last executing test programs: 20.187682533s ago: executing program 4 (id=308): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19.891201559s ago: executing program 4 (id=312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0xfffffffc, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x9, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e23, @in6=@private1}}]}, 0x154}}, 0x0) futex(0x0, 0xc, 0xfffffffe, 0x0, 0x0, 0xfffffffe) 19.890654859s ago: executing program 4 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) 19.835444831s ago: executing program 4 (id=316): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000000)='./file1\x00', r5, 0x4000, r0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9b, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@data_err_ignore}, {@max_batch_time}, {@noblock_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.697642123s ago: executing program 4 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0x100, 0x0) vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/52}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='io_uring_create\x00', r4, 0x0, 0x102}, 0x18) io_uring_setup(0x21e8, &(0x7f0000002400)={0x0, 0xffffffbc, 0x400, 0x2, 0x176}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) creat(&(0x7f0000000300)='./file0\x00', 0xe5) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(0xffffffffffffffff) 19.490238938s ago: executing program 4 (id=323): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7808, 0x706, 0x9, 0x4, {{0x17, 0x4, 0x3, 0x38, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @local, {[@timestamp_addr={0x44, 0xc, 0xfc, 0x1, 0x2, [{@remote, 0x6}]}, @timestamp={0x44, 0x1c, 0x1f, 0x0, 0x1, [0x5d1, 0x224, 0x6, 0xe20, 0x1, 0x9]}, @timestamp={0x44, 0xc, 0x3b, 0x0, 0x1, [0x1, 0x2]}, @generic={0x83, 0x11, "8328fe0c69c4d82b6b8b3f2ce65a8e"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x202, 0x40, 0x6, 0x700, 0x1, 0x600004, r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtaction={0x44, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xfffffffffffffdcc) 19.462415438s ago: executing program 32 (id=323): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7808, 0x706, 0x9, 0x4, {{0x17, 0x4, 0x3, 0x38, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @local, {[@timestamp_addr={0x44, 0xc, 0xfc, 0x1, 0x2, [{@remote, 0x6}]}, @timestamp={0x44, 0x1c, 0x1f, 0x0, 0x1, [0x5d1, 0x224, 0x6, 0xe20, 0x1, 0x9]}, @timestamp={0x44, 0xc, 0x3b, 0x0, 0x1, [0x1, 0x2]}, @generic={0x83, 0x11, "8328fe0c69c4d82b6b8b3f2ce65a8e"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x202, 0x40, 0x6, 0x700, 0x1, 0x600004, r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtaction={0x44, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xfffffffffffffdcc) 1.617024786s ago: executing program 3 (id=646): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) getsockname$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3e5e}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0xfb39dca4e3c70e4c}, 0x4000) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) close(r8) syz_emit_ethernet(0xba, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0xffffffff, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x58, 0x3, 0x1, [{@broadcast, 0x80000000}, {@remote, 0x6}, {@private=0xa010101, 0x4}, {@broadcast, 0x7}, {@multicast1, 0x2}, {@multicast2, 0x6}, {@multicast2, 0x7f}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@broadcast}, {@dev}, {@dev}, {@local}, {@private, 0xffffffff}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x8000, 0x9, 0x10000, 0x1, 0x8d5f, '\x00', r3, r6, 0x5, 0x0, 0x2, 0xc, @void, @value, @value=r6}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0, r10}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="d401d8ff100000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.490714508s ago: executing program 3 (id=650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0xcdb1c000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.37524115s ago: executing program 1 (id=654): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40810) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 1.181753145s ago: executing program 1 (id=657): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001200), 0x80000, 0x0) fcntl$notify(r0, 0x402, 