last executing test programs: 4.006980089s ago: executing program 0 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syncfs(r1) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_delete(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) 2.038382526s ago: executing program 1 (id=220): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.819837174s ago: executing program 1 (id=221): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae9a69d8fb355ab1811c70660400000405000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000005cd800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090179f6f1bc482f61290000000000bf91000000000000b7020000000000008500000084000000b70000000000000095990039599952e7dd1219840f2da314b8a175aad5a00a953eef5461503c09596e99d1827868a8f1a81196a1062a9c273bf24afc8f39228fb7ff0123daa9cec8726bd8cbd94e613ef5a42ca12002640c7777a50e5eb80f0bbe03831a5719218f776810a3e22310f67c777b60224457601a4241b07d221a3690cf8f2c8a2bed836fb36eddf7a5d183b44fc97f9135ab0c4a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000400200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, r4, 0x4, 0x4, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000e7be0000000000000000000400000000005faffc36b4ba3e48335d73e3314af423744999ad4552c2e0c83ad0d00c055d8ccb30ad73c41e5038df0baaed899ccc43a8dc09354f4a7718bc5b6841d795bfb959de54f95ec32994c6fa9adced527d53f2c6b5f710ce44785e9a5e96b1a74c31f265e3ce485ec623142f26eef22b6a4230e163dbfc2dd4a0746f5e40a9ce6e498473036cafa9ba1624dea4c4d9adbe36eb1d7ca4cae80bfa2b63c43c7d968fe0", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.543900008s ago: executing program 1 (id=224): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) r7 = dup(r5) inotify_rm_watch(r7, r6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x7a6, &(0x7f0000001440)="$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") 1.442708077s ago: executing program 2 (id=229): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_robust_list(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.358221234s ago: executing program 2 (id=230): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000008000000ff00000000000000", @ANYRES32=0x1, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4028, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.28930795s ago: executing program 1 (id=233): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.28870127s ago: executing program 3 (id=234): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae9a69d8fb355ab1811c70660400000405000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000005cd800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090179f6f1bc482f61290000000000bf91000000000000b7020000000000008500000084000000b70000000000000095990039599952e7dd1219840f2da314b8a175aad5a00a953eef5461503c09596e99d1827868a8f1a81196a1062a9c273bf24afc8f39228fb7ff0123daa9cec8726bd8cbd94e613ef5a42ca12002640c7777a50e5eb80f0bbe03831a5719218f776810a3e22310f67c777b60224457601a4241b07d221a3690cf8f2c8a2bed836fb36eddf7a5d183b44fc97f9135ab0c4a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000400200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, r4, 0x4, 0x4, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000e7be0000000000000000000400000000005faffc36b4ba3e48335d73e3314af423744999ad4552c2e0c83ad0d00c055d8ccb30ad73c41e5038df0baaed899ccc43a8dc09354f4a7718bc5b6841d795bfb959de54f95ec32994c6fa9adced527d53f2c6b5f710ce44785e9a5e96b1a74c31f265e3ce485ec623142f26eef22b6a4230e163dbfc2dd4a0746f5e40a9ce6e498473036cafa9ba1624dea4c4d9adbe36eb1d7ca4cae80bfa2b63c43c7d968fe0", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.28636547s ago: executing program 2 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a300000000008000540000000141400"], 0x64}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.063177439s ago: executing program 1 (id=238): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ec6893e7fb00003e2000000000000000000000000000200000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e52100"/17], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xfeffffff) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.060002859s ago: executing program 4 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x5}, 0x18) memfd_secret(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00f9ffffff05003600000000000c000500000000000000000008000200000000000000f31abe00a2db8f3ea9a06c017c795c500865b8", @ANYRES32, @ANYBLOB], 0x38}, 0x4, 0x700000000000000}, 0x0) 1.018430203s ago: executing program 3 (id=240): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000500)='+\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x90a\xac', 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0xfffffffffffffffa, 0x0) 1.017662973s ago: executing program 3 (id=241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r1, 0x0) ftruncate(r1, 0xc17a) unshare(0x20000400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x26c0, &(0x7f0000000240)={0x0, 0xfffffffc, 0x10100, 0x3}, &(0x7f00000000c0), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='dlm_bast\x00', r3}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0xfffffffffffffffe, &(0x7f0000000080)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="fffff7ffffffaaaaaaaaaa4008004510006200000000002f9078ac1414bbe0000801248022eb000000000008000810000800000800090004000086dd080088be00000000100000800022eb000000002000000002000000000000000000000008006558000000f180a06425ed28d8fa1b7a09cef6a174b66f9a7c5d63031d64245411e54100d29df7d05f43"], 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(r5, 0x25, &(0x7f0000000340)={0x1, 0x0, 0xa, 0x3, r6}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) write$sndseq(0xffffffffffffffff, &(0x7f0000001580)=[{0x2, 0x5, 0x2, 0x81, @tick=0x101b, {0x0, 0x3}, {0x9}, @ext={0x34, &(0x7f00000014c0)="2fd997dd87d23c0a01232efbc63147439b27d952f34987295799e7bdd87060cfe29efffe1a2d0f07976ca0ec8f843f9d9a325733"}}], 0x1c) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="b8000000190067"], 0xb8}}, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$eJzs0zGIU3ccB/Bf0jNXBRE7uTVchliXEzJer2BDfBwBcwSLDiK62SGLTh1iAoaKg2eHiOByDpbCGSq0TiKCIOLFQcgkinZREYciuFjFpuTu3XItB4UctPD5wHuP/+//+70vfx4v+F/Lxu/D4TATEcPJDdqGrdE9t778zVJl/1x+fl/9YEQmjkTE9+//+GG0k1kbTN86la6fpevSrYnG+aXk7EJ3+64b+Q8PsrEa0I5YuV72Lx8d5znZHLtP7bmTaQ923qzGlU9jeWZb4/CJXvGLbO/h+9H2n+nn3rJuLD+u/Ouz93ac6ZxMvsxFPEqaz5NX2bdvkgOXFqdzF1r14uu9ad+xcQWu0/h4KHft6t1y58XW0v1qrdb9+cnFQrNyu3N60C88fnfueNr3dKO/CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4zdp/bc+Twz2HmzGleWv1qe2dY4fKJXLLd6D+d//frH/E9TkVnpm96k/Ouz93ac6ZxMFr6b/fZR0nyevMq+fZMcuLQ4nbvQqhdf7037jv3DbG4M+Y2Ph3LXrt4td15sLd2v1mrdLXGx0Kzc7pwe9AuP3507Hp/9Uq5GPJ0cxWXHkAgAAAAAAAAAAAAAAAAAAAB/V9k/l5/fVz8YkYkjETGzOPdkVB9Ormx/stY3lT6frdajdGuicX4pObvQ3b7rRv7Dg9/Sejsb0Y6Il/3LRzdOnticA/Gv/BUAAP//FI2HuA==") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.014815493s ago: executing program 1 (id=242): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4004, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[0x0]) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 1.012781823s ago: executing program 4 (id=243): creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 993.481255ms ago: executing program 0 (id=244): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000380)={0xfdfdffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="00000000007900ed00", @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="00000000000d0009000000000000000000d7b0e9bf44d3398ea233446db65629ba89899b000000000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ed079b8a6ccd28aead", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000180e084efa32d8ea0000010000000900010073797a300000000060000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000000800074000b3ed0000032c0003800800024000000000080001400000000018000380140001fc6d657464657673696d30000000000000140000001000010000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) sendto$inet(r2, &(0x7f0000001740)="e6", 0x1, 0x20008045, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r6, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x219}], 0x1}}], 0x1, 0x4008095) r10 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000400)="12d54722a1a1ef2f7fc2c063ea8cadbd2fba4171a724e3488a97c265aa9fe3847a09dd9c355ec55540c791a43a4cf95572f87b56d70cf65615ac2ce45773dd03d448e5a2b37e9d706b397837aa0ceaab4201438c9bffd1b0", 0x58, 0x4000100, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @empty, 0xf18}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) 971.894747ms ago: executing program 4 (id=245): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000180)=@framed={{}, [@printk={@llx}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x0, 0x1, 0x1, 0x7, 0x5, 0x1}, @ldst={0x1, 0x2, 0x3, 0x6, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 971.036687ms ago: executing program 3 (id=246): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x2, 0x7f, 0x0, &(0x7f00000000c0)}) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0xf00}) tee(r3, r4, 0xed64, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) close(r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000002, 0x0, @perf_config_ext={0x0, 0x4}, 0x22c0, 0x0, 0x8, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x70, 0x0, 0x0) 527.465265ms ago: executing program 0 (id=247): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000008000000ff00000000000000", @ANYRES32=0x1, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4028, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 526.554975ms ago: executing program 3 (id=248): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000f47b67df0cc518519367689ff900f00000000000000000000000000000000100000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000000000150000000000837f988c45d2e1c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r9], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x74, r12, {0x6, 0xfff1}, {0x0, 0xfff2}, {0x4, 0xdc2dcfa30d387875}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2000c0c0}, 0x4c810) 526.237265ms ago: executing program 4 (id=249): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 488.867158ms ago: executing program 0 (id=250): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf9, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ae9a69d8fb355ab1811c70660400000405000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000005cd800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090179f6f1bc482f61290000000000bf91000000000000b7020000000000008500000084000000b70000000000000095990039599952e7dd1219840f2da314b8a175aad5a00a953eef5461503c09596e99d1827868a8f1a81196a1062a9c273bf24afc8f39228fb7ff0123daa9cec8726bd8cbd94e613ef5a42ca12002640c7777a50e5eb80f0bbe03831a5719218f776810a3e22310f67c777b60224457601a4241b07d221a3690cf8f2c8a2bed836fb36eddf7a5d183b44fc97f9135ab0c4a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000400200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, r4, 0x4, 0x4, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 392.822916ms ago: executing program 2 (id=251): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000500)='+\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x90a\xac', 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0xfffffffffffffffa, 0x0) 367.074708ms ago: executing program 2 (id=252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200"], 0x879, 0x800) 179.819034ms ago: executing program 4 (id=253): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ec6893e7fb00003e2000000000000000000000000000200000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e52100"/17], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xfeffffff) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 164.145095ms ago: executing program 2 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syncfs(r1) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_delete(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) 72.347374ms ago: executing program 0 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x5}, 0x18) memfd_secret(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00f9ffffff05003600000000000c000500000000000000000008000200000000000000f31abe00a2db8f3ea9a06c017c795c500865b8", @ANYRES32, @ANYBLOB], 0x38}, 0x4, 0x700000000000000}, 0x0) 71.705124ms ago: executing program 3 (id=256): creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (fail_nth: 3) 68.900254ms ago: executing program 4 (id=257): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syncfs(r0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$FICLONE(r0, 0x40049409, r1) (async) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0) (async) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=258): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x2, 0x7f, 0x0, &(0x7f00000000c0)}) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0xf00}) tee(r3, r4, 0xed64, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) close(r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000002, 0x0, @perf_config_ext={0x0, 0x4}, 0x22c0, 0x0, 0x8, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x70, 0x0, 0x0) kernel console output (not intermixed with test programs): e [ 30.433976][ T3265] hsr_slave_1: entered promiscuous mode [ 30.439903][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.447479][ T3265] Cannot create hsr debugfs directory [ 30.460056][ T3277] team0: Port device team_slave_0 added [ 30.466493][ T3277] team0: Port device team_slave_1 added [ 30.494617][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.501603][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.527579][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.540704][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.547762][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.573708][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.585148][ T3269] team0: Port device team_slave_0 added [ 30.610283][ T3269] team0: Port device team_slave_1 added [ 30.621395][ T3277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.628537][ T3277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.654492][ T3277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.665803][ T3277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.672772][ T3277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.698733][ T3277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.735654][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.742623][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.768594][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.780240][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.787356][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.813505][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.845016][ T3266] hsr_slave_0: entered promiscuous mode [ 30.851040][ T3266] hsr_slave_1: entered promiscuous mode [ 30.856996][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.864553][ T3266] Cannot create hsr debugfs directory [ 30.884831][ T3277] hsr_slave_0: entered promiscuous mode [ 30.890945][ T3277] hsr_slave_1: entered promiscuous mode [ 30.896891][ T3277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.904440][ T3277] Cannot create hsr debugfs directory [ 30.941810][ T3269] hsr_slave_0: entered promiscuous mode [ 30.948063][ T3269] hsr_slave_1: entered promiscuous mode [ 30.953988][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.961683][ T3269] Cannot create hsr debugfs directory [ 31.028152][ T3264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.037116][ T3264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.062411][ T3264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.075680][ T3264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.122616][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.131282][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.146495][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.161204][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.182822][ T3277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.194678][ T3277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.203256][ T3277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.212921][ T3277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.256611][ T3266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.268963][ T3266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.278063][ T3266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.287166][ T3266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.336489][ T3269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.348830][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.361481][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.368727][ T3269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.377501][ T3269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.396283][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.403818][ T3269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.415074][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.422148][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.448217][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.455322][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.473815][ T3277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.485065][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.502110][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.509225][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.527483][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.534555][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.558250][ T3277] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.575539][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.591962][ T2282] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.599088][ T2282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.610635][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.617698][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.636171][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.660933][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.679267][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.689739][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.707126][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.714274][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.723195][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.730311][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.751771][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.769932][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.808680][ T2282] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.815916][ T2282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.833074][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.840266][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.855233][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.906220][ T3277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.933164][ T3264] veth0_vlan: entered promiscuous mode [ 31.976346][ T3264] veth1_vlan: entered promiscuous mode [ 31.989793][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.033470][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.047677][ T3265] veth0_vlan: entered promiscuous mode [ 32.063705][ T3264] veth0_macvtap: entered promiscuous mode [ 32.082203][ T3264] veth1_macvtap: entered promiscuous mode [ 32.098858][ T3265] veth1_vlan: entered promiscuous mode [ 32.114718][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.133688][ T3265] veth0_macvtap: entered promiscuous mode [ 32.143003][ T3277] veth0_vlan: entered promiscuous mode [ 32.157998][ T3277] veth1_vlan: entered promiscuous mode [ 32.165429][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.177175][ T3265] veth1_macvtap: entered promiscuous mode [ 32.188067][ T3264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.196921][ T3264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.205732][ T3264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214534][ T3264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.228220][ T3266] veth0_vlan: entered promiscuous mode [ 32.238799][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.249327][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.260386][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.275508][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.286100][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.296598][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.312707][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.321578][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330432][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.339265][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353455][ T3266] veth1_vlan: entered promiscuous mode [ 32.377268][ T3277] veth0_macvtap: entered promiscuous mode [ 32.390419][ T3264] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.411713][ T3266] veth0_macvtap: entered promiscuous mode [ 32.419028][ T3266] veth1_macvtap: entered promiscuous mode [ 32.428593][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.439149][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.448976][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.459425][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.469958][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.478415][ T3277] veth1_macvtap: entered promiscuous mode [ 32.491438][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.502083][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.511952][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.522495][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.532456][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.542977][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.553785][ T3277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.561671][ T3405] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 32.572048][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.582546][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.592470][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.603175][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.614933][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.627610][ T3266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629347][ T3407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 32.636446][ T3266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.653707][ T3266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.662533][ T3266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.679667][ T3269] veth0_vlan: entered promiscuous mode [ 32.692061][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.702599][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.712500][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.723020][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.732960][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.743675][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.758204][ T3277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.798206][ T3269] veth1_vlan: entered promiscuous mode [ 32.809172][ T3409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.819669][ T3409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.829818][ T3409] bond0 (unregistering): Released all slaves [ 32.843850][ T3277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.852791][ T3277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.861632][ T3277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.870374][ T3277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.892248][ T3269] veth0_macvtap: entered promiscuous mode [ 32.893356][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 32.893437][ T29] audit: type=1400 audit(1728960588.189:135): avc: denied { audit_write } for pid=3412 comm="syz.0.1" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.899694][ T3269] veth1_macvtap: entered promiscuous mode [ 32.904671][ T29] audit: type=1107 audit(1728960588.199:136): pid=3412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~E' [ 32.929739][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.954461][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.964322][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.974814][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.984718][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.995243][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.005088][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.015543][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.025917][ T29] audit: type=1400 audit(1728960588.329:137): avc: denied { create } for pid=3412 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.026412][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.054502][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.065042][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.074928][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.085413][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.095250][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.105700][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.115602][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.126172][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.136892][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.145537][ T3269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.154287][ T3269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.163044][ T3269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.171815][ T3269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245938][ T29] audit: type=1326 audit(1728960588.539:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c6bdff9 code=0x7ffc0000 [ 33.269177][ T29] audit: type=1326 audit(1728960588.539:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c6bdff9 code=0x7ffc0000 [ 33.292279][ T29] audit: type=1326 audit(1728960588.549:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea7c6bdff9 code=0x7ffc0000 [ 33.315373][ T29] audit: type=1326 audit(1728960588.549:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c6bdff9 code=0x7ffc0000 [ 33.338452][ T29] audit: type=1326 audit(1728960588.549:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c6bdff9 code=0x7ffc0000 [ 33.361604][ T29] audit: type=1400 audit(1728960588.549:143): avc: denied { open } for pid=3418 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.380521][ T29] audit: type=1400 audit(1728960588.549:144): avc: denied { kernel } for pid=3418 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.416776][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 33.527434][ T3430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.613595][ T3436] loop1: detected capacity change from 0 to 512 [ 33.656672][ T3436] ext4: Unknown parameter 'fsmagic' [ 33.699583][ T3436] loop1: detected capacity change from 0 to 512 [ 33.733254][ T3436] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.12: casefold flag without casefold feature [ 33.748941][ T3436] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 33.805468][ T3436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.967906][ T3436] loop1: detected capacity change from 512 to 64 [ 33.985139][ T3451] syz.1.12: attempt to access beyond end of device [ 33.985139][ T3451] loop1: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 33.998506][ T3451] Buffer I/O error on dev loop1, logical block 42, lost sync page write [ 34.025108][ T3451] EXT4-fs error (device loop1): ext4_splice_branch:472: inode #19: block 42: comm syz.1.12: IO error syncing itable block [ 34.048418][ T3451] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.12: Error while async write back metadata [ 34.057256][ T3459] loop2: detected capacity change from 0 to 128 [ 34.087353][ T3451] syz.1.12: attempt to access beyond end of device [ 34.087353][ T3451] loop1: rw=2051, sector=444, nr_sectors = 2 limit=64 [ 34.113020][ T3458] loop3: detected capacity change from 0 to 2048 [ 34.130408][ T3451] EXT4-fs (loop1): discard request in group:0 block:221 count:1 failed with -5 [ 34.157136][ T3451] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: IO failure [ 34.180225][ T3451] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 19: block 222:freeing already freed block (bit 221); block bitmap corrupt. [ 34.195055][ T3451] EXT4-fs (loop1): pa ffff8881047b9070: logic 0, phys. 193, len 32 [ 34.202977][ T3451] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 19, pa_free 18 [ 34.224495][ T3451] syz.1.12: attempt to access beyond end of device [ 34.224495][ T3451] loop1: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 34.237863][ T3451] Buffer I/O error on dev loop1, logical block 42, lost sync page write [ 34.262087][ T3451] EXT4-fs error (device loop1): ext4_free_data:978: inode #19: block 42: comm syz.1.12: IO error syncing itable block [ 34.278539][ T3458] Alternate GPT is invalid, using primary GPT. [ 34.284822][ T3458] loop3: p1 p2 p3 [ 34.329216][ T3451] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.12: Error while async write back metadata [ 34.371527][ T3451] syz.1.12: attempt to access beyond end of device [ 34.371527][ T3451] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 34.384934][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 34.396271][ T3451] Buffer I/O error on device loop1, logical block 255 [ 34.418809][ T3451] syz.1.12: attempt to access beyond end of device [ 34.418809][ T3451] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 34.432146][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 34.443495][ T3451] Buffer I/O error on device loop1, logical block 253 [ 34.450308][ T3451] Buffer I/O error on device loop1, logical block 254 [ 34.467205][ T3451] syz.1.12: attempt to access beyond end of device [ 34.467205][ T3451] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 34.480431][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 34.491752][ T3451] Buffer I/O error on device loop1, logical block 37 [ 34.498574][ T3451] Buffer I/O error on device loop1, logical block 38 [ 34.505269][ T3451] Buffer I/O error on device loop1, logical block 39 [ 34.512014][ T3451] Buffer I/O error on device loop1, logical block 40 [ 34.520864][ T3451] syz.1.12: attempt to access beyond end of device [ 34.520864][ T3451] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 34.534165][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 34.545558][ T3451] Buffer I/O error on device loop1, logical block 249 [ 34.552364][ T3451] Buffer I/O error on device loop1, logical block 250 [ 34.559136][ T3451] Buffer I/O error on device loop1, logical block 251 [ 34.567411][ T3451] syz.1.12: attempt to access beyond end of device [ 34.567411][ T3451] loop1: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 34.580754][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 34.593253][ T3451] syz.1.12: attempt to access beyond end of device [ 34.593253][ T3451] loop1: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 34.606472][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 43) [ 34.715100][ T3451] syz.1.12: attempt to access beyond end of device [ 34.715100][ T3451] loop1: rw=2049, sector=418, nr_sectors = 24 limit=64 [ 34.728458][ T3451] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 209) [ 34.739696][ T3467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21'. [ 34.772012][ T3277] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 34.804582][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.821192][ T3277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.832455][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.844499][ T3467] bond0 (unregistering): Released all slaves [ 34.870211][ T3475] netlink: 'syz.2.23': attribute type 4 has an invalid length. [ 35.118832][ T3481] loop0: detected capacity change from 0 to 512 [ 35.127245][ T3481] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.150136][ T3481] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.26: corrupted in-inode xattr: invalid ea_ino [ 35.165078][ T3481] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.26: couldn't read orphan inode 15 (err -117) [ 35.207733][ T3481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.603781][ T3496] loop2: detected capacity change from 0 to 512 [ 35.610714][ T3496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.623916][ T3496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.636993][ T3496] EXT4-fs (loop2): 1 orphan inode deleted [ 35.642788][ T3496] EXT4-fs (loop2): 1 truncate cleaned up [ 35.649487][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.895712][ T3505] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.31: iget: bad extra_isize 46 (inode size 256) [ 35.910609][ T3505] EXT4-fs error (device loop2): ext4_lookup:1813: inode #15: comm syz.2.31: iget: bad extra_isize 46 (inode size 256) [ 35.961497][ T3505] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 36.061444][ T2282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.259332][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 36.277735][ T3511] usb usb8: usbfs: process 3511 (syz.4.36) did not claim interface 0 before use [ 36.288952][ T3515] syz.3.37 (3515) used greatest stack depth: 10832 bytes left [ 36.318586][ T3519] usb usb8: usbfs: process 3519 (syz.3.38) did not claim interface 0 before use [ 36.393510][ T3530] loop3: detected capacity change from 0 to 128 [ 36.401078][ T3530] ======================================================= [ 36.401078][ T3530] WARNING: The mand mount option has been deprecated and [ 36.401078][ T3530] and is ignored by this kernel. Remove the mand [ 36.401078][ T3530] option from the mount to silence this warning. [ 36.401078][ T3530] ======================================================= [ 36.447562][ T3507] chnl_net:caif_netlink_parms(): no params data found [ 36.468234][ T3530] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.485406][ T3530] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.501990][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.564416][ T2282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.576085][ T3264] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.634505][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.642034][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.649534][ T3507] bridge_slave_0: entered allmulticast mode [ 36.656571][ T3507] bridge_slave_0: entered promiscuous mode [ 36.673754][ T2282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.686203][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.693310][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.700835][ T3507] bridge_slave_1: entered allmulticast mode [ 36.707525][ T3507] bridge_slave_1: entered promiscuous mode [ 36.725450][ T3546] syz.4.42 (3546) used greatest stack depth: 9440 bytes left [ 36.746263][ T2282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.772379][ T3507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.783579][ T3507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.806841][ T3507] team0: Port device team_slave_0 added [ 36.813562][ T3507] team0: Port device team_slave_1 added [ 36.855067][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.862049][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.888049][ T3507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.918694][ T3507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.925716][ T3507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.951777][ T3507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.014091][ T3507] hsr_slave_0: entered promiscuous mode [ 37.020758][ T3507] hsr_slave_1: entered promiscuous mode [ 37.027161][ T3507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.034787][ T3507] Cannot create hsr debugfs directory [ 37.052956][ T2282] bridge_slave_1: left allmulticast mode [ 37.058696][ T2282] bridge_slave_1: left promiscuous mode [ 37.064470][ T2282] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.072305][ T2282] bridge_slave_0: left allmulticast mode [ 37.078003][ T2282] bridge_slave_0: left promiscuous mode [ 37.083838][ T2282] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.189066][ T2282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.194571][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 37.210044][ T2282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.221107][ T2282] bond0 (unregistering): Released all slaves [ 37.286006][ T2282] hsr_slave_0: left promiscuous mode [ 37.291850][ T2282] hsr_slave_1: left promiscuous mode [ 37.298798][ T2282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.306295][ T2282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.315993][ T2282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.323593][ T2282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.333914][ T2282] veth1_macvtap: left promiscuous mode [ 37.339476][ T2282] veth0_macvtap: left promiscuous mode [ 37.345054][ T2282] veth1_vlan: left promiscuous mode [ 37.350388][ T2282] veth0_vlan: left promiscuous mode [ 37.487641][ T2282] team0 (unregistering): Port device team_slave_1 removed [ 37.504918][ T2282] team0 (unregistering): Port device team_slave_0 removed [ 37.908365][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 37.908384][ T29] audit: type=1107 audit(1728960593.209:588): pid=3601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~E' [ 37.914217][ T3507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.955244][ T3595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.52'. [ 37.971051][ T3507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.989154][ T3507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.033644][ T29] audit: type=1400 audit(1728960593.329:589): avc: denied { add_name } for pid=3597 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.125513][ T3507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.127706][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.208979][ T3623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 48.949647][ T3635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 49.000151][ T3507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.058461][ T3507] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.095095][ T29] audit: type=1400 audit(1728960604.379:590): avc: denied { mounton } for pid=3642 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.257502][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.264704][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.280721][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.287837][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.494713][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.540391][ T3507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.561198][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.604177][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 49.619872][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.686130][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.726294][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.733416][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.740698][ T3642] bridge_slave_0: entered allmulticast mode [ 49.747301][ T3642] bridge_slave_0: entered promiscuous mode [ 49.754306][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.761442][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.768744][ T3642] bridge_slave_1: entered allmulticast mode [ 49.775329][ T3642] bridge_slave_1: entered promiscuous mode [ 49.797263][ T3651] chnl_net:caif_netlink_parms(): no params data found [ 49.821388][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.832897][ T3645] chnl_net:caif_netlink_parms(): no params data found [ 49.853599][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.884632][ T3648] chnl_net:caif_netlink_parms(): no params data found [ 49.950162][ T3642] team0: Port device team_slave_0 added [ 49.959245][ T3642] team0: Port device team_slave_1 added [ 49.970582][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.984262][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.991363][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.998884][ T3651] bridge_slave_0: entered allmulticast mode [ 50.005837][ T3651] bridge_slave_0: entered promiscuous mode [ 50.012654][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.019894][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.027150][ T3651] bridge_slave_1: entered allmulticast mode [ 50.033694][ T3651] bridge_slave_1: entered promiscuous mode [ 50.048262][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.090749][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.097820][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.123879][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.139874][ T3507] veth0_vlan: entered promiscuous mode [ 50.145862][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.152969][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.162052][ T3645] bridge_slave_0: entered