T12580] netlink_unicast+0x599/0x670 [ 168.046237][T12580] netlink_sendmsg+0x5cc/0x6e0 [ 168.046334][T12580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.046372][T12580] __sock_sendmsg+0x140/0x180 [ 168.046409][T12580] ____sys_sendmsg+0x326/0x4b0 [ 168.046443][T12580] __sys_sendmsg+0x19d/0x230 [ 168.046518][T12580] __x64_sys_sendmsg+0x46/0x50 [ 168.046668][T12580] x64_sys_call+0x2734/0x2dc0 [ 168.046701][T12580] do_syscall_64+0xc9/0x1c0 [ 168.046734][T12580] ? clear_bhb_loop+0x55/0xb0 [ 168.046783][T12580] ? clear_bhb_loop+0x55/0xb0 [ 168.046814][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.046918][T12580] RIP: 0033:0x7f7654f7cde9 [ 168.046936][T12580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.046958][T12580] RSP: 002b:00007f76535e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.046977][T12580] RAX: ffffffffffffffda RBX: 00007f7655195fa0 RCX: 00007f7654f7cde9 [ 168.046991][T12580] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000004 [ 168.047068][T12580] RBP: 00007f76535e7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.047083][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.047097][T12580] R13: 0000000000000000 R14: 00007f7655195fa0 R15: 00007fff6b498558 [ 168.047117][T12580] [ 168.311736][T12578] CPU: 1 UID: 0 PID: 12578 Comm: syz.1.3136 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 168.311759][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.311770][T12578] Call Trace: [ 168.311775][T12578] [ 168.311783][T12578] dump_stack_lvl+0xf2/0x150 [ 168.311928][T12578] dump_stack+0x15/0x1a [ 168.311949][T12578] should_fail_ex+0x24a/0x260 [ 168.311994][T12578] should_fail+0xb/0x10 [ 168.312159][T12578] should_fail_usercopy+0x1a/0x20 [ 168.312207][T12578] _copy_to_user+0x20/0xa0 [ 168.312237][T12578] simple_read_from_buffer+0xa0/0x110 [ 168.312262][T12578] proc_fail_nth_read+0xf9/0x140 [ 168.312288][T12578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.312363][T12578] vfs_read+0x19b/0x6f0 [ 168.312392][T12578] ? __rcu_read_unlock+0x4e/0x70 [ 168.312416][T12578] ? __fget_files+0x17c/0x1c0 [ 168.312514][T12578] ksys_read+0xe8/0x1b0 [ 168.312538][T12578] __x64_sys_read+0x42/0x50 [ 168.312560][T12578] x64_sys_call+0x2874/0x2dc0 [ 168.312648][T12578] do_syscall_64+0xc9/0x1c0 [ 168.312673][T12578] ? clear_bhb_loop+0x55/0xb0 [ 168.312697][T12578] ? clear_bhb_loop+0x55/0xb0 [ 168.312751][T12578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.312774][T12578] RIP: 0033:0x7f1efad8b7fc [ 168.312787][T12578] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.312803][T12578] RSP: 002b:00007f1ef93f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.312880][T12578] RAX: ffffffffffffffda RBX: 00007f1efafa5fa0 RCX: 00007f1efad8b7fc [ 168.312891][T12578] RDX: 000000000000000f RSI: 00007f1ef93f10a0 RDI: 000000000000000c [ 168.312929][T12578] RBP: 00007f1ef93f1090 R08: 0000000000000000 R09: 0000000000000000 [ 168.312939][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.312950][T12578] R13: 0000000000000000 R14: 00007f1efafa5fa0 R15: 00007fffa5627248 [ 168.312968][T12578] [ 168.586303][ T29] audit: type=1326 audit(168.637:12919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.5.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 168.609508][ T29] audit: type=1326 audit(168.637:12920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.5.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 168.632959][ T29] audit: type=1326 audit(168.687:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.5.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7654f7cde9 code=0x7ffc0000 [ 168.661360][T12586] xt_CT: No such helper "pptp" [ 168.700419][T12595] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3142'. [ 168.722163][T12597] 9pnet_fd: Insufficient options for proto=fd [ 168.748910][T12597] ================================================================== [ 168.757026][T12597] BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list [ 168.764501][T12597] [ 168.766822][T12597] read-write to 0xffff8881047c3240 of 4 bytes by task 11786 on cpu 0: [ 168.775062][T12597] shrink_dentry_list+0x19f/0x3e0 [ 168.780093][T12597] shrink_dcache_parent+0x43/0x1b0 [ 168.785212][T12597] d_invalidate+0xa9/0x1c0 [ 168.789632][T12597] proc_invalidate_siblings_dcache+0x1db/0x2b0 [ 168.795835][T12597] proc_flush_pid+0x1d/0x30 [ 168.800351][T12597] release_task+0xad9/0xc20 [ 168.804966][T12597] wait_consider_task+0x116e/0x1680 [ 168.810168][T12597] __do_wait+0x100/0x500 [ 168.814432][T12597] do_wait+0xaf/0x270 [ 168.818409][T12597] kernel_wait4+0x164/0x1d0 [ 168.822928][T12597] __x64_sys_wait4+0x94/0x120 [ 168.827615][T12597] x64_sys_call+0x25a2/0x2dc0 [ 168.832311][T12597] do_syscall_64+0xc9/0x1c0 [ 168.836867][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.842774][T12597] [ 168.845126][T12597] read to 0xffff8881047c3240 of 4 bytes by task 12597 on cpu 1: [ 168.852762][T12597] __dentry_kill+0x2af/0x4c0 [ 168.857374][T12597] dput+0x5c/0xd0 [ 168.861021][T12597] proc_invalidate_siblings_dcache+0x1e3/0x2b0 [ 168.867195][T12597] proc_flush_pid+0x1d/0x30 [ 168.871707][T12597] release_task+0xb7f/0xc20 [ 168.876229][T12597] do_exit+0xf5d/0x17f0 [ 168.880397][T12597] do_group_exit+0x102/0x150 [ 168.885007][T12597] get_signal+0xeb9/0x1000 [ 168.889444][T12597] arch_do_signal_or_restart+0x95/0x4b0 [ 168.895029][T12597] syscall_exit_to_user_mode+0x62/0x120 [ 168.900585][T12597] do_syscall_64+0xd6/0x1c0 [ 168.905196][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.911291][T12597] [ 168.913616][T12597] value changed: 0x0048040c -> 0x0000000c [ 168.919339][T12597] [ 168.921666][T12597] Reported by Kernel Concurrency Sanitizer on: [ 168.927815][T12597] CPU: 1 UID: 0 PID: 12597 Comm: syz.1.3143 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 168.938576][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.948666][T12597] ==================================================================