0x31) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@debug}, {@jqfmt_vfsv0}, {@nobh}, {@errors_continue}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@journal_dev={'journal_dev', 0x3d, 0x63c}}, {@noauto_da_alloc}, {@dioread_lock}, {@data_err_ignore}, {@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resuid}, {@grpid}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a0104"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x2004c850}, 0x20050800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 947.81464ms ago: executing program 5 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) 947.35786ms ago: executing program 3 (id=662): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000, 0x0, 0x671, 0x2, 0x6}, {0x800, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 933.29115ms ago: executing program 0 (id=663): r0 = syz_open_procfs(0x0, 0x0) read(r0, 0x0, 0x0) madvise(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x10) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 933.00576ms ago: executing program 5 (id=664): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x3000000) 912.25174ms ago: executing program 5 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000180)={'veth0_to_bond\x00', @ifru_flags=0x8000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000007000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x15) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000000000029000000080000000a00000000000000e000000000000000290000003700000087180000000000000740000000000e0a0600050000000000000000180000000000003d8c0000000000000300000000000000faffffffffffffff3c00000000000000050000000000000007180000000004196e00030000000000000032a300000000000007580000000314030400020000000000000009000000000000008505000000000000a66cea3b00000000030000000000000000800000000000008700000000000000010000000000000007000000000000000900000000000000c2040000000d04010f05020008050200400024000000000000002900000032000000ff0100000000000000000000000000017fab"], 0x138}}], 0x1, 0x24005efe) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d00000000140006"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) futex(&(0x7f0000000340)=0x2, 0x80, 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)=0x2, 0x1) chroot(&(0x7f0000000200)='./file0\x00') setsockopt$inet6_udp_int(r12, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r14 = fspick(r13, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r14, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) 864.356801ms ago: executing program 3 (id=666): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) (fail_nth: 6) 792.592193ms ago: executing program 0 (id=667): iopl(0x1) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0) 792.089893ms ago: executing program 1 (id=668): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdir(0x0, 0x92) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @private=0xa010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x8, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 687.675425ms ago: executing program 0 (id=669): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, &(0x7f0000000400)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x2, 0x0, 0x2, 0x47}) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x100000000000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kexec_load(0x0, 0x0, 0x0, 0x0) 469.2899ms ago: executing program 5 (id=670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r7}, 0xc) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c08000000000000002ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 375.614731ms ago: executing program 3 (id=671): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 375.339622ms ago: executing program 2 (id=672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x2000}, {}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 375.132631ms ago: executing program 2 (id=673): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0xfe, 0x1, 0x0, r2, 0x0}]) 295.097014ms ago: executing program 2 (id=674): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) getsockname$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3e5e}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0xfb39dca4e3c70e4c}, 0x4000) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) close(r8) syz_emit_ethernet(0xba, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0xffffffff, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x58, 0x3, 0x1, [{@broadcast, 