allmulticast mode [ 50.169503][ T3645] bridge_slave_0: entered promiscuous mode [ 50.181379][ T3651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.192540][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.199605][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.225601][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.241503][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.259813][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.266934][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.274066][ T3645] bridge_slave_1: entered allmulticast mode [ 50.280688][ T3645] bridge_slave_1: entered promiscuous mode [ 50.295657][ T3651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.316710][ T3507] veth1_vlan: entered promiscuous mode [ 50.330774][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.350535][ T3645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.380803][ T3645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.390093][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.397262][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.404648][ T3648] bridge_slave_0: entered allmulticast mode [ 50.411261][ T3648] bridge_slave_0: entered promiscuous mode [ 50.418440][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.425539][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.432730][ T3648] bridge_slave_1: entered allmulticast mode [ 50.439271][ T3648] bridge_slave_1: entered promiscuous mode [ 50.450837][ T3651] team0: Port device team_slave_0 added [ 50.457467][ T3651] team0: Port device team_slave_1 added [ 50.471285][ T3642] hsr_slave_0: entered promiscuous mode [ 50.477415][ T3642] hsr_slave_1: entered promiscuous mode [ 50.483333][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.491242][ T3642] Cannot create hsr debugfs directory [ 50.514364][ T3648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.525419][ T3648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.539848][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.546884][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.572990][ T3651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.590790][ T3645] team0: Port device team_slave_0 added [ 50.597492][ T3645] team0: Port device team_slave_1 added [ 50.614451][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.621616][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.647614][ T3651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.717867][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.725316][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.751301][ T3645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.762809][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.769878][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.795787][ T3645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.807820][ T3648] team0: Port device team_slave_0 added [ 50.821974][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.840457][ T3651] hsr_slave_0: entered promiscuous mode [ 50.846628][ T3651] hsr_slave_1: entered promiscuous mode [ 50.852566][ T3651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.860291][ T3651] Cannot create hsr debugfs directory [ 50.873262][ T3648] team0: Port device team_slave_1 added [ 50.888399][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.921718][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.928738][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.954828][ T3648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.968978][ T3507] veth0_macvtap: entered promiscuous mode [ 50.977219][ T3507] veth1_macvtap: entered promiscuous mode [ 51.004996][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.020027][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.027086][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.053155][ T3648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.100945][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.114349][ T3645] hsr_slave_0: entered promiscuous mode [ 51.120771][ T3645] hsr_slave_1: entered promiscuous mode [ 51.126907][ T3645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.134466][ T3645] Cannot create hsr debugfs directory [ 51.143910][ T3648] hsr_slave_0: entered promiscuous mode [ 51.150334][ T3648] hsr_slave_1: entered promiscuous mode [ 51.156347][ T3648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.163894][ T3648] Cannot create hsr debugfs directory [ 51.191360][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.201989][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.211827][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.222317][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.232143][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.242645][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.252543][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.262975][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.273765][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.302776][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.313322][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.323198][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.333636][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.343474][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.353925][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.363753][ T3507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.374238][ T3507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.387828][ T3507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.417781][ T3507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.426607][ T3507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.435502][ T3507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.444224][ T3507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.498050][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.539798][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.618705][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.753050][ T3785] loop1: detected capacity change from 0 to 2048 [ 51.778992][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.791135][ T3785] Alternate GPT is invalid, using primary GPT. [ 51.797703][ T3785] loop1: p1 p2 p3 [ 51.861382][ T11] bridge_slave_1: left allmulticast mode [ 51.867177][ T11] bridge_slave_1: left promiscuous mode [ 51.872896][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.882910][ T11] bridge_slave_0: left allmulticast mode [ 51.888712][ T11] bridge_slave_0: left promiscuous mode [ 51.894440][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.904434][ T11] bridge_slave_1: left allmulticast mode [ 51.910138][ T11] bridge_slave_1: left promiscuous mode [ 51.915884][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.925947][ T11] bridge_slave_0: left allmulticast mode [ 51.931618][ T11] bridge_slave_0: left promiscuous mode [ 51.937419][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.947601][ T11] bridge_slave_1: left allmulticast mode [ 51.953255][ T11] bridge_slave_1: left promiscuous mode [ 51.958964][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.966972][ T11] bridge_slave_0: left allmulticast mode [ 51.972697][ T11] bridge_slave_0: left promiscuous mode [ 51.978362][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.986587][ T11] bridge_slave_1: left allmulticast mode [ 51.992240][ T11] bridge_slave_1: left promiscuous mode [ 51.997904][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.005585][ T11] bridge_slave_0: left allmulticast mode [ 52.011260][ T11] bridge_slave_0: left promiscuous mode [ 52.017054][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.397394][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.407875][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.420099][ T11] bond0 (unregistering): Released all slaves [ 52.429136][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.440464][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.451937][ T11] bond0 (unregistering): Released all slaves [ 52.516705][ T11] hsr_slave_0: left promiscuous mode [ 52.523783][ T11] hsr_slave_1: left promiscuous mode [ 52.529823][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.537546][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.558536][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.566112][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.575622][ T3830] FAULT_INJECTION: forcing a failure. [ 52.575622][ T3830] name failslab, interval 1, probability 0, space 0, times 1 [ 52.588297][ T3830] CPU: 1 UID: 0 PID: 3830 Comm: syz.1.63 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 52.595165][ T29] audit: type=1326 audit(1728960607.869:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.598813][ T3830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.622038][ T29] audit: type=1326 audit(1728960607.869:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.632077][ T3830] Call Trace: [ 52.632090][ T3830] [ 52.632100][ T3830] dump_stack_lvl+0xf2/0x150 [ 52.632130][ T3830] dump_stack+0x15/0x20 [ 52.655245][ T29] audit: type=1326 audit(1728960607.869:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.658479][ T3830] should_fail_ex+0x223/0x230 [ 52.661409][ T29] audit: type=1326 audit(1728960607.869:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.665982][ T3830] ? __alloc_skb+0x10b/0x310 [ 52.666019][ T3830] should_failslab+0x8f/0xb0 [ 52.670156][ T29] audit: type=1326 audit(1728960607.869:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.693306][ T3830] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 52.693415][ T3830] __alloc_skb+0x10b/0x310 [ 52.698098][ T29] audit: type=1326 audit(1728960607.869:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.721153][ T3830] audit_log_start+0x368/0x6b0 [ 52.725804][ T29] audit: type=1326 audit(1728960607.869:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.730349][ T3830] audit_seccomp+0x4b/0x130 [ 52.753442][ T29] audit: type=1326 audit(1728960607.869:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.759195][ T3830] __seccomp_filter+0x6fa/0x1180 [ 52.759267][ T3830] ? proc_fail_nth_write+0x12a/0x150 [ 52.763708][ T29] audit: type=1326 audit(1728960607.869:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 52.786772][ T3830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.786816][ T3830] ? vfs_write+0x580/0x910 [ 52.886029][ T3830] ? __fget_files+0x1d4/0x210 [ 52.890733][ T3830] __secure_computing+0x9f/0x1c0 [ 52.895691][ T3830] syscall_trace_enter+0xd1/0x1f0 [ 52.900809][ T3830] ? fpregs_assert_state_consistent+0x83/0xa0 [ 52.906957][ T3830] do_syscall_64+0xaa/0x1c0 [ 52.911462][ T3830] ? clear_bhb_loop+0x55/0xb0 [ 52.916150][ T3830] ? clear_bhb_loop+0x55/0xb0 [ 52.920855][ T3830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.926769][ T3830] RIP: 0033:0x7f18849cdff9 [ 52.931231][ T3830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.950918][ T3830] RSP: 002b:00007f1883641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 52.959418][ T3830] RAX: ffffffffffffffda RBX: 00007f1884b85f80 RCX: 00007f18849cdff9 [ 52.967391][ T3830] RDX: 0000000000000000 RSI: 00000000000003a9 RDI: 0000000000000000 [ 52.975371][ T3830] RBP: 00007f1883641090 R08: 0000000000000000 R09: 0000000000000000 [ 52.983500][ T3830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.991472][ T3830] R13: 0000000000000000 R14: 00007f1884b85f80 R15: 00007ffc931b5818 [ 52.999493][ T3830] [ 53.007876][ T11] hsr_slave_0: left promiscuous mode [ 53.014314][ T11] hsr_slave_1: left promiscuous mode [ 53.026476][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.033930][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.042234][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.049738][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.059123][ T11] hsr_slave_0: left promiscuous mode [ 53.065041][ T11] hsr_slave_1: left promiscuous mode [ 53.070787][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.071894][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 53.078268][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.094750][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.102315][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.113641][ T11] hsr_slave_0: left promiscuous mode [ 53.124059][ T11] hsr_slave_1: left promiscuous mode [ 53.130089][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.137751][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.145587][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.152994][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.165942][ T11] veth1_macvtap: left promiscuous mode [ 53.171442][ T11] veth0_macvtap: left promiscuous mode [ 53.177065][ T11] veth1_vlan: left promiscuous mode [ 53.182400][ T11] veth0_vlan: left promiscuous mode [ 53.188437][ T11] veth1_macvtap: left promiscuous mode [ 53.193980][ T11] veth0_macvtap: left promiscuous mode [ 53.199558][ T11] veth1_vlan: left promiscuous mode [ 53.204917][ T11] veth0_vlan: left promiscuous mode [ 53.210690][ T11] veth1_macvtap: left promiscuous mode [ 53.216337][ T11] veth0_macvtap: left promiscuous mode [ 53.221850][ T11] veth1_vlan: left promiscuous mode [ 53.227113][ T11] veth0_vlan: left promiscuous mode [ 53.235103][ T11] veth1_macvtap: left promiscuous mode [ 53.240659][ T11] veth0_macvtap: left promiscuous mode [ 53.246228][ T11] veth1_vlan: left promiscuous mode [ 53.251525][ T11] veth0_vlan: left promiscuous mode [ 53.466953][ T11] team0 (unregistering): Port device team_slave_1 removed [ 53.476994][ T11] team0 (unregistering): Port device team_slave_0 removed [ 53.539621][ T11] team0 (unregistering): Port device team_slave_1 