last executing test programs: 43.620365323s ago: executing program 4 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 43.534722474s ago: executing program 4 (id=477): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x1d) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000001180)='!', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xc}, 0x1c) sendmmsg$sock(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40000) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)="10", 0x1}], 0x1) shutdown(r5, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000680)='\a', 0x1, 0x40091, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$rds(0x15, 0x5, 0x0) sendto$inet(r3, &(0x7f00000004c0)="3ce2de", 0x3, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 43.414089685s ago: executing program 4 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c40000000001010200000000000000000a000000000004800000018000000500030600000000050002270000180001800c000280050001008400000006000340000000005400188008000240000000080800024000000003080003400000000308000140ffffffff08000340000076920800024000000fff08000140000000010800024000010001080801402ec59466080003400000009f"], 0x7b}, 0x1, 0x0, 0x0, 0x4041}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="54000000000105050000000000000a0000003cdafda2e445f4713e000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c100280050001000000000004000680000005db86556c5e2ca93841a1fc5e6b4ee017642962a07380f084621fd0eb89323b45b5f3d29f3bc150ae3be3c5a0cbfe35a49db209f5c8b8ccba619432530233d7008d1da7904fa323e044daa12ffd99db5ee770067050507850a430d63d64a89e29ee5e9b17"], 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @multicast2, 0x11, 0x2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000955033f93623f42ba098870272f1f4895f49b755f9670300ff299d1dbb1eb50375c7cb167077488b7b4379e861b6e903b46c689b87d665cf8d817d3eeb16dc846962a1ccb4e1a39919bfc33c977924ecb386f305e8df3094cf776c2f0b31dd2e93d41440fe76d2d7f452fa2800"/150], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x10000000000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRESHEX=r6, @ANYRES64=r8], 0x48}}, 0x0) r11 = semget$private(0x0, 0x2, 0x209) semtimedop(r11, &(0x7f0000000080)=[{0x0, 0xfff9}], 0x1, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000007c0)="c930227df3e2001147bb4c1b13fffbeb9d7111b4d0d826179e68e1f41650f11de62fe1cc5142de18c60db3cdb800327f0339d9100dea8e3cca39688a9a2f0669fec16a93d736f9f9da5bbf5c5669a3388302be43bd2a233624c83369d02aac70ce6b89ab3f5062f299fef5198329c28a820b390ef8942f16cf0f977c452a2dbae56baa", 0x83) 42.250251634s ago: executing program 4 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="090000000200000008000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='i2c_result\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x118050, r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000003c0)={0x1, 0x3, 0x1000, 0x95, &(0x7f0000000700)="4a3c813c47a41cd4158236d66ef4f0f1fd28a0d41d3c5b6fcc287deb471a4cff6f902c5d21e8ffaab71fbf99d29bf072758675b4d9a6e5e3d1af70631b7e7e98df4aac8f86f0ff4faceec77ca30d9de99b4d36a524e83b9401e8901dc7a1b0137aa7f4b74d8d064d7791507b631fd0f6081e47abc69161b5c69fcb8aa7056c0cc23e5f5d22e8b9ca38449bfef1095900c9f7bc52db", 0x94, 0x0, &(0x7f00000007c0)="404e08cc8db7b80e910dc7d319f11dd5fe8733af7bb6d7d1755a4669eacc83beb7a1e201fc6d5ebe92399e75e8fb12d03559e4fc267dce1531661d81fc861596482605cd690a9b32ecd6fbe5333c0e93bf2d7a3085f19b219e9c3f9560dd622903468998658d8e96401fa4c5b27af8044acee0c9d5da83e671ac9477f844f835d8ab934fa08b72b42956ac9f825c9b6c02c11107"}) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r6, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f0000000600010001f4164d0f595c9105fd295d000000080005009a96c26796374b9c338b731529532e7217570cf50ad2f512311a8a12896e702e03b9a6525c4ea9684a969200351e26688bc5faf9f4b69765ec600bf04e7374bced8b9e66dc6258f6bbfc541804951118c91d7ec3375984ffad3e5e1093f5e98a9d9b1a9a9d174e2da8833f20a0043a0b07d246ca9c09e591c2d3df81f49e16b84d2ba6c5dddd3b8668b73db74f48ef38d383b00cc42b570caeeeea7e2720af9ee86a459997f59b3547375adfcd01bef609e90ca0c49477d6152de85604c0124991679e2d2caa94afd28a2df8440761d613407b0a36d9444b4b44c7641a5bddc7edede1dff07a18df7b55ae7df1da71ff9639b31bd154d6937784b9b743a8b302f437a94114a2ec8373d1d0ef760c5edcdb767f83000000", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 41.309876891s ago: executing program 4 (id=501): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 41.069867134s ago: executing program 4 (id=505): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 41.050558754s ago: executing program 32 (id=505): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 3.339642024s ago: executing program 2 (id=1363): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64], 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/file0\x00', 0x1c9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1e, r2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2.424107161s ago: executing program 2 (id=1384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df87", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bb", 0x5}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.330160431s ago: executing program 2 (id=1385): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='(())') r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r4 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1) io_uring_enter(r4, 0x5a45, 0xd11b, 0x21, &(0x7f00000000c0)={[0xfffffffffffffffb]}, 0x8) 1.948364684s ago: executing program 1 (id=1394): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x7ffe, 0x0, 0x0, 0x5}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='fib6_table_lookup\x00', r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x2, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001040)={'ipvlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000001080)={0x2, 0x76, 0x10b, 0x0, 0x3}) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xf4, 0x3, 0x0, 0x0, 0x0, 0x402, 0x62a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x6bc31105, 0x2}, 0x400, 0x10000000000000, 0x0, 0x4, 0x80002000, 0x80, 0x81, 0x0, 0x10, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119f000000000016000000740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.856905865s ago: executing program 2 (id=1395): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) statfs(&(0x7f0000000080)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) tkill(r5, 0x16) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r10}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) 1.625221177s ago: executing program 1 (id=1396): syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x10, 0x13290, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) rt_sigaction(0x7, &(0x7f00000000c0)={&(0x7f0000000040)="0f380bc66a7df340f6430000c4229d9d2fc40201049800000000652ef30f1633670f6fd2650fd1589365260ff515f1ff00006466420f43cb", 0xc0000004, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, @random="48bd00"}, 0x10) 1.24779641s ago: executing program 5 (id=1398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0) 1.17638128s ago: executing program 5 (id=1399): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@mblk_io_submit}, {@init_itable}, {@noauto_da_alloc}, {@dioread_lock}], [{@dont_hash}, {@flag='async'}]}, 0x3, 0x4cd, &(0x7f0000005140)="$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") r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) unlink(&(0x7f0000000000)='./file1\x00') recvmmsg(r6, 0x0, 0x0, 0x40012101, &(0x7f0000005000)) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003280)=ANY=[@ANYBLOB="0206020002000000020000000000336476d5e96f1f0619b51102bdd3398e7bad"], 0x10}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r9, &(0x7f0000007b40)=[{{&(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000240)="68811de1b9d14bf2", 0x8}, {&(0x7f0000001e00)="7d0422a6c5de76", 0x7}, {&(0x7f0000001e40)="8716fe1bc37550619885d681219ba97d1276986746eac946f533c3c5511bc882c52eb10bad580e5d46bfceb8d46bda86da3480ea0de8f5823c104cd6f867db3cefb59045adc427626e44c4c49d2de0d579770bb39a773c32883a391c9c2018f0421c2cb4fdcab27ec978473ee38035076f77b7b56f4e4d4d799336ece91a2c3e09064e40867f785bc20fd380fa9bccd19b91ae2e54bc77ec423d77d882436794718d7fa66a31a3e28d1907dcd9f78e94a2fc1f49fd32d50abb311d5af20ed5f0", 0xc0}, {&(0x7f0000001f00)="5046d62e325be4a62f64483e7f4c63dfb8d4a5779ed9324cc17310359939378cc6caec34d7a92bd7b3766a82b01f9d60ddb8aed79d2ef9845964c50262af5e112cd7ab48f7a29689", 0x48}, {&(0x7f0000005640)="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", 0x1000}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000002000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000006640)="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", 0x1000}, {&(0x7f0000002080)="b409d24dbab8b64f537eccd15b165acb779eb78fa9805862c892fc7bb308747848f9cb6355c612e493c227e5135afb207e0eb46b4fa90c223d8a9bd603eac6b197d196761cf4d30a81c3be8e83e020e6fa7b0c82c927d31b3e2d118c0f870d1731310c25e9e7f07cbe429b92f3b10908924c2bac59d349e976efa936e2c13eb973ffa7b835111097fcb7", 0x8a}, {&(0x7f0000002140)="a86c7e6e51a94fd9a069831ae6206a642bc8d26e3a195bca2f29f350971a9e38c888e82df883344c5561142d6e72682dd74929b4d4a6f5295b5ed042c19f30fbade57d62afcdb6e801690c0ab778e02acdbb27a36045e86492d6b6ff406a6b147a5c169551357a826d758d5a1d1b889d6eae614a47", 0x75}, {&(0x7f00000032c0)="fc88109e2791c13bd61de9b0df7801e408e585b5e0955fb2ed0cbaf8362d9c51f457216fc93697d360fa16487b779a6a46ac824a604059939b38816dfe0bcf2100981744bcb82093", 0x48}, {&(0x7f0000003440)="9bac6b441d2e451d5a8aef0f3c38bae6f35408ef53a33488fe24d02dd2976734b891a750a9e67c177883f6a9eb", 0x2d}], 0x5, &(0x7f00000076c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x60, 0x40004}}, {{&(0x7f0000007740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000007800)=[{&(0x7f00000077c0)="0af4a1202d3238d5d59206e1d0667ffd1d4efd369d306b50f983678412ee08", 0x1f}], 0x1, &(0x7f00000079c0)=[@rights={{0x24, 0x1, 0x1, [r7, r4, r0, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x30, 0x1, 0x1, [r6, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r6, r8, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6]}}], 0x150, 0x24048084}}], 0x3, 0x2000c080) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r10}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000200), &(0x7f0000000280)=r11}, 0x20) symlink(0x0, &(0x7f00000017c0)='./file1\x00') connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) close(r0) 1.070898291s ago: executing program 5 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000002200)}, {&(0x7f0000000080)="eaa5576d16853e82bb", 0x9}], 0x3) 1.046190411s ago: executing program 3 (id=1405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df87", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bb", 0x5}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)}}], 0x1, 0x0, 0x0) 978.221322ms ago: executing program 3 (id=1407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 977.842812ms ago: executing program 3 (id=1408): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) statfs(&(0x7f0000000240)='./file0\x00', 0x0) 972.331872ms ago: executing program 3 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0) 961.537572ms ago: executing program 5 (id=1410): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64], 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/file0\x00', 0x1c9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1e, r2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 857.277893ms ago: executing program 3 (id=1411): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x1, @rand_addr=0x64010101, 0x4e22, 0x4, 'dh\x00', 0x37, 0x1f, 0x6}, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 747.371404ms ago: executing program 0 (id=1413): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 705.252044ms ago: executing program 0 (id=1414): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f80000b7030000000000008500000006000000181100"/84, @ANYRES32, @ANYRESOCT=r1], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 701.140504ms ago: executing program 1 (id=1415): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 680.331814ms ago: executing program 1 (id=1416): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 672.450594ms ago: executing program 2 (id=1417): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 627.695274ms ago: executing program 0 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000200)='./file1\x00', 0x12e) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x400c000, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x8) 624.486915ms ago: executing program 1 (id=1419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 603.393965ms ago: executing program 1 (id=1420): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x1, @rand_addr=0x64010101, 0x4e22, 0x4, 'dh\x00', 0x37, 0x1f, 0x6}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) 554.140865ms ago: executing program 0 (id=1421): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='(())') r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r4 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1) io_uring_enter(r4, 0x5a45, 0xd11b, 0x21, &(0x7f00000000c0)={[0xfffffffffffffffb]}, 0x8) 489.058796ms ago: executing program 2 (id=1422): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64], 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") rename(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1e, r2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 370.042917ms ago: executing program 0 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 346.350197ms ago: executing program 0 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c40000000001010200000000000000000a000000000004800000018000000500030600000000050002270000180001800c000280050001008400000006000340000000005400188008000240000000080800024000000003080003400000000308000140ffffffff08000340000076920800024000000fff08000140000000010800024000010001080801402ec59466080003400000009f"], 0x7b}, 0x1, 0x0, 0x0, 0x4041}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="54000000000105050000000000000a0000003cdafda2e445f4713e000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c100280050001000000000004000680000005db86556c5e2ca93841a1fc5e6b4ee017642962a07380f084621fd0eb89323b45b5f3d29f3bc150ae3be3c5a0cbfe35a49db209f5c8b8ccba619432530233d7008d1da7904fa323e044daa12ffd99db5ee770067050507850a430d63d64a89e29ee5e9b17"], 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @multicast2, 