0x80000000}, {@remote, 0x6}, {@private=0xa010101, 0x4}, {@broadcast, 0x7}, {@multicast1, 0x2}, {@multicast2, 0x6}, {@multicast2, 0x7f}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@broadcast}, {@dev}, {@dev}, {@local}, {@private, 0xffffffff}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x8000, 0x9, 0x10000, 0x1, 0x8d5f, '\x00', r3, r6, 0x5, 0x0, 0x2, 0xc, @void, @value, @value=r6}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {0x0, r10}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="d401d8ff100000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 273.121754ms ago: executing program 1 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x1000, 0xcf, 0x0, 0x80000001}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/10, 0x2000, 0x1000, 0x0, 0x3}, 0x20) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ad, 0x400, 0x8000, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x41, 0x0, @fd=r3, 0x0, 0x0, 0xd3, 0x9, 0x0, {0x0, 0x0, r3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 205.851955ms ago: executing program 2 (id=676): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x11000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x80cd, 0x1]}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x1, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @local}, 0x10) sendfile(r4, r3, 0x0, 0x17) 141.469127ms ago: executing program 0 (id=677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0x2a0, 0x390, 0x2a0, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@dccp={{0x30}, {[0x4e22, 0x4e20], [0x4e22, 0x4e22], 0x8, 0x0, 0x3ff, 0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x6, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "99df"}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xcb, 0x3}}}, {{@ip={@multicast2, @private=0xa010100, 0x0, 0xffffff00, 'xfrm0\x00', 'geneve0\x00', {}, {}, 0x6, 0x2, 0x38}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x3}}, @inet=@rpfilter={{0x28}, {0x1f}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x7, @local, 0x4e20}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2e}, 0xff000000, 0xff, 'bond0\x00', 'pimreg1\x00', {0xff}, {}, 0x67, 0x3, 0x2a}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket1={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10000, 0x0, @multicast1, 0x4e21}}}, {{@ip={@private=0xa010102, @private=0xa010101, 0xff000000, 0x0, 'geneve0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x5e, 0x2, 0x22}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 140.806286ms ago: executing program 2 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x800) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000002c0)={r7, 0x1, 0x6, @broadcast}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000001f) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000070000000000fbffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x13f, 0x5}}, 0x20) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 120.347727ms ago: executing program 5 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0xa6ffffff, 0x40}, 0x10000) 119.956947ms ago: executing program 3 (id=680): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0xe8030000, @loopback}, 0x1c) 119.631837ms ago: executing program 0 (id=681): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc4b", 0x2}], 0x1}}], 0x1, 0x4c040) gettid() r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 75.323768ms ago: executing program 5 (id=682): socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x11, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) (fail_nth: 5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) 69.478938ms ago: executing program 1 (id=683): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18800, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file2\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f00000000c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001ec0)={0x1508, 0x1, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x4}, 0x0, 0x5, 0x800, 0x3ff, 0x4, 'syz0\x00', "9d518a528d802bf946c50b2c4a663fca999404882b2aa52c54a53c55afa5052a", "aee21bca77f9532dd46a29d61dd672c6b8967aa85361d09e3fd7dbf6586daba6", [{0x6, 0x3, {0x1, 0x34dd}}, {0x9, 0x7fff, {0x1, 0x2}}, {0xffff, 0x5, {0x3, 0x26}}, {0xfff, 0x7f, {0x1, 0x9}}, {0x0, 0x3ff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x1}}, {0x0, 0x9, {0x1, 0x9}}, {0x4, 