removed [ 53.549750][ T11] team0 (unregistering): Port device team_slave_0 removed [ 53.614111][ T11] team0 (unregistering): Port device team_slave_1 removed [ 53.624448][ T11] team0 (unregistering): Port device team_slave_0 removed [ 53.688560][ T11] team0 (unregistering): Port device team_slave_1 removed [ 53.698600][ T11] team0 (unregistering): Port device team_slave_0 removed [ 53.987604][ T3645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.000080][ T3645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.016682][ T3645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.025736][ T3645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.064357][ T3645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.089351][ T3645] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.100074][ T2282] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.107210][ T2282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.136105][ T3645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.146559][ T3645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.168610][ T2282] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.175717][ T2282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.260910][ T3645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.351983][ T3645] veth0_vlan: entered promiscuous mode [ 54.361354][ T3645] veth1_vlan: entered promiscuous mode [ 54.376914][ T3645] veth0_macvtap: entered promiscuous mode [ 54.384658][ T3645] veth1_macvtap: entered promiscuous mode [ 54.398402][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.408968][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.424645][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.434170][ T3645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.444676][ T3645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.455679][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.477766][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 54.477782][ T29] audit: type=1326 audit(1728960609.779:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.479592][ T3645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.484241][ T29] audit: type=1326 audit(1728960609.779:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.507204][ T3645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.547905][ T3645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.556687][ T3645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.567089][ T29] audit: type=1326 audit(1728960609.849:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.590576][ T29] audit: type=1326 audit(1728960609.849:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.613782][ T29] audit: type=1326 audit(1728960609.849:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.636883][ T29] audit: type=1326 audit(1728960609.849:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.660180][ T29] audit: type=1326 audit(1728960609.849:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.683354][ T29] audit: type=1326 audit(1728960609.849:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.706849][ T29] audit: type=1326 audit(1728960609.859:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.730315][ T29] audit: type=1326 audit(1728960609.859:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18849cdff9 code=0x7ffc0000 [ 54.848010][ T3941] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 54.866671][ T3648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.874821][ T3943] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.888764][ T3642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.899521][ T3642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.908888][ T3648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.919784][ T3648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.929337][ T3642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.938134][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 54.953366][ T3642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.976730][ T3648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.987340][ T3651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.008374][ T3651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.029347][ T3651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.047760][ T3651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.102366][ T3648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.119895][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.153587][ T3648] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.166466][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.184575][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.191655][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.208939][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.216274][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.257813][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.265075][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.282039][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.289149][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.347339][ T3651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.383891][ T3651] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.399380][ T2282] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.406557][ T2282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.426202][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.433387][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.454679][ T3648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.489838][ T3651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.500426][ T3651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.518065][ T3968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'. [ 55.532648][ T3968] Zero length message leads to an empty skb [ 55.543435][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 55.554033][ T3968] FAULT_INJECTION: forcing a failure. [ 55.554033][ T3968] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.567733][ T3968] CPU: 1 UID: 0 PID: 3968 Comm: syz.2.77 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 55.578337][ T3968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.588475][ T3968] Call Trace: [ 55.591768][ T3968] [ 55.594707][ T3968] dump_stack_lvl+0xf2/0x150 [ 55.599389][ T3968] dump_stack+0x15/0x20 [ 55.603560][ T3968] should_fail_ex+0x223/0x230 [ 55.608260][ T3968] should_fail+0xb/0x10 [ 55.612554][ T3968] should_fail_usercopy+0x1a/0x20 [ 55.617606][ T3968] _copy_from_user+0x1e/0xd0 [ 55.622238][ T3968] kstrtouint_from_user+0x76/0xe0 [ 55.627288][ T3968] ? 0xffffffff81000000 [ 55.631508][ T3968] proc_fail_nth_write+0x4f/0x150 [ 55.636558][ T3968] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 55.642257][ T3968] vfs_write+0x26c/0x910 [ 55.646547][ T3968] ? __fget_files+0x1d4/0x210 [ 55.651252][ T3968] ksys_write+0xeb/0x1b0 [ 55.655529][ T3968] __x64_sys_write+0x42/0x50 [ 55.660191][ T3968] x64_sys_call+0x27dd/0x2d60 [ 55.664982][ T3968] do_syscall_64+0xc9/0x1c0 [ 55.669561][ T3968] ? clear_bhb_loop+0x55/0xb0 [ 55.674484][ T3968] ? clear_bhb_loop+0x55/0xb0 [ 55.679195][ T3968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.685122][ T3968] RIP: 0033:0x7f2b4009cadf [ 55.689543][ T3968] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 55.709159][ T3968] RSP: 002b:00007f2b3ed17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 55.717627][ T3968] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b4009cadf [ 55.725604][ T3968] RDX: 0000000000000001 RSI: 00007f2b3ed170a0 RDI: 0000000000000004 [ 55.733587][ T3968] RBP: 00007f2b3ed17090 R08: 0000000000000000 R09: 0000000000000000 [ 55.741603][ T3968] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 55.749668][ T3968] R13: 0000000000000000 R14: 00007f2b40255f80 R15: 00007ffd46ef7208 [ 55.757652][ T3968] [ 55.785245][ T3967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.801594][ T3967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.812732][ T3967] bond0 (unregistering): Released all slaves [ 55.827001][ T3978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.844073][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.860382][ T3651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.903106][ T3648] veth0_vlan: entered promiscuous mode [ 55.939204][ T3648] veth1_vlan: entered promiscuous mode [ 55.960099][ T3648] veth0_macvtap: entered promiscuous mode [ 55.979129][ T3648] veth1_macvtap: entered promiscuous mode [ 55.993166][ T3989] loop1: detected capacity change from 0 to 128 [ 56.017470][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.028024][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.037896][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.048357][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.068215][ T3989] syz.1.80: attempt to access beyond end of device [ 56.068215][ T3989] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 56.072065][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.091194][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.101794][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.111715][ T3648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.122227][ T3648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.134790][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.149746][ T3648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.158524][ T3648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.167330][ T3648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.176150][ T3648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.248292][ T3642] veth0_vlan: entered promiscuous mode [ 56.265395][ T4003] loop1: detected capacity change from 0 to 164 [ 56.276185][ T3642] veth1_vlan: entered promiscuous mode [ 56.310952][ T4003] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 56.311952][ T3642] veth0_macvtap: entered promiscuous mode [ 56.333801][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 56.357239][ T4003] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 56.365403][ T3651] veth0_vlan: entered promiscuous mode [ 56.369761][ T3642] veth1_macvtap: entered promiscuous mode [ 56.389094][ T3651] veth1_vlan: entered promiscuous mode [ 56.402257][ T4014] FAULT_INJECTION: forcing a failure. [ 56.402257][ T4014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.411765][ T3651] veth0_macvtap: entered promiscuous mode [ 56.415601][ T4014] CPU: 1 UID: 0 PID: 4014 Comm: syz.2.83 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 56.431706][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.441773][ T4014] Call Trace: [ 56.445094][ T4014] [ 56.448055][ T4014] dump_stack_lvl+0xf2/0x150 [ 56.452707][ T4014] dump_stack+0x15/0x20 [ 56.456886][ T4014] should_fail_ex+0x223/0x230 [ 56.461678][ T4014] should_fail+0xb/0x10 [ 56.465858][ T4014] should_fail_usercopy+0x1a/0x20 [ 56.470972][ T4014] _copy_from_user+0x1e/0xd0 [ 56.475574][ T4014] copy_msghdr_from_user+0x54/0x2a0 [ 56.480790][ T4014] __sys_sendmsg+0x171/0x270 [ 56.485503][ T4014] __x64_sys_sendmsg+0x46/0x50 [ 56.490358][ T4014] x64_sys_call+0x2689/0x2d60 [ 56.495126][ T4014] do_syscall_64+0xc9/0x1c0 [ 56.499636][ T4014] ? clear_bhb_loop+0x55/0xb0 [ 56.504331][ T4014] ? clear_bhb_loop+0x55/0xb0 [ 56.509102][ T4014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.515071][ T4014] RIP: 0033:0x7f2b4009dff9 [ 56.519488][ T4014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.539104][ T4014] RSP: 002b:00007f2b3ed17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.547525][ T4014] RAX: ffffffffffffffda RBX: 00007f2b40255f80 RCX: 00007f2b4009dff9 [ 56.555505][ T4014] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 56.563481][ T4014] RBP: 00007f2b3ed17090 R08: 0000000000000000 R09: 0000000000000000 [ 56.571457][ T4014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.579456][ T4014] R13: 0000000000000000 R14: 00007f2b40255f80 R15: 00007ffd46ef7208 [ 56.587506][ T4014] [ 56.594505][ T3651] veth1_macvtap: entered promiscuous mode [ 56.604712][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.615180][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.625024][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.635490][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.645559][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.656331][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.669237][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.680756][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.691247][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.701138][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.711583][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.721501][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.732041][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.741915][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.752452][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.764678][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.776698][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.787292][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.797196][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.807665][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.817594][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.828045][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.839935][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.856407][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.866920][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.876851][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.887331][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.897242][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.907750][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.917598][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.925434][ T4019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 56.928142][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.947821][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.957267][ T3651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.966111][ T3651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.974894][ T3651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.984633][ T3651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.005615][ T4019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.017333][ T4019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.028385][ T4019] bond0 (unregistering): Released all slaves [ 57.040068][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.049018][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057847][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.066599][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.141588][ T4029] netlink: 3831 bytes leftover after parsing attributes in process `syz.1.88'. [ 57.150648][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 57.159584][ T4029] netlink: 'syz.1.88': attribute type 14 has an invalid length. [ 57.167485][ T4029] netlink: 'syz.1.88': attribute type 11 has an invalid length. [ 57.181810][ T4029] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.190598][ T4029] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.199442][ T4029] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.208353][ T4029] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.217295][ T4029] vxlan0: entered promiscuous mode [ 57.224127][ T4035] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 57.234571][ T4035] loop0: detected capacity change from 0 to 164 [ 57.243464][ T4035] Unable to read rock-ridge attributes [ 57.295930][ T4041] capability: warning: `syz.2.90' uses deprecated v2 capabilities in a way that may be insecure [ 57.327604][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 57.336495][ T4045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 57.451112][ T4052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.92'. [ 57.559034][ T4055] loop0: detected capacity change from 0 to 2048 [ 57.606266][ T4055] Alternate GPT is invalid, using primary GPT. [ 57.612531][ T4055] loop0: p1 p2 p3 [ 57.951214][ T4058] loop1: detected capacity change from 0 to 512 [ 57.978623][ T4058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.991984][ T4058] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.487873][ T4093] loop4: detected capacity change from 0 to 512 [ 59.529317][ T4093] EXT4-fs: Ignoring removed i_version option [ 59.541405][ T4095] loop3: detected capacity change from 0 to 128 [ 59.580269][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 59.580287][ T29] audit: type=1400 audit(1728960614.879:947): avc: denied { create } for pid=4096 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.622705][ T4093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 59.648283][ T4095] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.661455][ T4093] System zones: 1-12 [ 59.661839][ T4095] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.712940][ T29] audit: type=1400 audit(1728960614.879:948): avc: denied { create } for pid=4096 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.732459][ T29] audit: type=1400 audit(1728960614.889:949): avc: denied { create } for pid=4096 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.751891][ T29] audit: type=1400 audit(1728960614.889:950): avc: denied { read } for pid=4096 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.773645][ T4093] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.106: bg 0: block 131: padding at end of block bitmap is not set [ 59.788424][ T3507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.801702][ T29] audit: type=1400 audit(1728960615.099:951): avc: denied { link } for pid=4094 comm="syz.3.107" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.846467][ T29] audit: type=1400 audit(1728960615.149:952): avc: denied { remove_name } for pid=4094 comm="syz.3.107" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.890283][ T29] audit: type=1400 audit(1728960615.149:953): avc: denied { rename } for pid=4094 comm="syz.3.107" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.920609][ T4093] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.947759][ T3648] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.976830][ T4093] EXT4-fs (loop4): 1 truncate cleaned up [ 59.997701][ T29] audit: type=1107 audit(1728960615.259:954): pid=4102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='~E' [ 60.000040][ T4093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.024168][ T29] audit: type=1326 audit(1728960615.299:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700c1dff9 code=0x7ffc0000 [ 60.047813][ T29] audit: type=1326 audit(1728960615.299:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700c1dff9 code=0x7ffc0000 [ 60.145677][ T4115] __nla_validate_parse: 2 callbacks suppressed [ 60.145692][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 60.246320][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.289817][ T4113] loop3: detected capacity change from 0 to 2048 [ 60.306419][ T4113] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.347047][ T4113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.366038][ T4113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.111: bg 0: block 234: padding at end of block bitmap is not set [ 60.390051][ T4122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 60.400775][ T4113] EXT4-fs (loop3): Remounting filesystem read-only [ 60.412372][ T4122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.424834][ T4122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.436857][ T4122] bond0 (unregistering): Released all slaves [ 60.444588][ T4113] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 60.595842][ T4128] usb usb8: usbfs: process 4128 (syz.2.116) did not claim interface 0 before use [ 60.611589][ T4130] loop0: detected capacity change from 0 to 512 [ 60.620849][ T4130] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.627845][ T4132] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.629078][ T4130] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.657686][ T4130] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.117: corrupted in-inode xattr: e_value out of bounds [ 60.671925][ T4130] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.117: couldn't read orphan inode 15 (err -117) [ 60.686741][ T4130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.770507][ T3642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.808100][ T4147] loop4: detected capacity change from 0 to 512 [ 60.814833][ T4147] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.821651][ T4147] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.834561][ T4147] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.120: corrupted in-inode xattr: e_value out of bounds [ 60.849396][ T4144] syz.0.119[4144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.849469][ T4144] syz.0.119[4144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.862692][ T4147] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.120: couldn't read orphan inode 15 (err -117) [ 60.887529][ T4147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.903063][ T4147] FAULT_INJECTION: forcing a failure. [ 60.903063][ T4147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.909341][ T4152] loop2: detected capacity change from 0 to 512 [ 60.916179][ T4147] CPU: 0 UID: 0 PID: 4147 Comm: syz.4.120 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 60.916210][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.916225][ T4147] Call Trace: [ 60.946471][ T4147] [ 60.949457][ T4147] dump_stack_lvl+0xf2/0x150 [ 60.954062][ T4147] dump_stack+0x15/0x20 [ 60.958263][ T4147] should_fail_ex+0x223/0x230 [ 60.962967][ T4147] should_fail+0xb/0x10 [ 60.967173][ T4147] should_fail_usercopy+0x1a/0x20 [ 60.972247][ T4147] _copy_from_user+0x1e/0xd0 [ 60.976901][ T4147] vmemdup_user+0x12e/0x1b0 [ 60.981454][ T4147] path_setxattr+0x134/0x360 [ 60.986207][ T4147] ? get_pid_task+0x8e/0xc0 [ 60.990800][ T4147] __x64_sys_setxattr+0x6d/0x80 [ 60.995784][ T4147] x64_sys_call+0x2927/0x2d60 [ 61.000492][ T4147] do_syscall_64+0xc9/0x1c0 [ 61.005007][ T4147] ? clear_bhb_loop+0x55/0xb0 [ 61.009794][ T4147] ? clear_bhb_loop+0x55/0xb0 [ 61.014502][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.020428][ T4147] RIP: 0033:0x7f108d69dff9 [ 61.024853][ T4147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.044561][ T4147] RSP: 002b:00007f108c311038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 61.053097][ T4147] RAX: ffffffffffffffda RBX: 00007f108d855f80 RCX: 00007f108d69dff9 [ 61.061143][ T4147] RDX: 00000000200001c0 RSI: 0000000020000100 RDI: 0000000020000180 [ 61.069124][ T4147] RBP: 00007f108c311090 R08: 0000000000000000 R09: 0000000000000000 [ 61.077104][ T4147] R10: 0000000000000386 R11: 0000000000000246 R12: 0000000000000001 [ 61.085161][ T4147] R13: 0000000000000000 R14: 00007f108d855f80 R15: 00007fff12a18bf8 [ 61.093182][ T4147] [ 61.123686][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.154766][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.165642][ T4152] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.167843][ T4159] 9pnet_fd: Insufficient options for proto=fd [ 61.184759][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.294072][ T4174] FAULT_INJECTION: forcing a failure. [ 61.294072][ T4174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.307437][ T4174] CPU: 0 UID: 0 PID: 4174 Comm: syz.4.130 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 61.318166][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.328250][ T4174] Call Trace: [ 61.331543][ T4174] [ 61.334485][ T4174] dump_stack_lvl+0xf2/0x150 [ 61.339093][ T4174] dump_stack+0x15/0x20 [ 61.343265][ T4174] should_fail_ex+0x223/0x230 [ 61.347966][ T4174] should_fail+0xb/0x10 [ 61.352235][ T4174] should_fail_usercopy+0x1a/0x20 [ 61.357361][ T4174] _copy_from_user+0x1e/0xd0 [ 61.362024][ T4174] perf_copy_attr+0x146/0x5b0 [ 61.366769][ T4174] ? 0xffffffff81000000 [ 61.371008][ T4174] ? __rcu_read_unlock+0x4e/0x70 [ 61.375971][ T4174] __se_sys_perf_event_open+0x6d/0x21f0 [ 61.381593][ T4174] ? proc_fail_nth_write+0x12a/0x150 [ 61.386935][ T4174] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.392606][ T4174] ? vfs_write+0x580/0x910 [ 61.397174][ T4174] ? __fget_files+0x1d4/0x210 [ 61.401885][ T4174] __x64_sys_perf_event_open+0x67/0x80 [ 61.407459][ T4174] x64_sys_call+0x18d7/0x2d60 [ 61.412164][ T4174] do_syscall_64+0xc9/0x1c0 [ 61.416715][ T4174] ? clear_bhb_loop+0x55/0xb0 [ 61.421460][ T4174] ? clear_bhb_loop+0x55/0xb0 [ 61.426427][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.432438][ T4174] RIP: 0033:0x7f108d69dff9 [ 61.436863][ T4174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.456487][ T4174] RSP: 002b:00007f108c311038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 61.464935][ T4174] RAX: ffffffffffffffda RBX: 00007f108d855f80 RCX: 00007f108d69dff9 [ 61.472921][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 61.480976][ T4174] RBP: 00007f108c311090 R08: 0000000000000002 R09: 0000000000000000 [ 61.488985][ T4174] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 61.496991][ T4174] R13: 0000000000000000 R14: 00007f108d855f80 R15: 00007fff12a18bf8 [ 61.505056][ T4174] [ 61.580992][ T4172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.129'. [ 61.599288][ T4179] usb usb8: usbfs: process 4179 (syz.4.132) did not claim interface 0 before use [ 61.664174][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 61.764575][ T4194] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 61.830728][ T4199] loop4: detected capacity change from 0 to 128 [ 61.847018][ T4203] loop3: detected capacity change from 0 to 512 [ 61.854672][ T4199] FAULT_INJECTION: forcing a failure. [ 61.854672][ T4199] name failslab, interval 1, probability 0, space 0, times 0 [ 61.867603][ T4199] CPU: 1 UID: 0 PID: 4199 Comm: +}[@ Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 61.877931][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.888009][ T4199] Call Trace: [ 61.891301][ T4199] [ 61.894253][ T4199] dump_stack_lvl+0xf2/0x150 [ 61.898921][ T4199] dump_stack+0x15/0x20 [ 61.903106][ T4199] should_fail_ex+0x223/0x230 [ 61.907834][ T4199] ? tty_open+0x80/0xb00 [ 61.912105][ T4199] should_failslab+0x8f/0xb0 [ 61.916808][ T4199] __kmalloc_cache_noprof+0x4b/0x2a0 [ 61.922248][ T4199] tty_open+0x80/0xb00 [ 61.926342][ T4199] ? __pfx_exact_match+0x10/0x10 [ 61.931320][ T4199] chrdev_open+0x2f9/0x370 [ 61.935783][ T4199] ? __pfx_chrdev_open+0x10/0x10 [ 61.940764][ T4199] do_dentry_open+0x621/0xa20 [ 61.945527][ T4199] vfs_open+0x38/0x1f0 [ 61.949691][ T4199] path_openat+0x1ac2/0x1fa0 [ 61.954564][ T4199] ? _parse_integer+0x27/0x30 [ 61.959279][ T4199] do_filp_open+0xf7/0x200 [ 61.963731][ T4199] do_sys_openat2+0xab/0x120 [ 61.968381][ T4199] __x64_sys_openat+0xf3/0x120 [ 61.973176][ T4199] x64_sys_call+0x1025/0x2d60 [ 61.977969][ T4199] do_syscall_64+0xc9/0x1c0 [ 61.982534][ T4199] ? clear_bhb_loop+0x55/0xb0 [ 61.987282][ T4199] ? clear_bhb_loop+0x55/0xb0 [ 61.992016][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.997948][ T4199] RIP: 0033:0x7f108d69dff9 [ 62.002381][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.022373][ T4199] RSP: 002b:00007f108c311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.030851][ T4199] RAX: ffffffffffffffda RBX: 00007f108d855f80 RCX: 00007f108d69dff9 [ 62.038890][ T4199] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 62.046895][ T4199] RBP: 00007f108c311090 R08: 0000000000000000 R09: 0000000000000000 [ 62.054885][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.062933][ T4199] R13: 0000000000000000 R14: 00007f108d855f80 R15: 00007fff12a18bf8 [ 62.070986][ T4199] [ 62.084072][ T4203] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.139: corrupted in-inode xattr: invalid ea_ino [ 62.105641][ T4203] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.139: couldn't read orphan inode 15 (err -117) [ 62.131611][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.163953][ T4203] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.139: invalid indirect mapped block 234881024 (level 0) [ 62.209092][ T4211] loop4: detected capacity change from 0 to 2048 [ 62.216666][ T3645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.222698][ T4203] FAULT_INJECTION: forcing a failure. [ 62.222698][ T4203] name failslab, interval 1, probability 0, space 0, times 0 [ 62.238416][ T4203] CPU: 1 UID: 0 PID: 4203 Comm: syz.3.139 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 62.249099][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.259190][ T4203] Call Trace: [ 62.262501][ T4203] [ 62.265443][ T4203] dump_stack_lvl+0xf2/0x150 [ 62.270062][ T4203] dump_stack+0x15/0x20 [ 62.274358][ T4203] should_fail_ex+0x223/0x230 [ 62.279101][ T4203] ? mb_cache_entry_create+0xf1/0x5a0 [ 62.284648][ T4203] should_failslab+0x8f/0xb0 [ 62.289290][ T4203] kmem_cache_alloc_noprof+0x4c/0x290 [ 62.294686][ T4203] mb_cache_entry_create+0xf1/0x5a0 [ 62.299980][ T4203] ext4_listxattr+0x593/0x880 [ 62.304678][ T4203] ? __pfx_ext4_listxattr+0x10/0x10 [ 62.310011][ T4203] listxattr+0xcd/0x250 [ 62.314250][ T4203] __x64_sys_listxattr+0xa2/0x130 [ 62.319370][ T4203] x64_sys_call+0x1fbc/0x2d60 [ 62.324104][ T4203] do_syscall_64+0xc9/0x1c0 [ 62.328782][ T4203] ? clear_bhb_loop+0x55/0xb0 [ 62.333717][ T4203] ? clear_bhb_loop+0x55/0xb0 [ 62.338419][ T4203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.344337][ T4203] RIP: 0033:0x7f4700c1dff9 [ 62.348771][ T4203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.368489][ T4203] RSP: 002b:00007f46ff891038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 62.377326][ T4203] RAX: ffffffffffffffda RBX: 00007f4700dd5f80 RCX: 00007f4700c1dff9 [ 62.385401][ T4203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 62.393398][ T4203] RBP: 00007f46ff891090 R08: 0000000000000000 R09: 0000000000000000 [ 62.401414][ T4203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.409437][ T4203] R13: 0000000000000000 R14: 00007f4700dd5f80 R15: 00007ffd3f8a82b8 [ 62.417490][ T4203] [ 62.436767][ T4211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.456120][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.479114][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.514271][ T4228] netlink: 'syz.4.148': attribute type 4 has an invalid length. [ 62.524028][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.534433][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.543114][ T4225] usb usb8: usbfs: process 4225 (syz.0.145) did not claim interface 0 before use [ 62.661126][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.685838][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.699178][ T4242] bond0 (unregistering): Released all slaves [ 62.718663][ T4248] loop4: detected capacity change from 0 to 512 [ 62.757773][ T4248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.818549][ T4248] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.883906][ T4262] loop0: detected capacity change from 0 to 512 [ 62.912456][ T4262] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.157: corrupted in-inode xattr: invalid ea_ino [ 62.935168][ T4262] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.157: couldn't read orphan inode 15 (err -117) [ 62.962682][ T4262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.990738][ T4262] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.157: invalid indirect mapped block 234881024 (level 0) [ 63.015793][ T3642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.049910][ T4266] FAULT_INJECTION: forcing a failure. [ 63.049910][ T4266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.063113][ T4266] CPU: 1 UID: 0 PID: 4266 Comm: syz.0.158 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 63.073817][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.083936][ T4266] Call Trace: [ 63.087236][ T4266] [ 63.090184][ T4266] dump_stack_lvl+0xf2/0x150 [ 63.094900][ T4266] dump_stack+0x15/0x20 [ 63.099079][ T4266] should_fail_ex+0x223/0x230 [ 63.103947][ T4266] should_fail+0xb/0x10 [ 63.108194][ T4266] should_fail_usercopy+0x1a/0x20 [ 63.113353][ T4266] _copy_from_user+0x1e/0xd0 [ 63.118011][ T4266] __se_sys_memfd_create+0x26b/0x5c0 [ 63.123381][ T4266] __x64_sys_memfd_create+0x31/0x40 [ 63.128625][ T4266] x64_sys_call+0x2891/0x2d60 [ 63.133418][ T4266] do_syscall_64+0xc9/0x1c0 [ 63.137988][ T4266] ? clear_bhb_loop+0x55/0xb0 [ 63.142815][ T4266] ? clear_bhb_loop+0x55/0xb0 [ 63.147537][ T4266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.153530][ T4266] RIP: 0033:0x7ff62fd6dff9 [ 63.158047][ T4266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.177929][ T4266] RSP: 002b:00007ff62e9e6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 63.186389][ T4266] RAX: ffffffffffffffda RBX: 0000000000000601 RCX: 00007ff62fd6dff9 [ 63.194397][ T4266] RDX: 00007ff62e9e6dec RSI: 0000000000000000 RDI: 00007ff62fde0b02 [ 63.202397][ T4266] RBP: 0000000020000000 R08: 00007ff62e9e6b07 R09: 0000000000000000 [ 63.210387][ T4266] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 63.218372][ T4266] R13: 00007ff62e9e6dec R14: 00007ff62e9e6df0 R15: 00007ffc568537a8 [ 63.226542][ T4266] [ 63.264072][ T4269] loop3: detected capacity change from 0 to 2048 [ 63.326811][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.363947][ T4271] netlink: 'syz.0.160': attribute type 4 has an invalid length. [ 63.388055][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.458862][ T4280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 63.480765][ T4280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 63.505764][ T4282] usb usb8: usbfs: process 4282 (syz.3.164) did not claim interface 0 before use [ 63.602744][ T4288] loop0: detected capacity change from 0 to 2048 [ 63.631678][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.676255][ T4288] loop0: p2 < > p4 [ 63.680694][ T4288] loop0: p4 size 8192 extends beyond EOD, truncated [ 63.748346][ T4294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.166'. [ 63.759657][ T4300] FAULT_INJECTION: forcing a failure. [ 63.759657][ T4300] name failslab, interval 1, probability 0, space 0, times 0 [ 63.772355][ T4300] CPU: 0 UID: 0 PID: 4300 Comm: syz.3.170 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 63.783036][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.793120][ T4300] Call Trace: [ 63.796461][ T4300] [ 63.799428][ T4300] dump_stack_lvl+0xf2/0x150 [ 63.804052][ T4300] dump_stack+0x15/0x20 [ 63.808258][ T4300] should_fail_ex+0x223/0x230 [ 63.813035][ T4300] ? bpf_test_init+0xc7/0x170 [ 63.817826][ T4300] should_failslab+0x8f/0xb0 [ 63.822487][ T4300] __kmalloc_noprof+0xa5/0x370 [ 63.827298][ T4300] bpf_test_init+0xc7/0x170 [ 63.831881][ T4300] bpf_prog_test_run_xdp+0x321/0x8b0 [ 63.837346][ T4300] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 63.843235][ T4300] bpf_prog_test_run+0x20f/0x3a0 [ 63.848213][ T4300] __sys_bpf+0x400/0x7a0 [ 63.852483][ T4300] __x64_sys_bpf+0x43/0x50 [ 63.857007][ T4300] x64_sys_call+0x2625/0x2d60 [ 63.861904][ T4300] do_syscall_64+0xc9/0x1c0 [ 63.866435][ T4300] ? clear_bhb_loop+0x55/0xb0 [ 63.871146][ T4300] ? clear_bhb_loop+0x55/0xb0 [ 63.875853][ T4300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.881849][ T4300] RIP: 0033:0x7f4700c1dff9 [ 63.886277][ T4300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.905901][ T4300] RSP: 002b:00007f46ff891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.914395][ T4300] RAX: ffffffffffffffda RBX: 00007f4700dd5f80 RCX: 00007f4700c1dff9 [ 63.922380][ T4300] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 63.930369][ T4300] RBP: 00007f46ff891090 R08: 0000000000000000 R09: 0000000000000000 [ 63.938364][ T4300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.946344][ T4300] R13: 0000000000000000 R14: 00007f4700dd5f80 R15: 00007ffd3f8a82b8 [ 63.954384][ T4300] [ 64.053267][ T4298] loop0: detected capacity change from 0 to 1024 [ 64.061284][ T4298] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.086045][ T4298] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.169: Invalid block bitmap block 0 in block_group 0 [ 64.124963][ T4298] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.169: Failed to acquire dquot type 0 [ 64.162787][ T4298] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.169: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.177460][ T4298] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.169: Invalid inode bitmap blk 0 in block_group 0 [ 64.191666][ T4298] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 64.200513][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 0 [ 64.213400][ T4298] EXT4-fs (loop0): 1 orphan inode deleted [ 64.219828][ T4298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.237874][ T4298] syz.0.169 uses obsolete (PF_INET,SOCK_PACKET) [ 64.307996][ T4307] loop2: detected capacity change from 0 to 2048 [ 64.336211][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.450072][ T3642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.579747][ T3645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.631010][ T4314] netlink: 'syz.0.173': attribute type 4 has an invalid length. [ 64.641539][ T29] kauditd_printk_skb: 5153 callbacks suppressed [ 64.641556][ T29] audit: type=1326 audit(1728960619.939:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4009dff9 code=0x7ffc0000 [ 64.698087][ T4320] loop0: detected capacity change from 0 to 512 [ 64.728045][ T29] audit: type=1326 audit(1728960619.939:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4009dff9 code=0x7ffc0000 [ 64.751433][ T29] audit: type=1326 audit(1728960619.989:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b4009dff9 code=0x7ffc0000 [ 64.774792][ T29] audit: type=1326 audit(1728960619.989:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b40094fa7 code=0x7ffc0000 [ 64.798103][ T29] audit: type=1326 audit(1728960619.999:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b40039959 code=0x7ffc0000 [ 64.821388][ T29] audit: type=1326 audit(1728960620.009:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18849c4fa7 code=0x50000 [ 64.844534][ T29] audit: type=1326 audit(1728960620.019:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1884969959 code=0x50000 [ 64.867699][ T29] audit: type=1326 audit(1728960620.019:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b4009dff9 code=0x7ffc0000 [ 64.891008][ T29] audit: type=1326 audit(1728960620.019:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1884969a1f code=0x50000 [ 64.914274][ T29] audit: type=1326 audit(1728960620.019:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f18849cdff9 code=0x50000 [ 65.028062][ T4320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.041596][ T4320] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.423364][ T4338] loop2: detected capacity change from 0 to 2048 [ 65.526411][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.069759][ T3642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.087879][ T4349] usb usb8: usbfs: process 4349 (syz.4.181) did not claim interface 0 before use [ 66.123892][ T4362] loop0: detected capacity change from 0 to 512 [ 66.131911][ T4362] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.132338][ T4359] loop1: detected capacity change from 0 to 2048 [ 66.140053][ T4362] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.185: corrupted in-inode xattr: invalid ea_ino [ 66.158297][ T4362] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.185: couldn't read orphan inode 15 (err -117) [ 66.170767][ T4362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.190878][ T4359] Alternate GPT is invalid, using primary GPT. [ 66.197277][ T4359] loop1: p2 p3 p7 [ 66.229231][ T4367] usb usb8: usbfs: process 4367 (syz.1.186) did not claim interface 0 before use [ 66.282928][ T4349] loop4: detected capacity change from 0 to 128 [ 66.301262][ T4349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.313869][ T4349] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.314544][ T4375] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 66.379507][ T4378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.188'. [ 66.395548][ T3651] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.490320][ T4389] loop1: detected capacity change from 0 to 512 [ 66.516609][ T4389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.529408][ T4389] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.676557][ T4396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 66.965758][ T4404] syz.3.198 (4404) used greatest stack depth: 9376 bytes left [ 66.994659][ T4406] FAULT_INJECTION: forcing a failure. [ 66.994659][ T4406] name failslab, interval 1, probability 0, space 0, times 0 [ 67.007443][ T4406] CPU: 0 UID: 0 PID: 4406 Comm: syz.3.199 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 67.018089][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.028202][ T4406] Call Trace: [ 67.031489][ T4406] [ 67.034420][ T4406] dump_stack_lvl+0xf2/0x150 [ 67.039034][ T4406] dump_stack+0x15/0x20 [ 67.043276][ T4406] should_fail_ex+0x223/0x230 [ 67.048008][ T4406] ? do_signalfd4+0x104/0x2d0 [ 67.052732][ T4406] should_failslab+0x8f/0xb0 [ 67.057349][ T4406] __kmalloc_cache_noprof+0x4b/0x2a0 [ 67.062658][ T4406] do_signalfd4+0x104/0x2d0 [ 67.067245][ T4406] __x64_sys_signalfd4+0xca/0xf0 [ 67.072194][ T4406] x64_sys_call+0x27fb/0x2d60 [ 67.076905][ T4406] do_syscall_64+0xc9/0x1c0 [ 67.081460][ T4406] ? clear_bhb_loop+0x55/0xb0 [ 67.086158][ T4406] ? clear_bhb_loop+0x55/0xb0 [ 67.090854][ T4406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.096759][ T4406] RIP: 0033:0x7f4700c1dff9 [ 67.101209][ T4406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.120842][ T4406] RSP: 002b:00007f46ff891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 67.129312][ T4406] RAX: ffffffffffffffda RBX: 00007f4700dd5f80 RCX: 00007f4700c1dff9 [ 67.137294][ T4406] RDX: 0000000000000008 RSI: 0000000020000340 RDI: ffffffffffffffff [ 67.145316][ T4406] RBP: 00007f46ff891090 R08: 0000000000000000 R09: 0000000000000000 [ 67.153317][ T4406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.161288][ T4406] R13: 0000000000000000 R14: 00007f4700dd5f80 R15: 00007ffd3f8a82b8 [ 67.169355][ T4406] [ 67.190291][ T4408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.200'. [ 67.199535][ T4408] unsupported nlmsg_type 40 [ 67.213420][ T4408] loop3: detected capacity change from 0 to 2048 [ 67.236513][ T4408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.248739][ T4408] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.284377][ T4412] netlink: 'syz.4.201': attribute type 4 has an invalid length. [ 67.308880][ T4414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.202'. [ 67.333595][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.374725][ T4419] loop4: detected capacity change from 0 to 512 [ 67.388143][ T3507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.397435][ T4419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.398046][ T4420] usb usb8: usbfs: process 4420 (syz.3.204) did not claim interface 0 before use [ 67.411230][ T4419] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.440704][ T4419] Process accounting resumed [ 67.451789][ T4419] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 67.489106][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.593489][ T4434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.208'. [ 67.688590][ T4444] netlink: 'syz.4.212': attribute type 4 has an invalid length. [ 67.717216][ T4448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 67.746349][ T4453] loop4: detected capacity change from 0 to 512 [ 67.756597][ T4453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.759303][ T4455] loop1: detected capacity change from 0 to 512 [ 67.769268][ T4453] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.808043][ T4459] FAULT_INJECTION: forcing a failure. [ 67.808043][ T4459] name failslab, interval 1, probability 0, space 0, times 0 [ 67.820714][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.1.218 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 67.831378][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.841461][ T4459] Call Trace: [ 67.844762][ T4459] [ 67.847728][ T4459] dump_stack_lvl+0xf2/0x150 [ 67.852336][ T4459] dump_stack+0x15/0x20 [ 67.856502][ T4459] should_fail_ex+0x223/0x230 [ 67.861259][ T4459] ? __d_alloc+0x3d/0x340 [ 67.865602][ T4459] should_failslab+0x8f/0xb0 [ 67.870204][ T4459] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 67.875943][ T4459] ? search_extable+0x54/0x80 [ 67.880753][ T4459] __d_alloc+0x3d/0x340 [ 67.884959][ T4459] d_alloc_parallel+0x54/0xc80 [ 67.889738][ T4459] ? selinux_inode_permission+0x341/0x410 [ 67.895632][ T4459] ? lockref_get_not_dead+0x118/0x1b0 [ 67.901017][ T4459] ? down_read+0x171/0x4b0 [ 67.905470][ T4459] __lookup_slow+0x8d/0x250 [ 67.909989][ T4459] lookup_slow+0x3c/0x60 [ 67.914246][ T4459] walk_component+0x1f5/0x230 [ 67.918993][ T4459] ? path_lookupat+0xfd/0x2b0 [ 67.923741][ T4459] path_lookupat+0x10a/0x2b0 [ 67.928485][ T4459] filename_lookup+0x127/0x300 [ 67.933281][ T4459] user_path_at+0x3c/0x110 [ 67.937831][ T4459] do_fchownat+0x92/0x1a0 [ 67.942249][ T4459] __x64_sys_chown+0x47/0x60 [ 67.946860][ T4459] x64_sys_call+0x2b75/0x2d60 [ 67.951586][ T4459] do_syscall_64+0xc9/0x1c0 [ 67.956097][ T4459] ? clear_bhb_loop+0x55/0xb0 [ 67.960804][ T4459] ? clear_bhb_loop+0x55/0xb0 [ 67.965508][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.971423][ T4459] RIP: 0033:0x7f18849cdff9 [ 67.975844][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.995498][ T4459] RSP: 002b:00007f1883641038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 68.003935][ T4459] RAX: ffffffffffffffda RBX: 00007f1884b85f80 RCX: 00007f18849cdff9 [ 68.011983][ T4459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 68.019957][ T4459] RBP: 00007f1883641090 R08: 0000000000000000 R09: 0000000000000000 [ 68.027998][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.035975][ T4459] R13: 0000000000000001 R14: 00007f1884b85f80 R15: 00007ffc931b5818 [ 68.044091][ T4459] [ 68.336903][ T4468] usb usb8: usbfs: process 4468 (syz.1.221) did not claim interface 0 before use [ 68.433823][ T3645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.496523][ T4474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 68.588766][ T4481] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 68.639913][ T4487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.227'. [ 68.728982][ T4483] loop1: detected capacity change from 0 to 2048 [ 68.768138][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.769210][ T4483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.817306][ T3507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.822259][ T4501] loop4: detected capacity change from 0 to 2048 [ 68.838079][ T4501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.856718][ T4503] usb usb8: usbfs: process 4503 (syz.3.234) did not claim interface 0 before use [ 68.882543][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.070646][ T4525] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 69.073612][ T4527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.239'. [ 69.125159][ T4535] loop1: detected capacity change from 0 to 512 [ 69.131410][ T4531] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.145925][ T3642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.169385][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 69.169808][ T4538] loop3: detected capacity change from 0 to 2048 [ 69.184660][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 69.192238][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.195521][ T4535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.199735][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 69.214667][ T4535] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.219630][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.237457][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.244965][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.252368][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.259856][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.267351][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.274833][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.282259][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.289805][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.297261][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.304668][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.312136][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 69.319588][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.327040][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.334487][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.342001][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.349623][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.357086][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.364545][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.372007][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.380181][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.380592][ T4538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.387869][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.407275][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.414708][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.422188][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.429598][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.437093][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.444494][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.451912][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.459393][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.466816][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.474341][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.481754][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.489206][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.496624][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.504121][ T3344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.512993][ T3344] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 69.537427][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.665859][ T4558] usb usb8: usbfs: process 4558 (syz.0.250) did not claim interface 0 before use [ 69.676685][ T29] kauditd_printk_skb: 1016 callbacks suppressed [ 69.676701][ T29] audit: type=1326 audit(1728960624.979:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.711514][ T29] audit: type=1326 audit(1728960624.979:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.735059][ T29] audit: type=1326 audit(1728960624.979:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.758460][ T29] audit: type=1326 audit(1728960624.979:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.782658][ T29] audit: type=1326 audit(1728960625.009:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.806241][ T29] audit: type=1326 audit(1728960625.019:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.829564][ T29] audit: type=1326 audit(1728960625.019:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.852936][ T29] audit: type=1326 audit(1728960625.019:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff62fd6c990 code=0x7ffc0000 [ 69.876718][ T29] audit: type=1326 audit(1728960625.019:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff62fd6f827 code=0x7ffc0000 [ 69.900038][ T29] audit: type=1326 audit(1728960625.019:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff62fd6dff9 code=0x7ffc0000 [ 69.970400][ T4574] loop2: detected capacity change from 0 to 512 [ 69.980888][ T4572] netlink: 'syz.4.253': attribute type 4 has an invalid length. [ 69.990372][ T4574] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.999039][ T4574] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.254: corrupted in-inode xattr: invalid ea_ino [ 70.043992][ T4574] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.254: couldn't read orphan inode 15 (err -117) [ 70.059511][ T4574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.103130][ T4581] loop4: detected capacity change from 0 to 512 [ 70.111160][ T4581] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.120455][ T4581] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.257: corrupted in-inode xattr: invalid ea_ino [ 70.164031][ T4581] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.257: couldn't read orphan inode 15 (err -117) [ 70.177411][ T4585] loop0: detected capacity change from 0 to 2048 [ 70.187745][ T4581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.205378][ T4588] ================================================================== [ 70.213505][ T4588] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 70.221255][ T4588] [ 70.223621][ T4588] write to 0xffff888111808c10 of 8 bytes by task 4580 on cpu 0: [ 70.231439][ T4588] mas_wr_store_entry+0x146b/0x2d00 [ 70.236664][ T4588] mas_store_prealloc+0x6bf/0x960 [ 70.241701][ T4588] commit_merge+0x441/0x740 [ 70.246224][ T4588] vma_expand+0x211/0x360 [ 70.250576][ T4588] vma_merge_new_range+0x2cf/0x3e0 [ 70.255707][ T4588] mmap_region+0x887/0x16e0 [ 70.260234][ T4588] do_mmap+0x718/0xb60 [ 70.264378][ T4588] vm_mmap_pgoff+0x133/0x290 [ 70.269000][ T4588] ksys_mmap_pgoff+0xd0/0x330 [ 70.273722][ T4588] x64_sys_call+0x1884/0x2d60 [ 70.278433][ T4588] do_syscall_64+0xc9/0x1c0 [ 70.282961][ T4588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.288882][ T4588] [ 70.291210][ T4588] read to 0xffff888111808c10 of 8 bytes by task 4588 on cpu 1: [ 70.298770][ T4588] mtree_range_walk+0x1b4/0x460 [ 70.303652][ T4588] mas_walk+0x16e/0x320 [ 70.307833][ T4588] lock_vma_under_rcu+0x95/0x260 [ 70.312803][ T4588] exc_page_fault+0x150/0x650 [ 70.316693][ T4585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.317494][ T4588] asm_exc_page_fault+0x26/0x30 [ 70.317531][ T4588] [ 70.317535][ T4588] value changed: 0x00007f108c2aefff -> 0x00007f108c28dfff [ 70.317547][ T4588] [ 70.317550][ T4588] Reported by Kernel Concurrency Sanitizer on: [ 70.317557][ T4588] CPU: 1 UID: 0 PID: 4588 Comm: syz.4.257 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 70.362995][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.373066][ T4588] ================================================================== [ 70.396811][ T3651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.470017][ T3507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.479994][ T3642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.967262][ T3645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.