0x11, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000955033f93623f42ba098870272f1f4895f49b755f9670300ff299d1dbb1eb50375c7cb167077488b7b4379e861b6e903b46c689b87d665cf8d817d3eeb16dc846962a1ccb4e1a39919bfc33c977924ecb386f305e8df3094cf776c2f0b31dd2e93d41440fe76d2d7f452fa2800"/151], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x10000000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRESHEX=r5, @ANYRES64=r7], 0x48}}, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0xfff9}], 0x1, 0x0) 48.037039ms ago: executing program 5 (id=1425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 32.103119ms ago: executing program 5 (id=1426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x71, 0x2000, @fd_index=0xa, 0xb3, 0x0, 0x0, 0x1, 0x0, {0x2}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1427): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) kernel console output (not intermixed with test programs): x64_sys_writev+0x45/0x50 [ 50.696654][ T4351] x64_sys_call+0x1fab/0x2dc0 [ 50.696734][ T4351] do_syscall_64+0xc9/0x1c0 [ 50.696773][ T4351] ? clear_bhb_loop+0x55/0xb0 [ 50.696854][ T4351] ? clear_bhb_loop+0x55/0xb0 [ 50.696918][ T4351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.697021][ T4351] RIP: 0033:0x7f48dccad169 [ 50.697036][ T4351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.697056][ T4351] RSP: 002b:00007f48db317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 50.697074][ T4351] RAX: ffffffffffffffda RBX: 00007f48dcec5fa0 RCX: 00007f48dccad169 [ 50.697085][ T4351] RDX: 0000000000000008 RSI: 00004000000000c0 RDI: 0000000000000007 [ 50.697103][ T4351] RBP: 00007f48db317090 R08: 0000000000000000 R09: 0000000000000000 [ 50.697116][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.697130][ T4351] R13: 0000000000000000 R14: 00007f48dcec5fa0 R15: 00007ffd32055188 [ 50.697178][ T4351] [ 50.972409][ T4346] Falling back ldisc for ttyS3. [ 51.021440][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 51.040884][ T4363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.069178][ T4368] lo: entered promiscuous mode [ 51.079549][ T4363] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 51.091692][ T4368] lo: entered allmulticast mode [ 51.140341][ T4372] FAULT_INJECTION: forcing a failure. [ 51.140341][ T4372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.153911][ T4372] CPU: 0 UID: 0 PID: 4372 Comm: syz.1.253 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 51.153937][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.153949][ T4372] Call Trace: [ 51.153954][ T4372] [ 51.153977][ T4372] dump_stack_lvl+0xf2/0x150 [ 51.154011][ T4372] dump_stack+0x15/0x1a [ 51.154037][ T4372] should_fail_ex+0x24a/0x260 [ 51.154075][ T4372] should_fail+0xb/0x10 [ 51.154161][ T4372] should_fail_usercopy+0x1a/0x20 [ 51.154192][ T4372] strncpy_from_user+0x25/0x210 [ 51.154218][ T4372] strncpy_from_user_nofault+0x66/0xe0 [ 51.154289][ T4372] bpf_probe_read_user_str+0x2a/0x70 [ 51.154337][ T4372] bpf_prog_b1bc9f7c1f89903c+0x41/0x43 [ 51.154353][ T4372] bpf_trace_run3+0x10c/0x1d0 [ 51.154378][ T4372] ? putname+0xcf/0xf0 [ 51.154397][ T4372] ? putname+0xcf/0xf0 [ 51.154417][ T4372] __traceiter_kmem_cache_free+0x33/0x50 [ 51.154444][ T4372] ? putname+0xcf/0xf0 [ 51.154460][ T4372] kmem_cache_free+0x237/0x2d0 [ 51.154483][ T4372] putname+0xcf/0xf0 [ 51.154524][ T4372] do_sys_openat2+0xe7/0x120 [ 51.154549][ T4372] __x64_sys_openat+0xf3/0x120 [ 51.154570][ T4372] x64_sys_call+0x2b30/0x2dc0 [ 51.154597][ T4372] do_syscall_64+0xc9/0x1c0 [ 51.154674][ T4372] ? clear_bhb_loop+0x55/0xb0 [ 51.154705][ T4372] ? clear_bhb_loop+0x55/0xb0 [ 51.154737][ T4372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.154769][ T4372] RIP: 0033:0x7f48dccabad0 [ 51.154854][ T4372] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 51.154932][ T4372] RSP: 002b:00007f48db314ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 51.154982][ T4372] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f48dccabad0 [ 51.154998][ T4372] RDX: 0000000000000002 RSI: 00007f48dcd2df84 RDI: 00000000ffffff9c [ 51.155013][ T4372] RBP: 00007f48dcd2df84 R08: 0000000000000000 R09: 0000000000000000 [ 51.155027][ T4372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 51.155041][ T4372] R13: 0000000000000036 R14: 0000400000000040 R15: 00007ffd32055188 [ 51.155062][ T4372] [ 51.159499][ T4368] lo: left allmulticast mode [ 51.231048][ T4372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.235775][ T4368] lo: left promiscuous mode [ 51.332731][ T4374] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 51.409780][ T4372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.435802][ T4376] loop4: detected capacity change from 0 to 512 [ 51.449860][ T4376] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.456617][ T4376] ext3: Unknown parameter 'dont_hash' [ 51.555026][ T4392] FAULT_INJECTION: forcing a failure. [ 51.555026][ T4392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.568233][ T4392] CPU: 1 UID: 0 PID: 4392 Comm: syz.4.261 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 51.568264][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.568278][ T4392] Call Trace: [ 51.568287][ T4392] [ 51.568295][ T4392] dump_stack_lvl+0xf2/0x150 [ 51.568330][ T4392] dump_stack+0x15/0x1a [ 51.568409][ T4392] should_fail_ex+0x24a/0x260 [ 51.568447][ T4392] should_fail+0xb/0x10 [ 51.568475][ T4392] should_fail_usercopy+0x1a/0x20 [ 51.568567][ T4392] _copy_from_user+0x1c/0xa0 [ 51.568591][ T4392] __sys_bpf+0x14e/0x7a0 [ 51.568629][ T4392] __x64_sys_bpf+0x43/0x50 [ 51.568653][ T4392] x64_sys_call+0x2914/0x2dc0 [ 51.568683][ T4392] do_syscall_64+0xc9/0x1c0 [ 51.568717][ T4392] ? clear_bhb_loop+0x55/0xb0 [ 51.568745][ T4392] ? clear_bhb_loop+0x55/0xb0 [ 51.568850][ T4392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.568899][ T4392] RIP: 0033:0x7f6840d5d169 [ 51.568914][ T4392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.568935][ T4392] RSP: 002b:00007f683f3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.568957][ T4392] RAX: ffffffffffffffda RBX: 00007f6840f75fa0 RCX: 00007f6840d5d169 [ 51.568973][ T4392] RDX: 0000000000000048 RSI: 0000400000000300 RDI: 0000000000000000 [ 51.568987][ T4392] RBP: 00007f683f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.569002][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.569067][ T4392] R13: 0000000000000000 R14: 00007f6840f75fa0 R15: 00007ffdde195368 [ 51.569086][ T4392] [ 51.734919][ T4389] loop0: detected capacity change from 0 to 512 [ 51.756812][ T4389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.260: bg 0: block 248: padding at end of block bitmap is not set [ 51.802693][ T4389] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.260: Failed to acquire dquot type 1 [ 51.814094][ T4394] Falling back ldisc for ttyS3. [ 51.836954][ T4404] FAULT_INJECTION: forcing a failure. [ 51.836954][ T4404] name failslab, interval 1, probability 0, space 0, times 0 [ 51.839066][ T4389] EXT4-fs (loop0): 1 truncate cleaned up [ 51.849670][ T4404] CPU: 1 UID: 0 PID: 4404 Comm: syz.4.264 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 51.849703][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.849730][ T4404] Call Trace: [ 51.849737][ T4404] [ 51.849745][ T4404] dump_stack_lvl+0xf2/0x150 [ 51.849773][ T4404] dump_stack+0x15/0x1a [ 51.849796][ T4404] should_fail_ex+0x24a/0x260 [ 51.849877][ T4404] ? flow_change+0x1c6/0xc90 [ 51.849920][ T4404] should_failslab+0x8f/0xb0 [ 51.849959][ T4404] __kmalloc_cache_noprof+0x4e/0x320 [ 51.850002][ T4404] flow_change+0x1c6/0xc90 [ 51.850098][ T4404] ? should_fail_ex+0xd7/0x260 [ 51.850142][ T4404] tc_new_tfilter+0xe8b/0x1110 [ 51.850182][ T4404] ? __pfx_tc_new_tfilter+0x10/0x10 [ 51.850206][ T4404] rtnetlink_rcv_msg+0x651/0x710 [ 51.850264][ T4404] ? ref_tracker_free+0x3a5/0x410 [ 51.850303][ T4404] netlink_rcv_skb+0x12c/0x230 [ 51.850343][ T4404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.850385][ T4404] rtnetlink_rcv+0x1c/0x30 [ 51.850503][ T4404] netlink_unicast+0x599/0x670 [ 51.850544][ T4404] netlink_sendmsg+0x5cc/0x6e0 [ 51.850572][ T4404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.850595][ T4404] __sock_sendmsg+0x140/0x180 [ 51.850637][ T4404] ____sys_sendmsg+0x326/0x4b0 [ 51.850754][ T4404] __sys_sendmsg+0x19d/0x230 [ 51.850803][ T4404] __x64_sys_sendmsg+0x46/0x50 [ 51.850836][ T4404] x64_sys_call+0x2734/0x2dc0 [ 51.850916][ T4404] do_syscall_64+0xc9/0x1c0 [ 51.850957][ T4404] ? clear_bhb_loop+0x55/0xb0 [ 51.850997][ T4404] ? clear_bhb_loop+0x55/0xb0 [ 51.851108][ T4404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.851143][ T4404] RIP: 0033:0x7f6840d5d169 [ 51.851162][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.851186][ T4404] RSP: 002b:00007f683f3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.851209][ T4404] RAX: ffffffffffffffda RBX: 00007f6840f75fa0 RCX: 00007f6840d5d169 [ 51.851224][ T4404] RDX: 0000000000000800 RSI: 0000400000000140 RDI: 0000000000000004 [ 51.851239][ T4404] RBP: 00007f683f3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.851311][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.851328][ T4404] R13: 0000000000000000 R14: 00007f6840f75fa0 R15: 00007ffdde195368 [ 51.851351][ T4404] [ 52.089606][ T4389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.102169][ T4389] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.125105][ T4406] lo: entered promiscuous mode [ 52.130039][ T4407] lo: entered allmulticast mode [ 52.176131][ T4420] loop4: detected capacity change from 0 to 512 [ 52.182789][ T4406] lo: left allmulticast mode [ 52.187437][ T4406] lo: left promiscuous mode [ 52.187659][ T4420] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.211475][ T4421] 1猉功D: renamed from 30猉功D (while UP) [ 52.212203][ T4420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.233007][ T4421] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 52.252810][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.262285][ T120] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 52.276756][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.313513][ T4430] loop4: detected capacity change from 0 to 512 [ 52.325914][ T4430] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.332509][ T4430] ext3: Unknown parameter 'dont_hash' [ 52.416381][ T4441] FAULT_INJECTION: forcing a failure. [ 52.416381][ T4441] name failslab, interval 1, probability 0, space 0, times 0 [ 52.429129][ T4441] CPU: 0 UID: 0 PID: 4441 Comm: syz.0.277 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 52.429150][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.429160][ T4441] Call Trace: [ 52.429166][ T4441] [ 52.429173][ T4441] dump_stack_lvl+0xf2/0x150 [ 52.429199][ T4441] dump_stack+0x15/0x1a [ 52.429239][ T4441] should_fail_ex+0x24a/0x260 [ 52.429266][ T4441] should_failslab+0x8f/0xb0 [ 52.429292][ T4441] __kmalloc_node_noprof+0xad/0x410 [ 52.429380][ T4441] ? __kvmalloc_node_noprof+0x72/0x170 [ 52.429407][ T4441] __kvmalloc_node_noprof+0x72/0x170 [ 52.429531][ T4441] nf_hook_entries_grow+0x1bd/0x470 [ 52.429561][ T4441] __nf_register_net_hook+0x16b/0x480 [ 52.429588][ T4441] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 52.429686][ T4441] nf_register_net_hook+0x88/0x130 [ 52.429712][ T4441] nf_register_net_hooks+0x41/0x140 [ 52.429739][ T4441] nf_defrag_ipv4_enable+0x6c/0xc0 [ 52.429757][ T4441] nf_ct_netns_do_get+0x139/0x370 [ 52.429894][ T4441] nf_ct_netns_get+0x83/0xb0 [ 52.429935][ T4441] nft_masq_init+0x115/0x130 [ 52.429956][ T4441] nf_tables_newrule+0xfa1/0x1770 [ 52.429997][ T4441] ? __nla_parse+0x40/0x60 [ 52.430068][ T4441] nfnetlink_rcv+0xb3e/0x15d0 [ 52.430112][ T4441] netlink_unicast+0x599/0x670 [ 52.430214][ T4441] netlink_sendmsg+0x5cc/0x6e0 [ 52.430244][ T4441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.430260][ T4441] __sock_sendmsg+0x140/0x180 [ 52.430292][ T4441] ____sys_sendmsg+0x326/0x4b0 [ 52.430350][ T4441] __sys_sendmsg+0x19d/0x230 [ 52.430385][ T4441] __x64_sys_sendmsg+0x46/0x50 [ 52.430469][ T4441] x64_sys_call+0x2734/0x2dc0 [ 52.430491][ T4441] do_syscall_64+0xc9/0x1c0 [ 52.430595][ T4441] ? clear_bhb_loop+0x55/0xb0 [ 52.430628][ T4441] ? clear_bhb_loop+0x55/0xb0 [ 52.430651][ T4441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.430674][ T4441] RIP: 0033:0x7f7b5110d169 [ 52.430687][ T4441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.430759][ T4441] RSP: 002b:00007f7b4f777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.430775][ T4441] RAX: ffffffffffffffda RBX: 00007f7b51325fa0 RCX: 00007f7b5110d169 [ 52.430785][ T4441] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005 [ 52.430866][ T4441] RBP: 00007f7b4f777090 R08: 0000000000000000 R09: 0000000000000000 [ 52.430875][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.430886][ T4441] R13: 0000000000000000 R14: 00007f7b51325fa0 R15: 00007ffca933d888 [ 52.430902][ T4441] [ 52.692180][ T4439] Falling back ldisc for ttyS3. [ 52.709520][ T4445] FAULT_INJECTION: forcing a failure. [ 52.709520][ T4445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.722854][ T4445] CPU: 0 UID: 0 PID: 4445 Comm: syz.0.278 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 52.722886][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.722901][ T4445] Call Trace: [ 52.722908][ T4445] [ 52.722916][ T4445] dump_stack_lvl+0xf2/0x150 [ 52.722952][ T4445] dump_stack+0x15/0x1a [ 52.722977][ T4445] should_fail_ex+0x24a/0x260 [ 52.723061][ T4445] should_fail+0xb/0x10 [ 52.723093][ T4445] should_fail_usercopy+0x1a/0x20 [ 52.723131][ T4445] _copy_from_user+0x1c/0xa0 [ 52.723189][ T4445] copy_msghdr_from_user+0x54/0x2a0 [ 52.723275][ T4445] ? __fget_files+0x17c/0x1c0 [ 52.723317][ T4445] __sys_sendmsg+0x13e/0x230 [ 52.723351][ T4445] __x64_sys_sendmsg+0x46/0x50 [ 52.723373][ T4445] x64_sys_call+0x2734/0x2dc0 [ 52.723473][ T4445] do_syscall_64+0xc9/0x1c0 [ 52.723500][ T4445] ? clear_bhb_loop+0x55/0xb0 [ 52.723523][ T4445] ? clear_bhb_loop+0x55/0xb0 [ 52.723682][ T4445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.723722][ T4445] RIP: 0033:0x7f7b5110d169 [ 52.723736][ T4445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.723751][ T4445] RSP: 002b:00007f7b4f777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.723775][ T4445] RAX: ffffffffffffffda RBX: 00007f7b51325fa0 RCX: 00007f7b5110d169 [ 52.723877][ T4445] RDX: 0000000000040080 RSI: 00004000000002c0 RDI: 0000000000000004 [ 52.723888][ T4445] RBP: 00007f7b4f777090 R08: 0000000000000000 R09: 0000000000000000 [ 52.723898][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.723908][ T4445] R13: 0000000000000000 R14: 00007f7b51325fa0 R15: 