0xfff, {0x1, 0x84}}, {0x9, 0x9d8, {0x3, 0x8}}, {0x80, 0xdc, {0x3, 0x5}}, {0xffff, 0x400, {0x0, 0x3c}}, {0x7, 0x400, {0x3, 0xfffffffb}}, {0x2, 0x80, {0x2, 0x2}}, {0x4, 0x0, {0x2, 0xfffffffd}}, {0x6d, 0x1, {0xe0b2facfd47a3f70, 0x1}}, {0x0, 0x80, {0x1, 0x7}}, {0x2, 0x6, {0x2, 0x7fffffff}}, {0x8, 0x3, {0x2, 0x5}}, {0x8, 0x5, {0x2, 0x7fff}}, {0x376f, 0x8000, {0x0, 0x1}}, {0xfffa, 0x4, {0x1, 0x7}}, {0x3, 0x1b2a, {0x3, 0x6}}, {0x5, 0x6, {0x2, 0xe24}}, {0x9, 0xfe00, {0x2}}, {0x2, 0x9e, {0x2, 0x5}}, {0x3, 0x6, {0x2, 0x101}}, {0x6, 0x1ff, {0x3, 0x100}}, {0x200, 0x7f, {0x2, 0x9}}, {0x4, 0xffff, {0x0, 0x3}}, {0x5, 0x1, {0x1, 0x80}}, {0x7ff, 0x9, {0x0, 0x1}}, {0x8, 0x7, {0x1, 0x7}}, {0x2, 0x0, {0x2}}, {0x2, 0x1, {0x2, 0x37d}}, {0x8, 0x1, {0x1, 0x1000}}, {0x5, 0x1, {0x1, 0x2}}, {0x6, 0x3580, {0x2, 0x10980}}, {0x8, 0x8, {0x2, 0xc0f6}}, {0x6, 0x200, {0x1, 0xac}}, {0x6}]}}}, {{0x254, 0x1, {{0x1}, 0x81, 0x3, 0x9, 0x3, 0x24, 'syz0\x00', "1e1028fa9046700a915e8d014cd261a25781871c860d6d71d7450ab3d182e687", "a3c17622bf2134e7d40f9791231505ecea08d412650d6bb8ac995ac89ef1bdac", [{0x400, 0x4, {0x3, 0x4}}, {0x6, 0x3, {0x1, 0x3}}, {0x7, 0x5, {0x0, 0xd9a2}}, {0xfb, 0x2, {0x3, 0x80}}, {0x9, 0x400, {0x3, 0x8}}, {0x2, 0x1, {0x0, 0x80}}, {0x9, 0xa, {0x3, 0x2}}, {0x1c06, 0x6, {0x3, 0x6}}, {0x4, 0x40, {0x2, 0xe}}, {0x6, 0x1, {0x1}}, {0x7, 0x4dea, {0x2, 0x7ff}}, {0xff, 0x200, {0x3, 0x3}}, {0x3, 0x6, {0x2, 0xec9}}, {0x1000, 0x9, {0x0, 0xffffffff}}, {0x2, 0x4, {0x0, 0x6}}, {0x8, 0x1, {0x0, 0x4}}, {0x3, 0x1, {0x3, 0x7f}}, {0x0, 0xf, {0x3, 0xfffffff1}}, {0xfff, 0x6, {0x0, 0xd}}, {0x2, 0x6, {0x1, 0x5}}, {0x2000, 0x6, {0x2, 0x8}}, {0xc, 0xb, {0x0, 0x6}}, {0x0, 0x9, {0x3, 0x7}}, {0x0, 0x2, {0x0, 0x2c6}}, {0xffff, 0x7, {0x3, 0xbca6}}, {0x1, 0x0, {0x0, 0x7}}, {0x1, 0xab14, {0x0, 0x1}}, {0x7, 0x2f, {0x2, 0x3a2f}}, {0x9, 0x7, {0x0, 0xef61}}, {0x3, 0x80, {0x2, 0x8}}, {0x0, 0x5, {0x2, 0x4}}, {0x8, 0x7f, {0x1, 0x9}}, {0x0, 0xffff, {0x1, 0x5}}, {0x1, 0x4, {0x0, 0x2}}, {0x4, 0x8, {0x1, 0x40}}, {0x7, 0x8, {0x3, 0xe835}}, {0x8}, {0x0, 0x4, {0x544f943d1b26d905, 0xb2b2}}, {0x3, 0x3, {0x2, 0x5ce}}, {0xf1b2, 0x81, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0xd1ea}, 0x8, 0x14, 0x16f, 0xfff, 0xf, 'syz1\x00', "43d12ad1f222fc049bbedf7f7d0b6b51733f8a72a22bbdb965a98143d868c477", "450d292f6fd6f8dcd79ff065100612c2ce0722ac81de6b654ed5645f43592f80", [{0x8000, 0x10, {0x3, 0xfffffffe}}, {0x100, 0xcc, {0x3, 0x8}}, {0xd, 0x3, {0x3, 0xc}}, {0x10, 0x0, {0x0, 0xd}}, {0x1, 0x42b, {0x2, 0x5299de0e}}, {0x5, 0x0, {0x2, 0x2}}, {0x1f5, 0x1, {0x1, 0xfffffff0}}, {0x8, 0x2, {0x0, 0x5}}, {0x1ff, 0x3ff, {0x8bdc1d2f93eaa5e3}}, {0x7, 0x8, {0x2, 0x1}}, {0xfbb7, 0x14, {0x1, 0x6}}, {0x9, 0x7ff, {0x2, 0x1}}, {0x4, 0x42, {0x3, 0x3}}, {0x2, 0x6, {0x3, 0x6}}, {0x1, 0x6, {0x3, 0xffff}}, {0x5fc0, 0x7, {0x2, 0xaf}}, {0x4, 0x0, {0x3, 0x9}}, {0x6, 0x7, {0x3}}, {0x2, 0x2, {0x0, 0xfffffff5}}, {0x7, 0xb98, {0x2, 0x6a}}, {0x7f, 0x0, {0x3, 0x3}}, {0x3ff, 0x1767, {0x2, 0xa6db}}, {0x2, 0xa, {0x3, 0x6}}, {0x8a84, 0x3, {0x3, 0xafec}}, {0x2, 0x2, {0x3, 0xd}}, {0x7, 0x38f, {0x1, 0x2}}, {0x8, 0x4, {0x2, 0x6}}, {0x3, 0x6, {0x2}}, {0x0, 0x3ff, {0x3d27bb30c33c8dca, 0x4}}, {0x8, 0xffff, {0x0, 0x709}}, {0x4, 0x2, {0x2, 0x10001}}, {0x4, 0x10, {0x2, 0xfffff7a0}}, {0x8, 0x200, {0x3, 0x3}}, {0xf0e, 0x1, {0x0, 0xffffffff}}, {0x5, 0xd0, {0x2, 0x2}}, {0xd, 0x1565, {0x1, 0x80000001}}, {0x3, 0x1ff, {0x2, 0x7}}, {0x6, 0x1, {0x0, 0x87e7eac0}}, {0x1, 0x6, {0x2, 0x6}}, {0x2be, 0x7, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x9, 0x64, 0x7, 0x3, 0xe, 'syz1\x00', "41ccc7c16a0556424ba717266b8dd15918ea64ca7ac33a9f1f6fd71eae63c645", "f76ac6c91599c9883b39c590349080e12984860a0e702507b580e22987830c53", [{0x2, 0x3, {0x0, 0x7}}, {0x919, 0x0, {0x2, 0x7}}, {0x9, 0x6, {0x1, 0xbef4}}, {0x4, 0x78, {0x2, 0x10000}}, {0xb2, 0x69fb, {0x3, 0xf6}}, {0x2, 0x8, {0x3, 0x8}}, {0x3, 0xeb0c, {0x0, 0x8}}, {0x1, 0x8, {0x3, 0xcef}}, {0x80, 0x40, {0x1, 0xbf6a}}, {0x5, 0x8, {0x2, 0x8}}, {0x5, 0x6, {0x1, 0x4}}, {0x7, 0x7, {0x0, 0x3}}, {0x1, 0x1, {0x0, 0x6}}, {0x14, 0x200, {0x2, 0x6}}, {0xfff5, 0x5, {0x0, 0x4}}, {0x4, 0x8001, {0x2, 0x12}}, {0x8001, 0x101, {0x3, 0x3}}, {0x4, 0x9, {0x3, 0x5}}, {0xc9c, 0xf801, {0x1, 0xae87}}, {0x7, 0x5, {0x1, 0x471782e5}}, {0x4, 0xe}, {0x400, 0xff, {0x0, 0x3}}, {0x6331, 0x8, {0x2}}, {0x2, 0x40, {0x0, 0x2}}, {0x40, 0x4, {0x3, 0x9}}, {0x2, 0x6, {0x2425c3c0b5c18e12, 0xc6d}}, {0x8, 0x5, {0x0, 0xe}}, {0x9, 0x8000, {0x3, 0x7}}, {0x8, 0x9, {0x1, 0xd}}, {0xc17a, 0x36c3, {0x3, 0xc}}, {0x1, 0x3, {0x3, 0x86}}, {0x4f90, 0xb570, {0x2, 0xd}}, {0x5, 0x871, {0x2, 0x2ea8}}, {0x6, 0xc, {0x1, 0x7}}, {0x101, 0x1, {0x3}}, {0xea87, 0x8264, {0x3, 0x7}}, {0x117, 0x100, {0x0, 0x4}}, {0x1, 0xfff, {0x2, 0x8}}, {0x4, 0xa, {0x3, 0xfffff801}}, {0xfff, 0x1, {0x3, 0xf}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xff, 0x8f, 0x3, 0x4, 0x21, 'syz1\x00', "55c6099a667b717a5852c50f6c9e406b36d93df95ada41910c733a35ea00b723", "9eded77e7d37c5adfb63aa9ee0750a8b276fb1c9b5efbdccd4a79ff4fa17c57f", [{0x3, 0x2, {0x1, 0x1}}, {0x2, 0x200, {0x3, 0x5}}, {0x1, 0x7, {0x1, 0x8}}, {0x4, 0x1, {0x1, 0x8}}, {0x3, 0x180, {0x3, 0x200}}, {0x4, 0x6, {0x1, 0x1000}}, {0x1, 0x3, {0x7bbb86932f91cdae, 0x9}}, {0x4, 0x7ff, {0x0, 0xd}}, {0x0, 0x40, {0x2, 0xff}}, {0x1, 0x8, {0x3, 0x5}}, {0x4, 0x5, {0x3}}, {0x3, 0x6, {0x3, 0x38}}, {0x0, 0x52, {0x1}}, {0x6, 0xe3, {0x3, 0x81}}, {0x8, 0x4, {0x1, 0x6}}, {0xda, 0x8, {0x2, 0x7}}, {0x3, 0x8001, {0x2, 0x59}}, {0x4, 0x3, {0x0, 0xfffffbff}}, {0xff, 0x9, {0x2, 0x2}}, {0x80, 0xc, {0x2, 0x8}}, {0x1, 0x8, {0x3, 0x8}}, {0x0, 0x1, {0x1, 0x6}}, {0x0, 0x0, {0x0, 0xffffb7d8}}, {0x2, 0x2, {0x3, 0x3}}, {0x5, 0xfffe, {0x0, 0x7f}}, {0x7, 0x3, {0x2, 0x3}}, {0x1f7, 0x7, {0x0, 0x4}}, {0x80, 0xcf, {0x2, 0xfff}}, {0xa304, 0x5b, {0x2, 0x200}}, {0x5, 0xa, {0x3, 0x6}}, {0x9, 0x2, {0x0, 0xffff}}, {0x9, 0x9, {0x3}}, {0x3b74, 0x4, {0x2, 0x8}}, {0x0, 0x9a, {0x2, 0x3}}, {0x5, 0x81, {0x0, 0x401}}, {0x5, 0x9, {0x0, 0xaa9}}, {0xff, 0x5, {0x2, 0x4}}, {0x8000, 0x3, {0x0, 0x2}}, {0xa2ba, 0x80, {0x2, 0x7}}, {0x7f, 0x6, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xf9, 0x3, 0x7, 0x9, 0x0, 'syz1\x00', "69c3d9229710f3315fa1b6609f386880be05494414a5f10d92b59a4bb3cddcbe", "0e7e334083c8c0f1fd27cc95f766c4b35262ba6f65247bbeb427f8d38ab4a409", [{0x9, 0x4, {0x2}}, {0x6, 0x2, {0x0, 0x1}}, {0x0, 0x0, {0x2, 0xfffffffb}}, {0x2, 0x85, {0x0, 0x5}}, {0x6, 0xfffb, {0x3, 0x100}}, {0x5, 0x7, {0x2, 0x889}}, {0x4, 0x5688, {0x2, 0x1300}}, {0x5, 0x10, {0x1}}, {0x2, 0x9d6, {0x0, 0x97d}}, {0x4, 0x7ff, {0x2, 0x7}}, {0x7fff, 0x9, {0x1, 0x5189}}, {0x5, 0x5, {0x3, 0xd1a}}, {0x7, 0x8001, {0x0, 0x3}}, {0xf20e, 0x6, {0x2, 0xfffffff7}}, {0x0, 0x8001, {0x0, 0x3}}, {0x0, 0x7, {0x1, 0x3}}, {0x0, 0x3, {0x3, 0x4b9a2a2f}}, {0xfff9, 0x2, {0x0, 0x74}}, {0x5, 0x9, {0x0, 0x8}}, {0x1000, 0x3, {0x1, 0xfff}}, {0xd7, 0x0, {0x1, 0x4b2}}, {0x6, 0x7, {0x3, 0xb}}, {0x9, 0x41cd, {0x2, 0x7}}, {0xc, 0x5064, {0x2, 0xc5}}, {0x0, 0x5, {0x0, 0x7fff}}, {0x502d, 0x6, {0x2, 0xfffffffc}}, {0x8, 0x8, {0x0, 0xe6}}, {0x6d0e, 0x7, {0x3, 0xc}}, {0xa, 0x3, {0x1, 0x1}}, {0x6, 0x100, {0x1, 0x9}}, {0x1, 0x7, {0x2, 0x8}}, {0x9, 0x1e04, {0x3, 0x8}}, {0x1, 0x9, {0x2, 0x1}}, {0xfff9, 0x40, {0x0, 0x2}}, {0xab2f, 0x7, {0x1, 0xf96}}, {0x5, 0xe, {0x1, 0xfffffff8}}, {0x5, 0xfab2, {0x1, 0xffff}}, {0xa15, 0x7, {0x0, 0x2}}, {0x8, 0xc, {0x1, 0x4}}, {0xfff9, 0x1000, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0xe}, 0x29, 0x3b, 0x9, 0x2, 0xd, 'syz0\x00', "0b714a2b772048be3bfba97d695e75761e44c46f189eb3edab5f0019249fa2a2", "cc4bbb6f1302caf013de6885527fe60f0f5f5ae18ae4f5737f0e8aa3193904c9", [{0x1, 0x9, {0x3, 0x3}}, {0x200, 0xe9d8, {0x1, 0xf}}, {0x0, 0x7a, {0x2, 0xffff0000}}, {0x9, 0x6, {0x1, 0x2d8e683f}}, {0x400, 0x2, {0x2, 0x2}}, {0x5, 0xffff, {0x1, 0xa}}, {0xfffc, 0xf, {0x1, 0xb05095f}}, {0x5d12, 0x3, {0x0, 0x4}}, {0xd9, 0x356, {0x0, 0xce}}, {0x8, 0x5, {0x3, 0x40}}, {0x50, 0x2, {0x0, 0x3}}, {0x3, 0x200, {0x0, 0x9}}, {0x4, 0x7, {0x0, 0x2}}, {0x9, 0x4, {0x3, 0x7ff}}, {0xffff, 0x80, {0x1, 0x5}}, {0x83d, 0x4, {0x1, 0x7}}, {0x4ee3, 0xfffd, {0x3, 0x8}}, {0x6, 0xfffb, {0x3, 0x4}}, {0xc, 0xb99, {0x2, 0x5798}}, {0x0, 0x0, {0x1, 0x6}}, {0x0, 0x4, {0x1, 0x6}}, {0x0, 0x36bd, {0x2, 0xc}}, {0x9ab, 0x1, {0x1, 0xd}}, {0x1ff, 0x2, {0x1, 0x9}}, {0x5, 0x6, {0x3, 0xc188}}, {0x4, 0x7, {0x0, 0x3}}, {0x2, 0x2216, {0x2, 0x5}}, {0x4, 0x8001, {0x3, 0x9}}, {0xc000, 0x12, {0x0, 0x65b}}, {0xd, 0xffc0, {0x1, 0x1000}}, {0x4, 0xfe01, {0x0, 0x5}}, {0xee4, 0x410e, {0x3, 0x4}}, {0x7409, 0x2, {0x0, 0x5}}, {0x8, 0x992d, {0x2, 0x2}}, {0x6c55, 0x9, {0x2, 0x8}}, {0x0, 0x8, {0x2, 0x4e38}}, {0x7f, 0x8, {0x0, 0x9}}, {0x101, 0x3, {0x3, 0x6b19cd68}}, {0x9, 0x7, {0x0, 0x400}}, {0x6, 0x1, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x6, 0x5, 0x2, 0x6, 0x22, 'syz1\x00', "c583bf70f36861a81e714d3538a0f3ee01a853248c4aa7a2be287ef4024a5296", "c4c5cbf48f6f07c351d9aad20eccb59eaa4fd0535f249541a05b41b80e7a390d", [{0x7, 