00007ffca933d888 [ 52.723923][ T4445] [ 52.926562][ T4451] loop4: detected capacity change from 0 to 164 [ 52.945499][ T4453] loop0: detected capacity change from 0 to 1024 [ 52.954513][ T4453] EXT4-fs: Ignoring removed bh option [ 52.960022][ T4453] EXT4-fs: inline encryption not supported [ 52.970032][ T4453] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.984970][ T4453] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.282: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.001421][ T4453] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.282: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.016334][ T4453] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.282: Failed to acquire dquot type 0 [ 53.028398][ T4453] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 53.038794][ T4453] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.282: mark_inode_dirty error [ 53.074903][ T4467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.084407][ T4453] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 53.098028][ T4453] EXT4-fs (loop0): 1 orphan inode deleted [ 53.104288][ T4453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.105581][ T4467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.129074][ T4469] lo: entered promiscuous mode [ 53.136794][ T4469] lo: entered allmulticast mode [ 53.141308][ T12] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.184752][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 53.205868][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.214901][ T4468] lo: left allmulticast mode [ 53.219851][ T4468] lo: left promiscuous mode [ 53.234335][ T3298] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.253990][ T3298] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 53.271723][ T3298] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 53.345849][ T4480] Falling back ldisc for ttyS3. [ 53.476080][ T4498] futex_wake_op: syz.1.299 tries to shift op by -1; fix this program [ 53.521563][ T4504] lo: entered promiscuous mode [ 53.540517][ T4504] lo: entered allmulticast mode [ 53.564852][ T4509] loop0: detected capacity change from 0 to 512 [ 53.572151][ T4509] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 53.580890][ T4503] lo: left allmulticast mode [ 53.585574][ T4503] lo: left promiscuous mode [ 53.608338][ T4512] FAULT_INJECTION: forcing a failure. [ 53.608338][ T4512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.609302][ T4509] 9pnet: Could not find request transport: fd  [ 53.621485][ T4512] CPU: 1 UID: 0 PID: 4512 Comm: syz.2.305 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 53.621521][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.621547][ T4512] Call Trace: [ 53.621557][ T4512] [ 53.621569][ T4512] dump_stack_lvl+0xf2/0x150 [ 53.621685][ T4512] dump_stack+0x15/0x1a [ 53.621711][ T4512] should_fail_ex+0x24a/0x260 [ 53.621768][ T4512] should_fail+0xb/0x10 [ 53.621861][ T4512] should_fail_usercopy+0x1a/0x20 [ 53.621902][ T4512] strncpy_from_user+0x25/0x210 [ 53.621934][ T4512] ? path_lookupat+0x209/0x2b0 [ 53.621963][ T4512] strncpy_from_user_nofault+0x66/0xe0 [ 53.622067][ T4512] bpf_probe_read_user_str+0x2a/0x70 [ 53.622112][ T4512] bpf_prog_b1bc9f7c1f89903c+0x41/0x43 [ 53.622187][ T4512] bpf_trace_run3+0x10c/0x1d0 [ 53.622219][ T4512] ? user_path_at+0xff/0x120 [ 53.622284][ T4512] ? user_path_at+0xff/0x120 [ 53.622312][ T4512] kmem_cache_free+0x237/0x2d0 [ 53.622344][ T4512] user_path_at+0xff/0x120 [ 53.622374][ T4512] __se_sys_mount+0x24b/0x2d0 [ 53.622493][ T4512] ? fput+0x1c4/0x200 [ 53.622552][ T4512] __x64_sys_mount+0x67/0x80 [ 53.622592][ T4512] x64_sys_call+0x2c84/0x2dc0 [ 53.622627][ T4512] do_syscall_64+0xc9/0x1c0 [ 53.622668][ T4512] ? clear_bhb_loop+0x55/0xb0 [ 53.622728][ T4512] ? clear_bhb_loop+0x55/0xb0 [ 53.622761][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.622795][ T4512] RIP: 0033:0x7f4ba253d169 [ 53.622822][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.622888][ T4512] RSP: 002b:00007f4ba0ba7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.622911][ T4512] RAX: ffffffffffffffda RBX: 00007f4ba2755fa0 RCX: 00007f4ba253d169 [ 53.622927][ T4512] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 53.622943][ T4512] RBP: 00007f4ba0ba7090 R08: 0000400000000400 R09: 0000000000000000 [ 53.622960][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.622975][ T4512] R13: 0000000000000000 R14: 00007f4ba2755fa0 R15: 00007ffd1001e3f8 [ 53.622999][ T4512] [ 53.999174][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 53.999192][ T30] audit: type=1326 audit(1742387457.845:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.3.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253eb5d169 code=0x0 [ 54.029558][ T30] audit: type=1326 audit(1742387457.854:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.053285][ T30] audit: type=1326 audit(1742387457.854:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.076715][ T30] audit: type=1326 audit(1742387457.864:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.100499][ T30] audit: type=1326 audit(1742387457.864:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.124011][ T30] audit: type=1326 audit(1742387457.864:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.147601][ T30] audit: type=1326 audit(1742387457.864:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.147687][ T4543] loop3: detected capacity change from 0 to 1024 [ 54.171067][ T30] audit: type=1326 audit(1742387457.873:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.177673][ T4543] EXT4-fs: Ignoring removed orlov option [ 54.200623][ T30] audit: type=1326 audit(1742387457.873:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.206270][ T4543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.235215][ T30] audit: type=1326 audit(1742387457.873:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7b5110d169 code=0x7ffc0000 [ 54.244495][ T4543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.281316][ T4543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.381228][ T4545] Falling back ldisc for ttyS3. [ 54.454655][ T4573] loop4: detected capacity change from 0 to 512 [ 54.477574][ T4573] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.484164][ T4573] ext3: Unknown parameter 'dont_hash' [ 54.632820][ T4589] loop9: detected capacity change from 0 to 7 [ 54.639392][ T4589] buffer_io_error: 439 callbacks suppressed [ 54.639415][ T4589] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.654935][ T4589] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.662877][ T4589] loop9: unable to read partition table [ 54.726007][ T4584] FAULT_INJECTION: forcing a failure. [ 54.726007][ T4584] name failslab, interval 1, probability 0, space 0, times 0 [ 54.738728][ T4584] CPU: 1 UID: 0 PID: 4584 Comm: syz.0.332 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 54.738756][ T4584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.738770][ T4584] Call Trace: [ 54.738779][ T4584] [ 54.738789][ T4584] dump_stack_lvl+0xf2/0x150 [ 54.738824][ T4584] dump_stack+0x15/0x1a [ 54.738867][ T4584] should_fail_ex+0x24a/0x260 [ 54.738953][ T4584] should_failslab+0x8f/0xb0 [ 54.739015][ T4584] kmem_cache_alloc_noprof+0x52/0x320 [ 54.739039][ T4584] ? security_file_alloc+0x32/0x100 [ 54.739150][ T4584] security_file_alloc+0x32/0x100 [ 54.739287][ T4584] init_file+0x5d/0x1b0 [ 54.739313][ T4584] alloc_empty_file+0xea/0x200 [ 54.739338][ T4584] path_openat+0x6a/0x1fc0 [ 54.739372][ T4584] ? arch_irq_work_raise+0x27/0x50 [ 54.739404][ T4584] ? default_send_IPI_self+0x38/0x80 [ 54.739529][ T4584] ? arch_irq_work_raise+0x48/0x50 [ 54.739558][ T4584] ? __irq_work_queue_local+0x82/0x1d0 [ 54.739597][ T4584] do_filp_open+0x107/0x230 [ 54.739632][ T4584] do_sys_openat2+0xab/0x120 [ 54.739710][ T4584] __x64_sys_openat+0xf3/0x120 [ 54.739736][ T4584] x64_sys_call+0x2b30/0x2dc0 [ 54.739765][ T4584] do_syscall_64+0xc9/0x1c0 [ 54.739873][ T4584] ? clear_bhb_loop+0x55/0xb0 [ 54.739907][ T4584] ? clear_bhb_loop+0x55/0xb0 [ 54.739938][ T4584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.739965][ T4584] RIP: 0033:0x7f7b5110bad0 [ 54.740061][ T4584] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 54.740079][ T4584] RSP: 002b:00007f7b4f776f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 54.740101][ T4584] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7b5110bad0 [ 54.740116][ T4584] RDX: 0000000000000002 RSI: 00007f7b4f776fa0 RDI: 00000000ffffff9c [ 54.740131][ T4584] RBP: 00007f7b4f776fa0 R08: 0000000000000000 R09: 0000000000000000 [ 54.740206][ T4584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 54.740220][ T4584] R13: 0000000000000000 R14: 00007f7b51325fa0 R15: 00007ffca933d888 [ 54.740239][ T4584] [ 54.965104][ T4589] loop_reread_partitions: partition scan of loop9 (熝鵂诂Ыd皮脆杻荨夥 [ 54.965104][ T4589] U) failed (rc=-5) [ 55.161580][ T4605] futex_wake_op: syz.3.339 tries to shift op by -1; fix this program [ 55.348099][ T4612] Falling back ldisc for ttyS3. [ 55.663555][ T4621] loop2: detected capacity change from 0 to 764 [ 56.061062][ T4644] lo: entered promiscuous mode [ 56.095087][ T4644] lo: entered allmulticast mode [ 56.277363][ T4641] lo: left allmulticast mode [ 56.282058][ T4641] lo: left promiscuous mode [ 56.530674][ T4662] loop4: detected capacity change from 0 to 764 [ 56.643990][ T4676] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.654977][ T4676] __nla_validate_parse: 10 callbacks suppressed [ 56.654994][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.369'. [ 56.688869][ T4680] lo: entered promiscuous mode [ 56.693969][ T4680] lo: entered allmulticast mode [ 56.733550][ T4679] lo: left allmulticast mode [ 56.738206][ T4679] lo: left promiscuous mode [ 56.765042][ T4687] netlink: 25 bytes leftover after parsing attributes in process `syz.1.371'. [ 56.774387][ T4687] netlink: 5 bytes leftover after parsing attributes in process `syz.1.371'. [ 56.785285][ T4687] 1猉功D: renamed from 30猉功D (while UP) [ 56.796728][ T4687] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 57.053996][ T4721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 57.065546][ T4715] Falling back ldisc for ttyS3. [ 57.362202][ T4749] FAULT_INJECTION: forcing a failure. [ 57.362202][ T4749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.375425][ T4749] CPU: 0 UID: 0 PID: 4749 Comm: syz.2.398 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 57.375498][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.375510][ T4749] Call Trace: [ 57.375516][ T4749] [ 57.375522][ T4749] dump_stack_lvl+0xf2/0x150 [ 57.375552][ T4749] dump_stack+0x15/0x1a [ 57.375576][ T4749] should_fail_ex+0x24a/0x260 [ 57.375662][ T4749] should_fail+0xb/0x10 [ 57.375691][ T4749] should_fail_usercopy+0x1a/0x20 [ 57.375725][ T4749] _copy_from_user+0x1c/0xa0 [ 57.375747][ T4749] copy_msghdr_from_user+0x54/0x2a0 [ 57.375836][ T4749] ? __fget_files+0x17c/0x1c0 [ 57.375908][ T4749] __sys_sendmsg+0x13e/0x230 [ 57.375945][ T4749] __x64_sys_sendmsg+0x46/0x50 [ 57.375970][ T4749] x64_sys_call+0x2734/0x2dc0 [ 57.376015][ T4749] do_syscall_64+0xc9/0x1c0 [ 57.376049][ T4749] ? clear_bhb_loop+0x55/0xb0 [ 57.376080][ T4749] ? clear_bhb_loop+0x55/0xb0 [ 57.376153][ T4749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.376179][ T4749] RIP: 0033:0x7f4ba253d169 [ 57.376194][ T4749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.376214][ T4749] RSP: 002b:00007f4ba0ba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.376282][ T4749] RAX: ffffffffffffffda RBX: 00007f4ba2755fa0 RCX: 00007f4ba253d169 [ 57.376294][ T4749] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 57.376309][ T4749] RBP: 00007f4ba0ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.376323][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.376337][ T4749] R13: 0000000000000000 R14: 00007f4ba2755fa0 R15: 00007ffd1001e3f8 [ 57.376358][ T4749] [ 57.673976][ T4755] Falling back ldisc for ttyS3. [ 57.707795][ T4761] tipc: Enabling of bearer rejected, failed to enable media [ 57.822716][ T4778] FAULT_INJECTION: forcing a failure. [ 57.822716][ T4778] name failslab, interval 1, probability 0, space 0, times 0 [ 57.835548][ T4778] CPU: 1 UID: 0 PID: 4778 Comm: syz.1.411 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 57.835576][ T4778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.835588][ T4778] Call Trace: [ 57.835595][ T4778] [ 57.835602][ T4778] dump_stack_lvl+0xf2/0x150 [ 57.835671][ T4778] dump_stack+0x15/0x1a [ 57.835692][ T4778] should_fail_ex+0x24a/0x260 [ 57.835723][ T4778] should_failslab+0x8f/0xb0 [ 57.835753][ T4778] kmem_cache_alloc_noprof+0x52/0x320 [ 57.835781][ T4778] ? getname_flags+0x81/0x3b0 [ 57.835815][ T4778] getname_flags+0x81/0x3b0 [ 57.835847][ T4778] getname+0x17/0x20 [ 57.835862][ T4778] do_sys_openat2+0x67/0x120 [ 57.835883][ T4778] __x64_sys_creat+0x66/0x90 [ 57.835973][ T4778] x64_sys_call+0x1084/0x2dc0 [ 57.835999][ T4778] do_syscall_64+0xc9/0x1c0 [ 57.836030][ T4778] ? clear_bhb_loop+0x55/0xb0 [ 57.836057][ T4778] ? clear_bhb_loop+0x55/0xb0 [ 57.836116][ T4778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.836142][ T4778] RIP: 0033:0x7f48dccad169 [ 57.836221][ T4778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.836239][ T4778] RSP: 002b:00007f48db317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 57.836257][ T4778] RAX: ffffffffffffffda RBX: 00007f48dcec5fa0 RCX: 00007f48dccad169 [ 57.836269][ T4778] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000400000000380 [ 57.836281][ T4778] RBP: 00007f48db317090 R08: 0000000000000000 R09: 0000000000000000 [ 57.836292][ T4778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.836303][ T4778] R13: 0000000000000000 R14: 00007f48dcec5fa0 R15: 00007ffd32055188 [ 57.836321][ T4778] [ 58.080351][ T4782] Falling back ldisc for ttyS3. [ 58.091558][ T4785] netlink: 25 bytes leftover after parsing attributes in process `syz.2.412'. [ 58.122889][ T4785] netlink: 5 bytes leftover after parsing attributes in process `syz.2.412'. [ 58.157796][ T4785] 0猉功D: renamed from 31猉功D (while UP) [ 58.188236][ T4785] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 58.247642][ T4808] loop4: detected capacity change from 0 to 512 [ 58.260162][ T4808] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 58.340791][ T4810] loop3: detected capacity change from 0 to 128 [ 58.355580][ T4810] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.372804][ T4812] loop1: detected capacity change from 0 to 512 [ 58.373200][ T4810] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.379637][ T4812] EXT4-fs: quotafile must be on filesystem root [ 58.386954][ T4810] FAT-fs (loop3): Filesystem has been set read-only [ 58.401627][ T4810] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.409545][ T4810] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.458360][ T4817] netlink: 64 bytes leftover after parsing attributes in process `syz.0.426'. [ 58.470540][ T4817] futex_wake_op: syz.0.426 tries to shift op by -1; fix this program [ 58.539627][ T4820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.426'. [ 58.931941][ T4831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.430'. [ 58.944677][ T4831] futex_wake_op: syz.2.430 tries to shift op by -1; fix this program [ 59.013786][ T4832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.430'. [ 59.231963][ T4845] lo: entered promiscuous mode [ 59.238070][ T4845] lo: entered allmulticast mode [ 59.248162][ T4844] lo: left allmulticast mode [ 59.252805][ T4844] lo: left promiscuous mode [ 59.345330][ T4854] 0猉功D: renamed from 31猉功D (while UP) [ 59.354555][ T4854] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 59.426108][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 59.426144][ T30] audit: type=1400 audit(1742387462.878:1925): avc: denied { create } for pid=4855 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.452228][ T30] audit: type=1400 audit(1742387462.887:1926): avc: denied { create } for pid=4855 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.472378][ T30] audit: type=1400 audit(1742387462.887:1927): avc: denied { read } for pid=4855 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.492389][ T30] audit: type=1400 audit(1742387462.887:1928): avc: denied { bind } for pid=4855 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.512847][ T30] audit: type=1400 audit(1742387462.887:1929): avc: denied { create } for pid=4855 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.532324][ T30] audit: type=1400 audit(1742387462.887:1930): avc: denied { write } for pid=4855 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.553209][ T30] audit: type=1400 audit(1742387462.990:1931): avc: denied { execute } for pid=4858 comm="syz.0.440" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 59.602627][ T30] audit: type=1400 audit(1742387463.083:1932): avc: denied { write } for pid=4864 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.622801][ T30] audit: type=1400 audit(1742387463.083:1933): avc: denied { nlmsg_write } for pid=4864 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.649870][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.671300][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.693116][ T30] audit: type=1400 audit(1742387463.111:1934): avc: denied { relabelfrom } for pid=4866 comm="+}[@" name="NETLINK" dev="sockfs" ino=7753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.730971][ T4870] loop4: detected capacity change from 0 to 256 [ 59.749036][ T4870] FAT-fs (loop4): codepage cp863 not found [ 59.806375][ T4880] lo: entered promiscuous mode [ 59.822839][ T4880] lo: entered allmulticast mode [ 59.856337][ T4879] lo: left allmulticast mode [ 59.861036][ T4879] lo: left promiscuous mode [ 59.887714][ T4886] FAULT_INJECTION: forcing a failure. [ 59.887714][ T4886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.901013][ T4886] CPU: 1 UID: 0 PID: 4886 Comm: syz.2.449 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 59.901045][ T4886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.901060][ T4886] Call Trace: [ 59.901068][ T4886] [ 59.901076][ T4886] dump_stack_lvl+0xf2/0x150 [ 59.901136][ T4886] dump_stack+0x15/0x1a [ 59.901159][ T4886] should_fail_ex+0x24a/0x260 [ 59.901200][ T4886] should_fail+0xb/0x10 [ 59.901235][ T4886] should_fail_usercopy+0x1a/0x20 [ 59.901346][ T4886] _copy_from_iter+0xd5/0xd00 [ 59.901386][ T4886] ? __alloc_skb+0x1b5/0x310 [ 59.901413][ T4886] ? kmalloc_reserve+0x16e/0x190 [ 59.901499][ T4886] ? __build_skb_around+0x196/0x1f0 [ 59.901529][ T4886] ? __alloc_skb+0x21f/0x310 [ 59.901550][ T4886] ? __virt_addr_valid+0x1ed/0x250 [ 59.901581][ T4886] ? __check_object_size+0x364/0x520 [ 59.901675][ T4886] netlink_sendmsg+0x460/0x6e0 [ 59.901706][ T4886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.901730][ T4886] __sock_sendmsg+0x140/0x180 [ 59.901835][ T4886] ____sys_sendmsg+0x326/0x4b0 [ 59.901953][ T4886] __sys_sendmsg+0x19d/0x230 [ 59.902017][ T4886] __x64_sys_sendmsg+0x46/0x50 [ 59.902051][ T4886] x64_sys_call+0x2734/0x2dc0 [ 59.902142][ T4886] do_syscall_64+0xc9/0x1c0 [ 59.902182][ T4886] ? clear_bhb_loop+0x55/0xb0 [ 59.902219][ T4886] ? clear_bhb_loop+0x55/0xb0 [ 59.902251][ T4886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.902307][ T4886] RIP: 0033:0x7f4ba253d169 [ 59.902326][ T4886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.902350][ T4886] RSP: 002b:00007f4ba0ba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.902378][ T4886] RAX: ffffffffffffffda RBX: 00007f4ba2755fa0 RCX: 00007f4ba253d169 [ 59.902396][ T4886] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000003 [ 59.902411][ T4886] RBP: 00007f4ba0ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.902473][ T4886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.902496][ T4886] R13: 0000000000000000 R14: 00007f4ba2755fa0 R15: 00007ffd1001e3f8 [ 59.902521][ T4886] [ 60.140957][ T4888] futex_wake_op: syz.4.450 tries to shift op by -1; fix this program [ 60.227279][ T4901] loop1: detected capacity change from 0 to 512 [ 60.235472][ T4901] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.242128][ T4901] ext3: Unknown parameter 'dont_hash' [ 60.280940][ T4909] futex_wake_op: syz.3.458 tries to shift op by -1; fix this program [ 60.359464][ T4915] lo: entered allmulticast mode [ 60.368308][ T4913] Falling back ldisc for ttyS3. [ 60.401487][ T4914] lo: left allmulticast mode [ 60.514129][ T4928] loop2: detected capacity change from 0 to 1024 [ 60.521216][ T4929] 0猉功D: renamed from 31猉功D (while UP) [ 60.522348][ T4928] EXT4-fs: Ignoring removed orlov option [ 60.532795][ T4928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.541547][ T4929] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 60.574447][ T4928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.589959][ T4928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.803668][ T4947] loop1: detected capacity change from 0 to 8192 [ 61.146705][ T4954] veth1_to_batadv: entered promiscuous mode [ 61.175794][ T4954] macsec1: entered promiscuous mode [ 61.287101][ T4956] Falling back ldisc for ttyS3. [ 61.412413][ T4977] futex_wake_op: syz.4.483 tries to shift op by -1; fix this program [ 61.480800][ T4999] futex_wake_op: syz.0.484 tries to shift op by -1; fix this program [ 62.272810][ T5050] FAULT_INJECTION: forcing a failure. [ 62.272810][ T5050] name failslab, interval 1, probability 0, space 0, times 0 [ 62.285693][ T5050] CPU: 1 UID: 0 PID: 5050 Comm: syz.3.487 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 62.285722][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.285736][ T5050] Call Trace: [ 62.285743][ T5050] [ 62.285752][ T5050] dump_stack_lvl+0xf2/0x150 [ 62.285786][ T5050] dump_stack+0x15/0x1a [ 62.285809][ T5050] should_fail_ex+0x24a/0x260 [ 62.285855][ T5050] should_failslab+0x8f/0xb0 [ 62.285937][ T5050] kmem_cache_alloc_noprof+0x52/0x320 [ 62.285964][ T5050] ? skb_clone+0x154/0x1f0 [ 62.285995][ T5050] skb_clone+0x154/0x1f0 [ 62.286023][ T5050] __netlink_deliver_tap+0x2bd/0x4f0 [ 62.286211][ T5050] netlink_sendskb+0x126/0x150 [ 62.286244][ T5050] netlink_unicast+0x291/0x670 [ 62.286360][ T5050] netlink_ack+0x4b7/0x4f0 [ 62.286399][ T5050] netlink_rcv_skb+0x19c/0x230 [ 62.286467][ T5050] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 62.286543][ T5050] nfnetlink_rcv+0x16c/0x15d0 [ 62.286624][ T5050] ? kmem_cache_free+0xdc/0x2d0 [ 62.286706][ T5050] ? nlmon_xmit+0x51/0x60 [ 62.286823][ T5050] ? __kfree_skb+0x102/0x150 [ 62.286851][ T5050] ? consume_skb+0x49/0x160 [ 62.286875][ T5050] ? nlmon_xmit+0x51/0x60 [ 62.286911][ T5050] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 62.286962][ T5050] ? __dev_queue_xmit+0xb6e/0x2090 [ 62.286993][ T5050] ? ref_tracker_free+0x3a5/0x410 [ 62.287135][ T5050] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 62.287184][ T5050] netlink_unicast+0x599/0x670 [ 62.287219][ T5050] netlink_sendmsg+0x5cc/0x6e0 [ 62.287244][ T5050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.287267][ T5050] __sock_sendmsg+0x140/0x180 [ 62.287340][ T5050] ____sys_sendmsg+0x326/0x4b0 [ 62.287369][ T5050] __sys_sendmsg+0x19d/0x230 [ 62.287406][ T5050] __x64_sys_sendmsg+0x46/0x50 [ 62.287434][ T5050] x64_sys_call+0x2734/0x2dc0 [ 62.287468][ T5050] do_syscall_64+0xc9/0x1c0 [ 62.287505][ T5050] ? clear_bhb_loop+0x55/0xb0 [ 62.287538][ T5050] ? clear_bhb_loop+0x55/0xb0 [ 62.287624][ T5050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.287653][ T5050] RIP: 0033:0x7f253eb5d169 [ 62.287718][ T5050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.287754][ T5050] RSP: 002b:00007f253d1c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.287810][ T5050] RAX: ffffffffffffffda RBX: 00007f253ed75fa0 RCX: 00007f253eb5d169 [ 62.287824][ T5050] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 62.287837][ T5050] RBP: 00007f253d1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.287852][ T5050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.287876][ T5050] R13: 0000000000000000 R14: 00007f253ed75fa0 R15: 00007fffcc7f1258 [ 62.287896][ T5050] [ 62.668858][ T5064] __nla_validate_parse: 13 callbacks suppressed [ 62.668880][ T5064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.489'. [ 62.706130][ T5067] netlink: 25 bytes leftover after parsing attributes in process `syz.3.490'. [ 62.729598][ T5067] netlink: 5 bytes leftover after parsing attributes in process `syz.3.490'. [ 62.738837][ T5067] 1猉功D: renamed from 30猉功D (while UP) [ 62.748691][ T5067] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 62.773301][ T5075] loop1: detected capacity change from 0 to 8192 [ 62.825915][ T5080] loop2: detected capacity change from 0 to 512 [ 62.832572][ T5080] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.839189][ T5080] ext3: Unknown parameter 'dont_hash' [ 63.008343][ T5084] Falling back ldisc for ttyS3. [ 63.055557][ T5087] netlink: 64 bytes leftover after parsing attributes in process `syz.2.499'. [ 63.067818][ T5087] futex_wake_op: syz.2.499 tries to shift op by -1; fix this program [ 63.145360][ T5089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 63.556484][ T5092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.500'. [ 63.583420][ T5094] loop3: detected capacity change from 0 to 2048 [ 63.596857][ T5094] EXT4-fs: Ignoring removed bh option [ 63.603471][ T5092] futex_wake_op: syz.0.500 tries to shift op by -1; fix this program [ 63.622888][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.636387][ T5094] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.679774][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.690717][ T5098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.500'. [ 63.758655][ T125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.850626][ T125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.940808][ T125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.006430][ T125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.021213][ T5106] Failed to initialize the IGMP autojoin socket (err -2) [ 64.039957][ T5126] loop2: detected capacity change from 0 to 1024 [ 64.046961][ T5126] EXT4-fs: Ignoring removed orlov option [ 64.052756][ T5126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.064447][ T5125] program syz.1.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.081453][ T5126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.094934][ T5126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.158212][ T125] bridge_slave_1: left allmulticast mode [ 64.164211][ T125] bridge_slave_1: left promiscuous mode [ 64.170163][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.178722][ T125] bridge_slave_0: left allmulticast mode [ 64.184440][ T125] bridge_slave_0: left promiscuous mode [ 64.190318][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.304285][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.314830][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.325641][ T125] bond0 (unregistering): Released all slaves [ 64.345060][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 64.374857][ T125] hsr_slave_0: left promiscuous mode [ 64.380625][ T125] hsr_slave_1: left promiscuous mode [ 64.386450][ T125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.394215][ T125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.401996][ T125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.409516][ T125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.419489][ T125] veth1_macvtap: left promiscuous mode [ 64.425039][ T125] veth0_macvtap: left promiscuous mode [ 64.430662][ T125] veth1_vlan: left promiscuous mode [ 64.435938][ T125] veth0_vlan: left promiscuous mode [ 64.514111][ T125] team0 (unregistering): Port device team_slave_1 removed [ 64.523811][ T125] team0 (unregistering): Port device team_slave_0 removed [ 64.524867][ T5139] netlink: 25 bytes leftover after parsing attributes in process `syz.0.513'. [ 64.575472][ T5139] netlink: 5 bytes leftover after parsing attributes in process `syz.0.513'. [ 64.586030][ T5139] 1猉功D: renamed from 30猉功D (while UP) [ 64.594807][ T5139] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 64.610662][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.617849][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.625221][ T5106] bridge_slave_0: entered allmulticast mode [ 64.632202][ T5106] bridge_slave_0: entered promiscuous mode [ 64.640367][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.647652][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.655727][ T5106] bridge_slave_1: entered allmulticast mode [ 64.662292][ T5106] bridge_slave_1: entered promiscuous mode [ 64.684174][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.697948][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.724747][ T5106] team0: Port device team_slave_0 added [ 64.733674][ T5106] team0: Port device team_slave_1 added [ 64.754203][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.761246][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.787519][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.807532][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.815025][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.841145][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.909484][ T5106] hsr_slave_0: entered promiscuous mode [ 64.917190][ T5106] hsr_slave_1: entered promiscuous mode [ 64.923585][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.931321][ T5106] Cannot create hsr debugfs directory [ 65.070214][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 65.070244][ T30] audit: type=1326 audit(1742387468.191:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.099948][ T30] audit: type=1326 audit(1742387468.191:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.123352][ T30] audit: type=1326 audit(1742387468.191:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.146785][ T30] audit: type=1326 audit(1742387468.191:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.170214][ T30] audit: type=1326 audit(1742387468.191:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.193597][ T30] audit: type=1326 audit(1742387468.191:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.216912][ T30] audit: type=1326 audit(1742387468.191:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.240284][ T30] audit: type=1326 audit(1742387468.191:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.263920][ T30] audit: type=1326 audit(1742387468.191:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.267537][ T5148] loop2: detected capacity change from 0 to 8192 [ 65.287539][ T30] audit: type=1326 audit(1742387468.191:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 65.397860][ T5144] Set syz1 is full, maxelem 65536 reached [ 65.485338][ T5106] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 65.594907][ T5106] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 65.606040][ T5106] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 65.631434][ T5106] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 65.731108][ T5170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.523'. [ 65.753433][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.808190][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.815358][ T4994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.832978][ T5170] futex_wake_op: syz.0.523 tries to shift op by -1; fix this program [ 65.845706][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.852928][ T4994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.951381][ T5178] loop1: detected capacity change from 0 to 1024 [ 65.977506][ T5178] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.988664][ T5178] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.039620][ T5178] JBD2: no valid journal superblock found [ 66.045559][ T5178] EXT4-fs (loop1): Could not load journal inode [ 66.089387][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.097696][ T5178] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 66.112795][ T5178] loop1: detected capacity change from 0 to 512 [ 66.122338][ T5178] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.131559][ T5178] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 66.141304][ T5178] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 66.221613][ T5193] futex_wake_op: syz.1.526 tries to shift op by -1; fix this program [ 66.330611][ T5106] veth0_vlan: entered promiscuous mode [ 66.342406][ T5106] veth1_vlan: entered promiscuous mode [ 66.392603][ T5106] veth0_macvtap: entered promiscuous mode [ 66.409640][ T5106] veth1_macvtap: entered promiscuous mode [ 66.432912][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.443537][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.453378][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.463889][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.473735][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.484203][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.494090][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.504662][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.518008][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.535744][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.546928][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.557139][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.568131][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.577951][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.588504][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.598433][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.609375][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.623719][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.636327][ T5106] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 66.663265][ T5106] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 66.680610][ T5106] wireguard: wg0: Could not create IPv4 socket [ 66.690323][ T5106] wireguard: wg1: Could not create IPv4 socket [ 66.697726][ T5106] wireguard: wg2: Could not create IPv4 socket [ 66.996019][ T5224] Falling back ldisc for ttyS3. [ 67.049760][ T5228] Falling back ldisc for ttyS3. [ 67.137659][ T5234] loop2: detected capacity change from 0 to 512 [ 67.171747][ T5234] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.178410][ T5234] ext3: Unknown parameter 'dont_hash' [ 67.210239][ T5236] Falling back ldisc for ttyS3. [ 67.303107][ T5246] loop2: detected capacity change from 0 to 164 [ 67.374795][ T5251] loop3: detected capacity change from 0 to 8192 [ 67.560466][ T5263] futex_wake_op: syz.5.548 tries to shift op by -1; fix this program [ 67.609616][ T5262] 0猉功D: renamed from 31猉功D (while UP) [ 67.644103][ T5262] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 68.017533][ T5264] bio_check_eod: 78 callbacks suppressed [ 68.017551][ T5264] syz.2.542: attempt to access beyond end of device [ 68.017551][ T5264] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 68.037466][ T5264] syz.2.542: attempt to access beyond end of device [ 68.037466][ T5264] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.189267][ T5251] veth1_to_batadv: entered promiscuous mode [ 68.195708][ T5251] macsec1: entered promiscuous mode [ 68.599485][ T5282] Falling back ldisc for ttyS3. [ 68.641080][ T5295] loop2: detected capacity change from 0 to 512 [ 68.674373][ T5295] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.681049][ T5295] ext3: Unknown parameter 'dont_hash' [ 68.733287][ T5299] loop5: detected capacity change from 0 to 512 [ 68.743340][ T5302] __nla_validate_parse: 6 callbacks suppressed [ 68.743362][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 68.761263][ T5299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.794882][ T5299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.796151][ T5309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.563'. [ 68.821333][ T5309] futex_wake_op: syz.2.563 tries to shift op by -1; fix this program [ 68.825284][ T5299] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.869146][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.896817][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.563'. [ 68.948455][ T5315] loop1: detected capacity change from 0 to 736 [ 68.979259][ T5316] netlink: 25 bytes leftover after parsing attributes in process `syz.5.564'. [ 68.988749][ T5316] netlink: 5 bytes leftover after parsing attributes in process `syz.5.564'. [ 68.997982][ T5316] 0猉功D: renamed from eql (while UP) [ 69.004677][ T5316] 0猉功D: entered allmulticast mode [ 69.010652][ T5316] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 69.032659][ T5319] netlink: 108 bytes leftover after parsing attributes in process `syz.1.566'. [ 69.184098][ T5323] netlink: 112 bytes leftover after parsing attributes in process `syz.3.567'. [ 69.273026][ T5329] Falling back ldisc for ttyS3. [ 69.326552][ T5331] Falling back ldisc for ttyS3. [ 69.582261][ T5349] lo: entered promiscuous mode [ 69.587503][ T5349] lo: entered allmulticast mode [ 69.652363][ T5347] lo: left allmulticast mode [ 69.657107][ T5347] lo: left promiscuous mode [ 69.731823][ T5359] loop3: detected capacity change from 0 to 512 [ 69.740309][ T5359] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.746966][ T5359] ext3: Unknown parameter 'dont_hash' [ 69.754095][ T5357] Falling back ldisc for ttyS3. [ 69.756478][ T5361] netlink: 64 bytes leftover after parsing attributes in process `syz.0.584'. [ 69.773722][ T5361] futex_wake_op: syz.0.584 tries to shift op by -1; fix this program [ 69.888085][ T5364] netlink: 'syz.2.585': attribute type 4 has an invalid length. [ 70.011853][ T5390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.593'. [ 70.024501][ T5390] futex_wake_op: syz.2.593 tries to shift op by -1; fix this program [ 70.037357][ T5390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.593'. [ 70.142424][ T5397] loop1: detected capacity change from 0 to 512 [ 70.149089][ T5397] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.156116][ T5397] ext3: Unknown parameter 'dont_hash' [ 70.171110][ T5395] Falling back ldisc for ttyS3. [ 70.217599][ T5408] futex_wake_op: syz.1.601 tries to shift op by -1; fix this program [ 70.229014][ T5409] 1猉功D: renamed from 30猉功D (while UP) [ 70.236585][ T5409] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 70.396257][ T5420] Falling back ldisc for ttyS3. [ 70.543588][ T5426] loop3: detected capacity change from 0 to 512 [ 70.551135][ T5426] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.557922][ T5426] ext3: Unknown parameter 'dont_hash' [ 70.642428][ T5431] Falling back ldisc for ttyS3. [ 70.808335][ T5445] lo: entered promiscuous mode [ 70.824444][ T5445] lo: entered allmulticast mode [ 70.855682][ T5444] lo: left allmulticast mode [ 70.860418][ T5444] lo: left promiscuous mode [ 70.933656][ T5449] loop3: detected capacity change from 0 to 8192 [ 71.175980][ T5459] Falling back ldisc for ttyS3. [ 71.253674][ T5477] lo: entered allmulticast mode [ 71.316472][ T5476] lo: left allmulticast mode [ 71.419428][ T5487] 0猉功D: renamed from 31猉功D (while UP) [ 71.427548][ T5487] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 71.532926][ T30] kauditd_printk_skb: 470 callbacks suppressed [ 71.532944][ T30] audit: type=1400 audit(1742387474.243:2684): avc: denied { write } for pid=5490 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.570603][ T30] audit: type=1326 audit(1742387474.280:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.594057][ T30] audit: type=1326 audit(1742387474.280:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.629801][ T5493] futex_wake_op: syz.1.636 tries to shift op by -1; fix this program [ 71.648540][ T30] audit: type=1326 audit(1742387474.280:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.672159][ T30] audit: type=1326 audit(1742387474.280:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.695864][ T30] audit: type=1326 audit(1742387474.280:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.719573][ T30] audit: type=1326 audit(1742387474.327:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.743057][ T30] audit: type=1326 audit(1742387474.327:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.766599][ T30] audit: type=1326 audit(1742387474.327:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 71.790041][ T30] audit: type=1326 audit(1742387474.336:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 72.125154][ T5500] futex_wake_op: syz.0.638 tries to shift op by -1; fix this program [ 72.338668][ T5513] lo: entered promiscuous mode [ 72.343774][ T5513] lo: entered allmulticast mode [ 72.374196][ T5512] lo: left allmulticast mode [ 72.378860][ T5512] lo: left promiscuous mode [ 72.620493][ T5523] loop1: detected capacity change from 0 to 8192 [ 72.814483][ T5517] cgroup: fork rejected by pids controller in /syz2 [ 72.831076][ T5562] 0猉功D: renamed from 31猉功D (while UP) [ 72.838837][ T5562] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 73.310898][ T5796] loop5: detected capacity change from 0 to 512 [ 73.322034][ T5796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.367733][ T5796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.380574][ T5796] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.408150][ T5807] futex_wake_op: syz.0.657 tries to shift op by -1; fix this program [ 73.436820][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.571310][ T5814] Falling back ldisc for ttyS3. [ 73.656669][ T5820] Falling back ldisc for ttyS3. [ 73.908140][ T5845] 1猉功D: renamed from 30猉功D (while UP) [ 73.920816][ T5845] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 74.063833][ T5853] Falling back ldisc for ttyS3. [ 74.127045][ T5863] Falling back ldisc for ttyS3. [ 74.228348][ T5875] __nla_validate_parse: 17 callbacks suppressed [ 74.228419][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'. [ 74.291699][ T5875] dummy0: entered promiscuous mode [ 74.324632][ T5875] dummy0: left promiscuous mode [ 74.483503][ T5894] lo: entered promiscuous mode [ 74.488817][ T5894] lo: entered allmulticast mode [ 74.490428][ T5889] Falling back ldisc for ttyS3. [ 74.535002][ T5893] lo: left allmulticast mode [ 74.539686][ T5893] lo: left promiscuous mode [ 74.548050][ T5900] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 74.552011][ T5904] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 74.552011][ T5904] program syz.3.697 not setting count and/or reply_len properly [ 74.555858][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 74.588457][ T5903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.698'. [ 74.600946][ T5903] futex_wake_op: syz.2.698 tries to shift op by -1; fix this program [ 74.637662][ T5911] netlink: 64 bytes leftover after parsing attributes in process `syz.3.701'. [ 74.652934][ T5911] futex_wake_op: syz.3.701 tries to shift op by -1; fix this program [ 74.668530][ T5916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 74.690848][ T5911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.701'. [ 74.745329][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 74.813034][ T5918] dummy0: entered promiscuous mode [ 74.835791][ T5918] dummy0: left promiscuous mode [ 74.880999][ T5935] lo: entered promiscuous mode [ 74.886088][ T5935] lo: entered allmulticast mode [ 74.950315][ T5934] lo: left allmulticast mode [ 74.955010][ T5934] lo: left promiscuous mode [ 75.089711][ T5946] Falling back ldisc for ttyS3. [ 75.352342][ T5975] lo: entered allmulticast mode [ 75.378605][ T5974] lo: left allmulticast mode [ 75.423714][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 75.471537][ T5977] dummy0: entered promiscuous mode [ 75.502601][ T5977] dummy0: left promiscuous mode [ 75.558733][ T5984] netlink: 64 bytes leftover after parsing attributes in process `syz.2.734'. [ 75.572735][ T5984] futex_wake_op: syz.2.734 tries to shift op by -1; fix this program [ 75.653856][ T5985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'. [ 75.768273][ T5998] 1猉功D: renamed from 30猉功D (while UP) [ 75.781717][ T5998] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 75.844747][ T6007] futex_wake_op: syz.0.733 tries to shift op by -1; fix this program [ 75.945167][ T6012] Falling back ldisc for ttyS3. [ 76.018964][ T6015] Falling back ldisc for ttyS3. [ 76.242369][ T6045] lo: entered promiscuous mode [ 76.247402][ T6045] lo: entered allmulticast mode [ 76.275603][ T6043] lo: left allmulticast mode [ 76.280363][ T6043] lo: left promiscuous mode [ 76.340210][ T6047] Falling back ldisc for ttyS3. [ 76.604831][ T6073] loop1: detected capacity change from 0 to 512 [ 76.651162][ T6073] EXT4-fs (loop1): too many log groups per flexible block group [ 76.658942][ T6073] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 76.670865][ T6073] EXT4-fs (loop1): mount failed [ 76.762956][ T6090] loop3: detected capacity change from 0 to 1024 [ 76.774165][ T6090] EXT4-fs: Ignoring removed orlov option [ 76.780065][ T6090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.792034][ T6087] Falling back ldisc for ttyS3. [ 76.846600][ T6090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.871037][ T6090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.025814][ T30] kauditd_printk_skb: 546 callbacks suppressed [ 77.025834][ T30] audit: type=1326 audit(1742387479.387:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.058523][ T6117] 0猉功D: renamed from 31猉功D (while UP) [ 77.062166][ T30] audit: type=1326 audit(1742387479.387:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.088294][ T30] audit: type=1326 audit(1742387479.387:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.088385][ T30] audit: type=1326 audit(1742387479.387:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.088420][ T30] audit: type=1326 audit(1742387479.387:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.088457][ T30] audit: type=1326 audit(1742387479.387:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.088519][ T30] audit: type=1326 audit(1742387479.387:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.092637][ T6117] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 77.119803][ T30] audit: type=1326 audit(1742387479.415:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.215760][ T6116] futex_wake_op: syz.2.773 tries to shift op by -1; fix this program [ 77.221207][ T30] audit: type=1326 audit(1742387479.415:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.276577][ T30] audit: type=1326 audit(1742387479.425:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6115 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 77.355495][ T6122] Falling back ldisc for ttyS3. [ 77.449770][ T6136] loop5: detected capacity change from 0 to 512 [ 77.456574][ T6136] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.463238][ T6136] ext3: Unknown parameter 'dont_hash' [ 77.605632][ T6151] lo: entered promiscuous mode [ 77.610727][ T6151] lo: entered allmulticast mode [ 77.620830][ T6150] lo: left allmulticast mode [ 77.625865][ T6150] lo: left promiscuous mode [ 77.687047][ T6153] Falling back ldisc for ttyS3. [ 77.740477][ T6161] Falling back ldisc for ttyS3. [ 77.838217][ T6180] loop3: detected capacity change from 0 to 512 [ 77.847880][ T6180] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 77.866480][ T6183] loop5: detected capacity change from 0 to 512 [ 77.873371][ T6183] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.879940][ T6183] ext3: Unknown parameter 'dont_hash' [ 77.944723][ T6193] loop5: detected capacity change from 0 to 512 [ 77.955513][ T6193] EXT4-fs (loop5): too many log groups per flexible block group [ 77.963456][ T6193] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 77.970779][ T6198] loop1: detected capacity change from 0 to 1024 [ 77.977548][ T6198] EXT4-fs: Ignoring removed orlov option [ 77.983255][ T6198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.983936][ T6193] EXT4-fs (loop5): mount failed [ 78.009270][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.025780][ T6198] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.090307][ T6213] lo: entered promiscuous mode [ 78.096482][ T6213] lo: entered allmulticast mode [ 78.105869][ T6215] loop2: detected capacity change from 0 to 512 [ 78.115512][ T6215] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 78.145137][ T6211] lo: left allmulticast mode [ 78.149884][ T6211] lo: left promiscuous mode [ 78.164602][ T6219] loop3: detected capacity change from 0 to 512 [ 78.171509][ T6219] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.178309][ T6219] ext3: Unknown parameter 'dont_hash' [ 78.193669][ T6221] futex_wake_op: syz.5.810 tries to shift op by -1; fix this program [ 78.215157][ T6223] 1猉功D: renamed from 30猉功D (while UP) [ 78.223761][ T6223] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 78.443393][ T6242] loop3: detected capacity change from 0 to 512 [ 78.456000][ T6242] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 78.563530][ T6246] Falling back ldisc for ttyS3. [ 78.614605][ T6252] loop3: detected capacity change from 0 to 8192 [ 79.253484][ T6257] cgroup: fork rejected by pids controller in /syz1 [ 79.285560][ T6307] lo: entered allmulticast mode [ 79.297290][ T6306] lo: left allmulticast mode [ 79.325406][ T6316] loop2: detected capacity change from 0 to 512 [ 79.334144][ T6316] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 79.392407][ T6326] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 79.392407][ T6326] program syz.2.833 not setting count and/or reply_len properly [ 79.833870][ T6445] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 79.833870][ T6445] program syz.0.844 not setting count and/or reply_len properly [ 79.852230][ T6443] loop1: detected capacity change from 0 to 512 [ 79.863500][ T6441] loop2: detected capacity change from 0 to 512 [ 79.871189][ T6441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.881651][ T6443] EXT4-fs (loop1): too many log groups per flexible block group [ 79.889553][ T6443] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 79.896419][ T6443] EXT4-fs (loop1): mount failed [ 79.922880][ T6441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.955232][ T6441] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.000725][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.051420][ T6461] lo: entered allmulticast mode [ 80.102835][ T6459] lo: left allmulticast mode [ 80.112833][ T6460] loop1: detected capacity change from 0 to 8192 [ 80.189268][ T6473] lo: entered allmulticast mode [ 80.197520][ T6472] lo: left allmulticast mode [ 80.241759][ T6477] loop2: detected capacity change from 0 to 512 [ 80.274737][ T6475] loop5: detected capacity change from 0 to 1024 [ 80.292581][ T6475] EXT4-fs: Ignoring removed orlov option [ 80.298419][ T6475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.338626][ T6477] EXT4-fs (loop2): too many log groups per flexible block group [ 80.346445][ T6477] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 80.355464][ T6475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.390864][ T6477] EXT4-fs (loop2): mount failed [ 80.442134][ T6475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.594497][ T6496] Falling back ldisc for ttyS3. [ 80.739664][ T6509] lo: entered promiscuous mode [ 80.748461][ T6509] lo: entered allmulticast mode [ 80.761528][ T6507] lo: left allmulticast mode [ 80.766283][ T6507] lo: left promiscuous mode [ 80.811017][ T6513] loop3: detected capacity change from 0 to 512 [ 80.823153][ T6511] loop2: detected capacity change from 0 to 512 [ 80.827919][ T6513] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.836317][ T6513] ext3: Unknown parameter 'dont_hash' [ 80.876824][ T6511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.918758][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.931697][ T6511] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.969035][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.225262][ T6536] Falling back ldisc for ttyS3. [ 81.441685][ T6566] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 81.441685][ T6566] program syz.5.891 not setting count and/or reply_len properly [ 81.605371][ T6575] loop5: detected capacity change from 0 to 512 [ 81.615459][ T6575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.636236][ T6575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.649061][ T6575] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.672165][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.681141][ T6584] __nla_validate_parse: 13 callbacks suppressed [ 81.681163][ T6584] netlink: 25 bytes leftover after parsing attributes in process `syz.1.896'. [ 81.697715][ T6584] netlink: 5 bytes leftover after parsing attributes in process `syz.1.896'. [ 81.706689][ T6584] 1猉功D: renamed from 30猉功D (while UP) [ 81.720139][ T6584] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 81.846208][ T6596] Falling back ldisc for ttyS3. [ 81.924810][ T6601] netlink: 64 bytes leftover after parsing attributes in process `syz.0.904'. [ 81.940576][ T6601] futex_wake_op: syz.0.904 tries to shift op by -1; fix this program [ 81.985213][ T6605] loop5: detected capacity change from 0 to 512 [ 81.992306][ T6605] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 82.029236][ T6608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'. [ 82.194304][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 82.225261][ T6619] lo: entered allmulticast mode [ 82.263994][ T6618] lo: left allmulticast mode [ 82.349702][ T6630] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 82.349702][ T6630] program syz.2.916 not setting count and/or reply_len properly [ 82.387873][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 82.551302][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 82.551320][ T30] audit: type=1326 audit(1742387484.560:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.583695][ T30] audit: type=1326 audit(1742387484.560:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.607182][ T30] audit: type=1326 audit(1742387484.560:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.630783][ T30] audit: type=1326 audit(1742387484.560:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.654144][ T30] audit: type=1326 audit(1742387484.560:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.677549][ T30] audit: type=1326 audit(1742387484.560:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.701023][ T30] audit: type=1326 audit(1742387484.560:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.724688][ T30] audit: type=1326 audit(1742387484.560:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.748477][ T30] audit: type=1326 audit(1742387484.560:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.772426][ T30] audit: type=1326 audit(1742387484.560:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48dccad169 code=0x7ffc0000 [ 82.819811][ T6657] loop5: detected capacity change from 0 to 512 [ 82.845212][ T6657] EXT4-fs (loop5): too many log groups per flexible block group [ 82.853041][ T6657] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 82.872914][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 82.878488][ T6657] EXT4-fs (loop5): mount failed [ 83.139339][ T6695] loop3: detected capacity change from 0 to 512 [ 83.151585][ T6695] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 83.180643][ T6699] lo: entered allmulticast mode [ 83.189733][ T6698] lo: left allmulticast mode [ 83.209330][ T6701] loop3: detected capacity change from 0 to 512 [ 83.210491][ T6703] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 83.210491][ T6703] program syz.0.946 not setting count and/or reply_len properly [ 83.244101][ T6701] EXT4-fs (loop3): too many log groups per flexible block group [ 83.251942][ T6701] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 83.264436][ T6701] EXT4-fs (loop3): mount failed [ 83.291283][ T6711] loop2: detected capacity change from 0 to 512 [ 83.298556][ T6711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.322858][ T6711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.335792][ T6711] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.359899][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.466945][ T6728] Zero length message leads to an empty skb [ 83.543469][ T6738] loop3: detected capacity change from 0 to 512 [ 83.550877][ T6738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.550930][ T6740] netlink: 64 bytes leftover after parsing attributes in process `syz.1.959'. [ 83.571217][ T6740] futex_wake_op: syz.1.959 tries to shift op by -1; fix this program [ 83.583042][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.596483][ T6738] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.621890][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.642833][ T6748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.959'. [ 83.745431][ T6765] loop2: detected capacity change from 0 to 512 [ 83.749742][ T6767] netlink: 64 bytes leftover after parsing attributes in process `syz.0.970'. [ 83.765192][ T6767] futex_wake_op: syz.0.970 tries to shift op by -1; fix this program [ 83.776346][ T6765] EXT4-fs (loop2): too many log groups per flexible block group [ 83.784123][ T6765] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 83.791273][ T6765] EXT4-fs (loop2): mount failed [ 83.875336][ T6779] loop5: detected capacity change from 0 to 512 [ 83.881989][ T6777] loop2: detected capacity change from 0 to 1024 [ 83.884205][ T6779] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 83.888754][ T6777] EXT4-fs: Ignoring removed orlov option [ 83.902055][ T6777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.924345][ T6777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.940141][ T6777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.013279][ T6785] loop5: detected capacity change from 0 to 512 [ 84.021155][ T6785] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 84.661457][ T6804] loop1: detected capacity change from 0 to 512 [ 84.679543][ T6804] EXT4-fs (loop1): too many log groups per flexible block group [ 84.687312][ T6804] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 84.695392][ T6804] EXT4-fs (loop1): mount failed [ 84.738012][ T6815] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 84.738012][ T6815] program syz.3.984 not setting count and/or reply_len properly [ 84.782495][ T6819] lo: entered promiscuous mode [ 84.799018][ T6819] lo: entered allmulticast mode [ 84.811916][ T6818] lo: left allmulticast mode [ 84.816607][ T6818] lo: left promiscuous mode [ 84.947477][ T6840] loop5: detected capacity change from 0 to 512 [ 84.958620][ T6840] EXT4-fs (loop5): too many log groups per flexible block group [ 84.966363][ T6840] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 84.973339][ T6840] EXT4-fs (loop5): mount failed [ 84.988126][ T6837] Falling back ldisc for ttyS3. [ 85.012527][ T6847] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 85.012527][ T6847] program syz.1.1000 not setting count and/or reply_len properly [ 85.096514][ T6851] Falling back ldisc for ttyS3. [ 85.150368][ T6858] lo: entered promiscuous mode [ 85.155660][ T6858] lo: entered allmulticast mode [ 85.163815][ T6857] lo: left allmulticast mode [ 85.168469][ T6857] lo: left promiscuous mode [ 85.271722][ T6867] loop1: detected capacity change from 0 to 512 [ 85.279973][ T6867] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 85.790400][ T6877] Falling back ldisc for ttyS3. [ 85.805394][ T6884] loop2: detected capacity change from 0 to 512 [ 85.827536][ T6884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.858653][ T6884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.885235][ T6896] tc_dump_action: action bad kind [ 85.905274][ T6884] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.945981][ T6898] loop3: detected capacity change from 0 to 8192 [ 85.954917][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.981201][ T6905] loop2: detected capacity change from 0 to 512 [ 85.988816][ T6905] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 86.228416][ T6918] Falling back ldisc for ttyS3. [ 86.321002][ T6928] tc_dump_action: action bad kind [ 86.350637][ T6929] loop1: detected capacity change from 0 to 1024 [ 86.357561][ T6929] EXT4-fs: Ignoring removed orlov option [ 86.363344][ T6929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.392744][ T6929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.410896][ T6929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.461735][ T6935] lo: entered allmulticast mode [ 86.476197][ T6934] lo: left allmulticast mode [ 86.921633][ T6976] loop5: detected capacity change from 0 to 512 [ 86.929105][ T6976] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 87.277283][ T7107] lo: entered allmulticast mode [ 87.309591][ T7106] lo: left allmulticast mode [ 87.499400][ T7150] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 87.499400][ T7150] program syz.2.1056 not setting count and/or reply_len properly [ 87.548215][ T7154] loop2: detected capacity change from 0 to 512 [ 87.560903][ T7154] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 87.609482][ T7158] loop2: detected capacity change from 0 to 512 [ 87.618078][ T7158] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.624608][ T7158] ext3: Unknown parameter 'dont_hash' [ 87.825895][ T7176] __nla_validate_parse: 2 callbacks suppressed [ 87.825923][ T7176] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1065'. [ 87.844197][ T7176] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1065'. [ 87.854751][ T7176] 0猉功D: renamed from 31猉功D (while UP) [ 87.862560][ T7176] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 87.926819][ T7181] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 87.926819][ T7181] program syz.3.1068 not setting count and/or reply_len properly [ 87.999317][ T7187] loop3: detected capacity change from 0 to 512 [ 88.012973][ T7187] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 88.039142][ T7196] lo: entered allmulticast mode [ 88.101033][ T7195] lo: left allmulticast mode [ 88.296808][ T7281] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 88.296808][ T7281] program syz.0.1082 not setting count and/or reply_len properly [ 88.433321][ T7318] Falling back ldisc for ttyS3. [ 88.447753][ T7365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1090'. [ 88.488536][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 88.488554][ T30] audit: type=1326 audit(1742387490.107:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.518451][ T30] audit: type=1326 audit(1742387490.107:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.541867][ T30] audit: type=1326 audit(1742387490.107:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.564352][ T7387] loop1: detected capacity change from 0 to 512 [ 88.565474][ T30] audit: type=1326 audit(1742387490.107:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.595363][ T30] audit: type=1326 audit(1742387490.107:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.625373][ T30] audit: type=1326 audit(1742387490.191:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.626214][ T7387] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 88.670138][ T30] audit: type=1326 audit(1742387490.275:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.694104][ T30] audit: type=1326 audit(1742387490.275:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.724642][ T30] audit: type=1326 audit(1742387490.275:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.748431][ T30] audit: type=1326 audit(1742387490.275:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 88.758899][ T7365] futex_wake_op: syz.3.1090 tries to shift op by -1; fix this program [ 88.800606][ T7723] loop5: detected capacity change from 0 to 512 [ 88.821293][ T7723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.841026][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1090'. [ 88.880942][ T7723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.894089][ T7723] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.921703][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.942704][ T7737] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 88.942704][ T7737] program syz.5.1097 not setting count and/or reply_len properly [ 88.976126][ T7741] loop2: detected capacity change from 0 to 1024 [ 88.983054][ T7741] EXT4-fs: Ignoring removed orlov option [ 88.988962][ T7741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.017570][ T7741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.036545][ T7741] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.107085][ T7759] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1103'. [ 89.119935][ T7759] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1103'. [ 89.138683][ T7759] 1猉功D: renamed from 30猉功D (while UP) [ 89.145693][ T7759] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 89.358953][ T7954] loop3: detected capacity change from 0 to 512 [ 89.367056][ T7954] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.373862][ T7954] ext3: Unknown parameter 'dont_hash' [ 89.510601][ T8084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1108'. [ 89.535511][ T8084] futex_wake_op: syz.3.1108 tries to shift op by -1; fix this program [ 89.605563][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1108'. [ 89.853160][ T8348] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 89.853160][ T8348] program syz.2.1113 not setting count and/or reply_len properly [ 89.912644][ T8380] lo: entered allmulticast mode [ 89.940436][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 89.982375][ T8378] lo: left allmulticast mode [ 90.046992][ T8393] lo: entered allmulticast mode [ 90.103492][ T8392] lo: left allmulticast mode [ 90.139321][ T8401] loop1: detected capacity change from 0 to 512 [ 90.147638][ T8401] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.154375][ T8401] ext3: Unknown parameter 'dont_hash' [ 90.214450][ T8409] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 90.214450][ T8409] program syz.1.1127 not setting count and/or reply_len properly [ 90.263367][ T8419] loop1: detected capacity change from 0 to 512 [ 90.281313][ T8419] EXT4-fs (loop1): too many log groups per flexible block group [ 90.289076][ T8419] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 90.297532][ T8419] EXT4-fs (loop1): mount failed [ 90.310426][ T8441] loop5: detected capacity change from 0 to 1024 [ 90.317272][ T8441] EXT4-fs: Ignoring removed orlov option [ 90.323244][ T8441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.339944][ T8441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.534631][ T8565] lo: entered allmulticast mode [ 90.623736][ T8562] lo: left allmulticast mode [ 90.702281][ T8699] loop3: detected capacity change from 0 to 512 [ 90.729789][ T8699] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.736626][ T8699] ext3: Unknown parameter 'dont_hash' [ 90.737183][ T8720] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 90.737183][ T8720] program syz.1.1139 not setting count and/or reply_len properly [ 90.782479][ T8741] loop1: detected capacity change from 0 to 512 [ 90.801686][ T8741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.828756][ T8741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.844423][ T8741] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.883925][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.893182][ T8758] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1143'. [ 90.904410][ T8758] futex_wake_op: syz.3.1143 tries to shift op by -1; fix this program [ 91.018412][ T8765] loop2: detected capacity change from 0 to 512 [ 91.025013][ T8765] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.031612][ T8765] ext3: Unknown parameter 'dont_hash' [ 91.049086][ T8767] loop1: detected capacity change from 0 to 512 [ 91.056204][ T8767] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 91.105705][ T8775] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 91.105705][ T8775] program syz.0.1150 not setting count and/or reply_len properly [ 91.144004][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.168115][ T8780] futex_wake_op: syz.5.1152 tries to shift op by -1; fix this program [ 91.332188][ T8791] lo: entered allmulticast mode [ 91.392021][ T8789] lo: left allmulticast mode [ 91.545732][ T8799] tmpfs: Unknown parameter 'nr_ino' [ 91.585037][ T8803] loop2: detected capacity change from 0 to 512 [ 91.592136][ T8803] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 91.620421][ T8805] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 91.620421][ T8805] program syz.2.1161 not setting count and/or reply_len properly [ 91.714321][ T8808] loop2: detected capacity change from 0 to 1024 [ 91.721011][ T8808] EXT4-fs: Ignoring removed orlov option [ 91.726728][ T8808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.757263][ T8808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.770895][ T8808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.969790][ T8820] Falling back ldisc for ttyS3. [ 92.038129][ T8824] loop3: detected capacity change from 0 to 8192 [ 92.055461][ T8825] loop1: detected capacity change from 0 to 1024 [ 92.062640][ T8825] EXT4-fs: Ignoring removed orlov option [ 92.068540][ T8825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.103083][ T8825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.130464][ T8832] lo: entered promiscuous mode [ 92.132308][ T8825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.279455][ T8831] lo: left promiscuous mode [ 92.329824][ T8838] futex_wake_op: syz.5.1174 tries to shift op by -1; fix this program [ 93.037459][ T8869] lo: entered promiscuous mode [ 93.042986][ T8869] lo: entered allmulticast mode [ 93.070475][ T8868] lo: left allmulticast mode [ 93.075144][ T8868] lo: left promiscuous mode [ 93.245764][ T8881] loop3: detected capacity change from 0 to 512 [ 93.252519][ T8881] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.254312][ T8882] loop1: detected capacity change from 0 to 1024 [ 93.259010][ T8881] ext3: Unknown parameter 'dont_hash' [ 93.266168][ T8882] EXT4-fs: Ignoring removed orlov option [ 93.276955][ T8882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.298255][ T8885] __nla_validate_parse: 5 callbacks suppressed [ 93.298274][ T8885] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1192'. [ 93.317189][ T8882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.317695][ T8885] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1192'. [ 93.331000][ T8882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.349608][ T8885] 0猉功D: renamed from 31猉功D (while UP) [ 93.359398][ T8885] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 93.530964][ T9100] lo: entered allmulticast mode [ 93.574220][ T9099] lo: left allmulticast mode [ 93.659177][ T9109] loop3: detected capacity change from 0 to 512 [ 93.670881][ T9109] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 93.688255][ T9111] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1202'. [ 93.702557][ T9111] futex_wake_op: syz.0.1202 tries to shift op by -1; fix this program [ 93.752140][ T9117] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1205'. [ 93.765060][ T9117] futex_wake_op: syz.2.1205 tries to shift op by -1; fix this program [ 93.777159][ T9118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1202'. [ 93.835776][ T9119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1205'. [ 94.101704][ T9122] lo: entered promiscuous mode [ 94.106986][ T9122] lo: entered allmulticast mode [ 94.151135][ T9121] lo: left allmulticast mode [ 94.155775][ T9121] lo: left promiscuous mode [ 94.226722][ T9131] tmpfs: Bad value for 'nr_inodes' [ 94.272948][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 94.272966][ T30] audit: type=1326 audit(1742387495.514:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.1.1212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48dccad169 code=0x0 [ 94.334033][ T9137] loop1: detected capacity change from 0 to 1024 [ 94.340899][ T9137] EXT4-fs: Ignoring removed orlov option [ 94.346647][ T9137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.357424][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 94.377536][ T9137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.392371][ T9137] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.577121][ T9152] loop3: detected capacity change from 0 to 512 [ 94.585668][ T9152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.602200][ T9152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.615040][ T9152] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.641764][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.644382][ T9161] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 94.644382][ T9161] program syz.0.1221 not setting count and/or reply_len properly [ 94.696748][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 94.772711][ T30] audit: type=1326 audit(1742387495.991:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9174 comm="syz.0.1227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b5110d169 code=0x0 [ 94.933032][ T9202] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 94.946096][ T30] audit: type=1326 audit(1742387496.150:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 94.969702][ T30] audit: type=1326 audit(1742387496.150:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 94.997112][ T9202] futex_wake_op: syz.2.1230 tries to shift op by -1; fix this program [ 94.997320][ T30] audit: type=1326 audit(1742387496.196:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 95.028925][ T30] audit: type=1326 audit(1742387496.196:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 95.052630][ T30] audit: type=1326 audit(1742387496.196:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 95.076634][ T30] audit: type=1326 audit(1742387496.196:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 95.100156][ T30] audit: type=1326 audit(1742387496.196:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 95.124857][ T30] audit: type=1326 audit(1742387496.196:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.2.