0xfe00, {0x3, 0x5}}, {0x90, 0x1, {0x2, 0x4}}, {0x26bf, 0x5, {0x0, 0xb}}, {0xe, 0x9, {0x2, 0x8}}, {0xbb, 0xb, {0x0, 0x7f}}, {0x4, 0xccc, {0x1, 0x7}}, {0xc8e5, 0xb, {0x3, 0x6}}, {0x8, 0x4d72, {0x2, 0x1}}, {0x8, 0x80, {0x1}}, {0x3, 0x0, {0x2, 0x7}}, {0x400, 0x9, {0x3, 0x3}}, {0x4, 0x2, {0x1, 0xfffffffb}}, {0x1, 0x7, {0xd04a1339911ef828}}, {0x9, 0x0, {0x1, 0x7}}, {0x7fff, 0x7f, {0x0, 0x5}}, {0x5, 0xffde, {0x3}}, {0x0, 0x445, {0x3, 0x8}}, {0x6, 0x2f8, {0x3, 0xfffffffc}}, {0x0, 0x6, {0x0, 0x4}}, {0x8, 0x2, {0x0, 0x1}}, {0xf65, 0xffff, {0x1, 0x1}}, {0xfffe, 0x3, {0x1, 0x5}}, {0x1, 0x8, {0x3, 0x101}}, {0x2, 0x7095, {0x3, 0xf}}, {0x6, 0x1, {0x2, 0x7a}}, {0x1000, 0xc, {0x2, 0x4}}, {0x4, 0x9, {0x2, 0x80000001}}, {0xa, 0x10, {0x0, 0x8}}, {0x2, 0x8, {0x2, 0x7}}, {0x1, 0x8, {0x2, 0x3ff}}, {0x5, 0x1ff, {0x4, 0xc2}}, {0x5a, 0x7, {0x2, 0x5}}, {0x1, 0x7ff, {0x0, 0x5}}, {0x5, 0x3, {0x1, 0x8}}, {0x40, 0x40, {0x3, 0x80000001}}, {0x5, 0x1, {0x0, 0x84}}, {0xfffb, 0xe02, {0x3, 0x400}}, {0x4, 0x4, {0x0, 0x8001}}, {0x2, 0x3ff}, {0x4b, 0x6, {0x1, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x40}, 0x3, 0x7, 0x4, 0x8, 0x4, 'syz1\x00', "2839155adedf54f5d526b229a1e55a1afd2251570e422c2c2db4d1287b521a95", "64e135713ac38e561fce4410e81a6ef8a7098e1dad868b61a3dddf5c5d959afc", [{0x9713, 0xf01f, {0x0, 0x9}}, {0x7fff, 0x3, {0x2, 0x9}}, {0x5, 0xfffc, {0x1, 0xc}}, {0x8155, 0x0, {0x0, 0x4}}, {0x8001, 0x0, {0x0, 0x2}}, {0x5, 0x2, {0x3, 0x100}}, {0xc8e, 0xc, {0x0, 0xfffffffa}}, {0x40, 0x1000, {0x0, 0x8}}, {0x0, 0x6, {0x3, 0x800}}, {0x7, 0x9554, {0x1, 0x7}}, {0x40, 0xfff9, {0x0, 0x8e3}}, {0x2, 0xa23, {0x2, 0xfffff000}}, {0x8, 0x0, {0x0, 0x310}}, {0x5, 0xffcd, {0x0, 0x7}}, {0x4, 0x6, {0x0, 0x1}}, {0x2, 0x9, {0x1}}, {0x5, 0x3ff, {0x0, 0x9}}, {0x6, 0x2, {0x3, 0x8}}, {0x0, 0x0, {0x0, 0xd1cb}}, {0x6, 0x4, {0x1, 0x45}}, {0x6, 0x7c9d, {0x2, 0x41bd}}, {0xcf, 0x7ff, {0x1, 0xffffffff}}, {0x2, 0x80c, {0x0, 0x3}}, {0x4, 0x92, {0x0, 0x6}}, {0x4, 0x4, {0x3, 0x5}}, {0x3, 0x4, {0x0, 0x464}}, {0x7ff, 0x4, {0x3, 0x5}}, {0xae, 0x1, {0x3, 0x9}}, {0x4d5, 0x5, {0x0, 0x9}}, {0xe5, 0xc0, {0xf98d587240e53089, 0x7}}, {0x8, 0x80, {0x2, 0x2}}, {0x60, 0x7, {0x3, 0x1ab}}, {0x5dc, 0x1ff, {0x1, 0x7fff}}, {0x4, 0x6, {0x3, 0x5}}, {0x0, 0x9, {0x1, 0x1}}, {0x2, 0x5, {0x3, 0xd1}}, {0x1bfc, 0x4, {0x3, 0x40e}}, {0x5, 0x7, {0x1, 0x800}}, {0x34, 0x6, {0x3, 0x90000}}, {0x3, 0xfed, {0x1, 0xc}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x24000084}, 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='napi_poll\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@nobarrier}, {@abort}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000027, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.791699ms ago: executing program 0 (id=684): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="721fa8bed2dcec6dd07c238b793882ea91d6bfa6654fe625194f27c8114d3403a797c17d711ab4204bc6bf69474eb3aa7c3b294710f70cd5ea12c71776135ee4f0b95996", 0x44}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read(r4, &(0x7f00000000c0)=""/57, 0x39) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200"], 0x44}, 0x1, 0x2, 0x0, 0x240040a5}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES64=r5, @ANYRES32=r2, @ANYRES32=r7, @ANYRES64=r6], 0x50}}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001b40)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}], [{@fsname={'fsname', 0x3d, '%-5lx \x00'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r8 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000001e4000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x10001}, @generic={0x6, 0x4, 0xb, 0x8, 0xfffffffa}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0xf, 0x9e, &(0x7f00000007c0)=""/158, 0x40f00, 0x4a, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x8, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x1, 0x2, 0x4, 0x8}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000e40)='bdi_dirty_ratelimit\x00', r11, 0x0, 0x7}, 0x39) faccessat2(r9, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xffffffff, 0xd) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000640)={0x4, 0x7fff, 0x1, 'queue0\x00', 0x1ff}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff2cbf92ffffff86dd600000ff00140600fe8000000000000000000000000000bbfe8800000000000000", @ANYRES32=r4, @ANYRES32=r12, @ANYBLOB], 0x0) syz_emit_ethernet(0x1162, &(0x7f0000002c80)=ANY=[@ANYBLOB="e904a20000000180c2000000080043e2115400660000ce0690787f000001ac1414bb867500000003000d033360ad980ec7869fcabb05033b00128bc6c278b0486940355164dcfa96d1b4010a2ee76b168319ed86060d02801e6abe142d8410e0ba0605cdea890112d1a06f2ffad7aa01f0af7897de3de0f9060c5a6b4f1e278098d4464b050fc1ace8089c0e5abc90fa7a970a0504b682864300000000000b46d090a3660cfa9b4e0010281f1e7f7c226465a9cd5ebcae2e021225a5591ca5dcc6fb3689e376b2a8f37f0509f10789cd995c8f02076fb74646644e244e21903ec86831401a06a52131e940a76167c77c403b885eb98e2d987b2caf977ab719e84bb2942267a782425ebf68e05164bf5e47d8c3e93d8358fd6fa35bf2b51d5dc4069c1ac17785bb08e22f03f62e7269e9330fa5abebcef8ad5f55d8bfcb528fb626a0170bb25183497fe340c5fb753f2162b922e4fd0cb257737fc444779944e275a777", @ANYRES32=r12, @ANYRES32=0x41424344, @ANYBLOB="21c2000690780080051e8000000100000008000000030000040000007fff0000000800000007220704b3d3d0fbfe06e2d4c3d91312bf47df5e9d6a85fca076ec7a13151611052a0001000000000001000001ff0000000300000005000000010000000800000006000000030000000100080a00000008000000090000fb8eb392167ff8c5091ca99ce14ad79bcae87fd14b3ddaeb525a9004080b907ffbd48a86c306bdc7f01e4b1d00c078518fa0ba1431fcbb215561f5fc66048b9e961d9133f38db9eb7dad0c1da520b708cb97130fa125bd3cdf469ea1f30c2e2b0f20992923ce93cc1c975c5018b8ab0ad28cdad5573377d065bed6183691a585abd514c17d7ba64ee719140706eae76a50ad7458b5c044e4c1cb093af631f70b8296d52777ce77f1b2a9f742caa9a14776ca2754fc17afbeb51a6c286e00a7a94958dc494ebf8eda0b5a39478e545cfb1f1bfc9acd7f3d7701c64c846311d5f0d7bb8de22673a1f31ae7506e87dbccc427a08e8151d7e5dd47b75dac0872320b6eeca9a6632031085569b246d3e3bbd8a261da066c04630726a213f19d373a5f37f010c711f2e9910af768aebf449d73114b61efb2d492bb1ed34a52cb554d2722709e61fd1f9999dc1c7d739d82d4d648e375ee7b16ae470daa17741744512ff0b22c4c155fbec95ba0aea6c813e364333a8459a453456feb3af6239a804ddce93473345986b906ff7738e26c3a8220583e98d93aeb751aff617759f8a01248afbd43642a36f28a5f794923d7b0fe8299fee1cd48dd95278ef2fa7eac85291745b884e8eb85390ee05fc54455c1b0b6afe58dcfaccd2350417a7eab636a5250bfd6c3822e6ed962a3fa15086b3586c516e61c832a1c4d640529c7b3c5f4650a91672fb6cef0089d184b6a307c049bf2cf9d3a68ed427fce73da6553bcbf5dceeeb972aa02c3a23b9b09008b7161666a9376940c48fdc2e10c96e0afff4e53c0296caed3afbac2aefdaa87abf406a1f255714afb657de78ba490be11dda062d064fb758b6e74dcb764b746f8beeedf1b187083788aef4b1124eba5b6b15993de38bdc14860611b358e3757f6e412d1dd7da449a53114a80f67f4749ee6f7d8193ee9728c67f3d7f2c80c7e1c79afa8dddfc3cde58ae873d2d0fd1b3c3005db0da23327059bdcaab1beeb4313365790fba4208edb1c63569ecdb777fbd5fb465b8bc3a70b4b521b0a69568284964ad5a3fe332e794272539b2eac350c396341095bec0e9451a10eff0efd6b915d663cdbd4b8bc2cce7daebdb88474d93124aee54aabe688287c1d8a28ac22f4a718bb7deaea53402a3f3aa401e88e639d47523d262158ba80e9f1ddc85d04678acc127b60b8ed00aa949809655a578f1d261210dffe17ad1c96863cf556d692f5987905313e02e28fd17b035a77a9e430f94e170b2838946a738155098c9964fb4fcca42a99ad731df21d3a09d88a234c3139f44d1b0646c5caae842be5681120bbcd21fcb4d8eea3153be49ddf809561cbde998f0b0fe34448b2ce727fa3e35013690f48278dcb59e14c96ebb50fdd938434792f1754e762d66a5516059ae336581b9f9a249de2f6c16c1b6be0af7a25a8938461429859af35fdb31577d00cbc37e5db083db95771e6c99df2087c1817867e819458a1a7b2078c8f1c7dc9c99be2db5ecad87b92554bcc5e05a758865ffa697a53ae6d82af03a1de9f17f1f999240c682342a483d7cd4ef7078f10ca5bf0d6a4e2906fbbf0b332b054d08bd494b818e1ad196705f09c64f9175ba99251526768bea4e804a5320d170c5a031a459664e18da03580922d548debe93c98b34e10f610d96d5d2ddfa11ae590837e2aee238e6597176bc3ac555214eaf645b2838c311d714046627fcd9f9ce3d83f8441e7f70a138499d38f5ad6b91836553de4f2a2cc0970ed2d7416dacd43acf3ef6561b11e78bd85fc0ae5d1498aa380da0f715a880db005d5ceb33527eafd292ace8672472e2722412207ceb030b400129845880f2f4255331c978889351bb370a78222a12234bd0a08a6594793799ec4e23e672271e3c7e5715636b4872beed0349d68ad8227b0f4039ed08ad4232a5cda2e685431d7f525e6cd5cf473216e3198ccaa5c9fbd3d399f70ea35c9aabcf9429d638d93a28f810d268da63a4f51ab0dd0515312e51243e0d60f009bbea06198d38a02e65bb56a840a1deaf050c764c5c970affed918f1c5e806743c1fa0a53cfe028d7d45340149e94aa9eb7cecde2c88bd701f53cf18de82281645c80838d258f31f42a8ee0d54e46363527c31a409881d3b797c8de04aae20b25866f924295aafcd24be8250aa8f11b7b29cc43ca8306d0e61fb531b11b35114a8805ef50968157e57116c6bf3f17a4e541405147ba78db09dfb9b367fb2823d9812af37a421b13af60a9793745dbc5ee177aff7e081d88bc054da88528cc2166402519763b9feab45dbd6e5f2b6b4475be1e06242b636a50e8848dcee83bf65718b38f4af196103fe466f44c62f8c67fe93469ed4a0683c0826f8db4e6b2c34