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba253d169 code=0x7ffc0000 [ 95.128159][ T9209] lo: entered promiscuous mode [ 95.156619][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'. [ 95.166665][ T9209] lo: entered allmulticast mode [ 95.186849][ T9211] futex_wake_op: syz.1.1234 tries to shift op by -1; fix this program [ 95.199655][ T9208] lo: left allmulticast mode [ 95.204368][ T9208] lo: left promiscuous mode [ 95.224996][ T9213] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 95.224996][ T9213] program syz.3.1235 not setting count and/or reply_len properly [ 95.409269][ T9234] loop5: detected capacity change from 0 to 1024 [ 95.416118][ T9234] EXT4-fs: Ignoring removed orlov option [ 95.421876][ T9234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.435633][ T9234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.448835][ T9234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.740642][ T9241] 1猉功D: renamed from 30猉功D (while UP) [ 95.748968][ T9241] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 95.830194][ T9243] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 95.830194][ T9243] program syz.2.1246 not setting count and/or reply_len properly [ 96.107630][ T9255] loop2: detected capacity change from 0 to 512 [ 96.118249][ T9255] EXT4-fs (loop2): too many log groups per flexible block group [ 96.126025][ T9255] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 96.133458][ T9255] EXT4-fs (loop2): mount failed [ 96.181202][ T9263] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 96.181202][ T9263] program syz.2.1253 not setting count and/or reply_len properly [ 96.260792][ T9271] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 96.260792][ T9271] program syz.5.1257 not setting count and/or reply_len properly [ 96.303329][ T9273] loop3: detected capacity change from 0 to 512 [ 96.313942][ T9273] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.320540][ T9273] ext3: Unknown parameter 'dont_hash' [ 96.347522][ T9279] futex_wake_op: syz.2.1261 tries to shift op by -1; fix this program [ 96.478760][ T9303] loop3: detected capacity change from 0 to 8192 [ 97.179001][ T9322] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 97.179001][ T9322] program syz.1.1270 not setting count and/or reply_len properly [ 97.503188][ T9360] loop2: detected capacity change from 0 to 512 [ 97.517135][ T9360] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.523848][ T9360] ext3: Unknown parameter 'dont_hash' [ 97.622523][ T9368] futex_wake_op: syz.1.1282 tries to shift op by -1; fix this program [ 97.645270][ T9372] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 97.645270][ T9372] program syz.0.1283 not setting count and/or reply_len properly [ 97.925579][ T9399] futex_wake_op: syz.3.1287 tries to shift op by -1; fix this program [ 98.473792][ T9417] veth1_to_batadv: entered promiscuous mode [ 98.490375][ T9417] macsec1: entered promiscuous mode [ 98.921218][ T9653] loop5: detected capacity change from 0 to 1024 [ 98.940871][ T9653] EXT4-fs: Ignoring removed orlov option [ 98.946638][ T9653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.996632][ T9699] loop1: detected capacity change from 0 to 512 [ 99.003989][ T9699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.027663][ T9699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.049479][ T9653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.069481][ T9653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.075865][ T9709] __nla_validate_parse: 16 callbacks suppressed [ 99.075888][ T9709] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1311'. [ 99.090440][ T9699] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.106046][ T9709] futex_wake_op: syz.2.1311 tries to shift op by -1; fix this program [ 99.128221][ T9711] lo: entered promiscuous mode [ 99.136542][ T9711] lo: entered allmulticast mode [ 99.174830][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1311'. [ 99.194568][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.208079][ T9710] lo: left allmulticast mode [ 99.212730][ T9710] lo: left promiscuous mode [ 99.289952][ T9726] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1318'. [ 99.316542][ T9730] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 99.316542][ T9730] program syz.3.1320 not setting count and/or reply_len properly [ 99.333919][ T9726] futex_wake_op: syz.1.1318 tries to shift op by -1; fix this program [ 99.407334][ T9737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1318'. [ 99.439031][ T9743] lo: entered allmulticast mode [ 99.440909][ T9741] loop5: detected capacity change from 0 to 512 [ 99.451505][ T9741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.466665][ T9741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.479467][ T9741] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.491170][ T9742] lo: left allmulticast mode [ 99.509542][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.689046][ T9762] loop5: detected capacity change from 0 to 8192 [ 100.012526][ T9765] veth1_to_batadv: entered promiscuous mode [ 100.018783][ T9765] macsec1: entered promiscuous mode [ 100.178911][ T9773] loop2: detected capacity change from 0 to 512 [ 100.212340][ T9775] lo: entered promiscuous mode [ 100.212912][ T9773] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.217496][ T9775] lo: entered allmulticast mode [ 100.223870][ T9773] ext3: Unknown parameter 'dont_hash' [ 100.278311][ T9774] lo: left allmulticast mode [ 100.283006][ T9774] lo: left promiscuous mode [ 100.339255][ T9782] loop3: detected capacity change from 0 to 512 [ 100.364029][ T9782] EXT4-fs (loop3): too many log groups per flexible block group [ 100.371927][ T9782] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 100.378852][ T9782] EXT4-fs (loop3): mount failed [ 100.383803][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 100.383820][ T30] audit: type=1326 audit(1742387501.229:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9779 comm="syz.2.1340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ba253d169 code=0x0 [ 100.492358][ T9793] loop1: detected capacity change from 0 to 512 [ 100.501149][ T9793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.554357][ T9793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.575184][ T9793] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.598032][ T9803] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1348'. [ 100.620432][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.631191][ T9803] futex_wake_op: syz.0.1348 tries to shift op by -1; fix this program [ 100.643414][ T9804] loop3: detected capacity change from 0 to 512 [ 100.683841][ T9804] EXT4-fs (loop3): too many log groups per flexible block group [ 100.691619][ T9804] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 100.698897][ T9804] EXT4-fs (loop3): mount failed [ 100.715961][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1348'. [ 100.767201][ T9813] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1352'. [ 100.790041][ T30] audit: type=1326 audit(1742387501.622:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.813831][ T30] audit: type=1326 audit(1742387501.622:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.842170][ T30] audit: type=1326 audit(1742387501.650:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.846231][ T9813] futex_wake_op: syz.3.1352 tries to shift op by -1; fix this program [ 100.865609][ T30] audit: type=1326 audit(1742387501.650:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.865651][ T30] audit: type=1326 audit(1742387501.650:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.893403][ T9813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1352'. [ 100.897304][ T30] audit: type=1326 audit(1742387501.650:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.953191][ T30] audit: type=1326 audit(1742387501.650:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 100.976734][ T30] audit: type=1326 audit(1742387501.650:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 101.000341][ T30] audit: type=1326 audit(1742387501.650:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9812 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253eb5d169 code=0x7ffc0000 [ 101.388031][ T9844] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 101.388031][ T9844] program syz.2.1360 not setting count and/or reply_len properly [ 101.421082][ T9846] lo: entered allmulticast mode [ 101.485250][ T9845] lo: left allmulticast mode [ 101.571472][ T9857] loop2: detected capacity change from 0 to 1024 [ 101.578414][ T9857] EXT4-fs: Ignoring removed orlov option [ 101.584253][ T9857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.616833][ T9857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.631806][ T9857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.690655][ T9894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1371'. [ 101.713445][ T9894] futex_wake_op: syz.0.1371 tries to shift op by -1; fix this program [ 101.786387][ T9899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 101.833079][ T9903] futex_wake_op: syz.1.1374 tries to shift op by -1; fix this program [ 102.016471][ T9991] lo: entered promiscuous mode [ 102.022710][ T9991] lo: entered allmulticast mode [ 102.052332][ T9990] lo: left allmulticast mode [ 102.057056][ T9990] lo: left promiscuous mode [ 102.090867][T10024] loop5: detected capacity change from 0 to 512 [ 102.098977][T10024] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.105617][T10024] ext3: Unknown parameter 'dont_hash' [ 102.691966][T10254] Falling back ldisc for ttyS3. [ 102.914640][T10189] cgroup: fork rejected by pids controller in /syz5 [ 103.051355][T10383] loop2: detected capacity change from 0 to 8192 [ 103.341356][T10503] loop5: detected capacity change from 0 to 512 [ 103.350786][T10503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.388754][T10503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.454859][T10503] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.595849][ T5106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.688162][T10513] loop5: detected capacity change from 0 to 512 [ 103.695367][T10513] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.702328][T10513] ext3: Unknown parameter 'dont_hash' [ 103.972416][T10540] loop5: detected capacity change from 0 to 1024 [ 103.979335][T10540] EXT4-fs: Ignoring removed orlov option [ 103.985120][T10540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.010185][T10540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.025318][T10540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.290513][T10564] loop2: detected capacity change from 0 to 512 [ 104.317535][T10564] EXT4-fs (loop2): too many log groups per flexible block group [ 104.325538][T10564] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 104.336914][T10564] EXT4-fs (loop2): mount failed [ 104.433814][T10571] loop2: detected capacity change from 0 to 1024 [ 104.440614][T10571] EXT4-fs: Ignoring removed orlov option [ 104.446474][T10571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.458771][T10571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.472108][T10571] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.513177][T10578] futex_wake_op: syz.0.1424 tries to shift op by -1; fix this program [ 104.581743][T10579] __nla_validate_parse: 3 callbacks suppressed [ 104.581763][T10579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1424'. [ 104.855757][T10584] ================================================================== [ 104.863910][T10584] BUG: KCSAN: data-race in io_req_defer_failed / io_wq_free_work [ 104.871712][T10584] [ 104.874060][T10584] write to 0xffff888130c5ec48 of 8 bytes by task 10583 on cpu 0: [ 104.881896][T10584] io_req_defer_failed+0x6f/0x420 [ 104.886955][T10584] io_req_task_cancel+0x21/0x30 [ 104.891848][T10584] io_handle_tw_list+0x1b9/0x200 [ 104.896815][T10584] tctx_task_work_run+0x6e/0x1c0 [ 104.901791][T10584] tctx_task_work+0x40/0x80 [ 104.906325][T10584] task_work_run+0x13a/0x1a0 [ 104.910942][T10584] get_signal+0xe78/0x1000 [ 104.915396][T10584] arch_do_signal_or_restart+0x95/0x4b0 [ 104.921054][T10584] syscall_exit_to_user_mode+0x62/0x120 [ 104.926638][T10584] do_syscall_64+0xd6/0x1c0 [ 104.931181][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.937132][T10584] [ 104.939465][T10584] read to 0xffff888130c5ec48 of 8 bytes by task 10584 on cpu 1: [ 104.947165][T10584] io_wq_free_work+0x24/0x1b0 [ 104.952062][T10584] io_worker_handle_work+0x4cb/0x9d0 [ 104.957498][T10584] io_wq_worker+0x286/0x820 [ 104.962331][T10584] ret_from_fork+0x4b/0x60 [ 104.966796][T10584] ret_from_fork_asm+0x1a/0x30 [ 104.971597][T10584] [ 104.973926][T10584] value changed: 0x0000000000580071 -> 0x0000000000d80131 [ 104.981068][T10584] [ 104.983412][T10584] Reported by Kernel Concurrency Sanitizer on: [ 104.989657][T10584] CPU: 1 UID: 0 PID: 10584 Comm: iou-wrk-10583 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 105.000796][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.011051][T10584] ==================================================================