fec0af4b158723ffc0949416e5be7526f19557c56d01f7cda76a3282b97b12adfbbaacb83b69ac011ebacacb24763dd7ff11b359be1eac1cf48235d0664300a6527dce3e469547625823f90225f68f831a5f0e9e9db4e59354c33a1c62e2cf4ca0eb2f80b40099f6a9d6aa6d816493b035d790e848b8bf47e48f822ea5fda4fbaef74f47c8d94ddf4ea75dd3e8b04f35ece7059fdd00722802f1e4fbc5c9aa9284a951e9071d7497208a28104d5980c6ea8c021499563f2af77b07a27946a746026252be683b0ae53cc52aa83c87b3ad148e2c1f1dd6012dd3681df9edc167e4fc5bf379a7cac565e763bc6573760cf48024fbdf77d2ba8438bb5177eb207620e19d5828dd3cc2da1fcf0b69328420b460ec91e3e97d35a626708998b5b5494a4a1bf232f3d55529a49c8f1850157085ce69ec4484e5c64bbf5cf46a3b0eac0682bc0af6f721ab3fbe840442f7f4e93bf5a428db0e97e859476b67d9d835f62a41bac0a67227b7ccef0a2dbe267fccbf9d674ff54a25b097cfc1c8705588d9d0d0d67ccde64b453c8c1991cc17f0a68f789ad67cd086496d331ebf3c5510c794fdf520d7f7d020b5d1f1ff39df292dfc0fb64e5b712459ed14ae6b73be6d0cd82ce4b12b6e482363e979ccb1318afd59e3c69efaefd64a6be190e03b5b8d9b5b2d738336873355593f3fd311ea680fbbf8016f6e21357a6261839a3b17f6b4a5062f5ba000280db08ecf4fc6d5a77f5798909539a9b5c7822efa585ef5f49b84b6b283f59de8297b82fd567b4e69fda42b2b7e34e82a7a64b2ed797d9c0f7ae110065e9b5ee6e9c4922ea1ba99c876ab9ac85bdf965f5eb466b66052ae2329e7fba4f03e633297a8eddc824d984e5ce7c0987f2ea769f45e36218de73a392dc87a4a208b5ff727ce529a8dece79360d8e2842f3aec926739bfc2e9f80f1896f90d46d81c1117e8a2912c20e532e593e2f40b93bd8cdd6474780b0d611baf75cde83f36025c0b1a02c4bf1bedd7521d41afbdccf9e32e8f08f36ba871afd686ab51320e67d43db599123f63c9ecabc2884332136036fa5c584a243a99da95fb936549ea768c95cd9bed8993e79597bc9f320944f4f63f53042c9571c90d7cee81b9eb4ffd74b39b044858a294e5a9a1b012e3d1a1cb9e15fce3a0f6433db54df9ff1ea426ffad9062c76e52edf4a904fb050ce5d56e186a2280e4a68cda10e95749f2f0381b593a7e84721f92d7ced78ad48c88d9bc98d9bd1977743703e198a603b2ca7303fd9299fbc63addfcaabefb31668fa4712643e62a4604c8fb939ae295ec7a275c97d225bec304e1ecf8538c9d3622e7b4f971300ef806f91a2910d59cb4b206e543aa537fa6ca34e1e86f1334373480270ca3e9c48d2f7076b123ed172c8bb344286b1c218437c0625566fe4527afdeee1eaae9b7d27bb9dab43fbf7d630a0a3156af2d494a5d1ac208920a49b3a45c9ae683e24958fc5255a16fe983e334b33d19a33c7ef847a3540bd6d14858e53ed3be1f7d942893fe218105cf23961959d421f7553bb7b1e1ac4c7046fa6f8dc55c7910f1e662a969e3a84e0b2a61ace6fe7bc9f9f1d0aa7b335a6781e8de2b9aeee3db6878dcd0158672528e3c588125c2e5145bba6ff3c2a10086c3d281e6b29d7e6144867443d6ed778bcf029002ed8b5aead514cb019e91723e34aaf0cc1087bb4c39dc1e16b30516e04e318d74851a4ba25f0c90469e477610d06d1ce2596fdaa1e1750c8d046d0fb0e95e54c394774edbf584517a1604d68a057147677746ab622bde0b7d46d9f94e73451e44c0f5d7c03b15d8b8ae9e6e9633cb112196e895cb273856ac78c938d57a4980b60067b4e947a16446d4a573e31fa650dd18e1cc2196a8276af679dab6270456c0ba7b895731bcf8f180a9e409480236f650533079427976518b76a7e0d690e5e61a5b2915fd7a794a3f00a04881146f55a3265280f58f639ab7f822db216c37dc9f4e8ae723c11b71b6be282365720ef94dc4d8e1f7fbb1b33078eff986e276a7e5602de129b2d861387ff17391dbe8657106f57c6bb9bb58dcae7aca88269b28e769c139d0abfcb0ed81dca0b5dbb967301ef408bbd681c84980df1d14823890e65702739da7afe98aaf2b0ae150eef934baba35063c881a75aa9eb81ff2ec6ec30f19d121eee2ec6a3f2c85ecaa6706f8ba6607cf341cd1d2d7ae4333e87d1707d992e94acd038b8d61384c0ab27e01dd0d0b9eadd4d0d5bc85c861fa4c320322414de8421bdfe7cc4ce0d9fc4eb334afd825720f0437b1cb34e9a487ac0d4128a6035dc28dd690139409b12a8934428000de0b5e5677cc9fe0708acb65482292bcc98efeeed607eec2cef4247a5275af5e6d077b4c551a9337c3f846fb8c68cd6ebb2d1dafac935f7ce835f4f6703c045f701fc78b5c4245e1cefc9ef288ce64eccfee6e3c63378b3616fbb266513516ca452ab1ad7c113760d46bdc0d5ddf29153250c32bc944694a07a3ef9568ea2d64b847fa11eb85d6023afb0d7153dc848ea59049d13e27abe8e9d2630fbefcf57e5b52ad3f0496f180207bb67a1eed21435cc5145f7abb1849e87eb04fcbd787e17b735e565b08f89d1122ab5f7512782ce80023ff4fe7d99210ced342b3a949cea478c64e9826c0c59b531e1b92742a86996188e8bce6503aca1d6f99cea32abe712a9619394f594c6983fbaa3f35aa35e925acc29c4b7113c390311c4261045fde5f362558cd81c879f5f87a3b0cf139b69fc3743ed5c377400bfb7df2dcbcfee7fea69300380a065cbfc5dadc8a982d746e9941d59b42e6294f100d482cf4b66dc57dd1d61b2fae123767e942f184a0b269ebcd1e32cf60833adeeb07aaa301f72a4b75def9bc58448d85663d4d4b5b46e1f9d2732304c875cbd7f5d7c4e37a0b1149052a1ad525b271f8fe37a666b7b82cfea9f0f218ce20d5566fe14f0b154c189c9527c43bf866fc01e9dfb12e8a55191b0e40e5b724a7f3739959a9cd3361ee3dac19c491774b2fc0bfb176b9629fc567a93a0266ed4b87fd86228b2e918d6896a5b98ebdff7dfd05ecb1d57dbda7bcf899a4c7b19298743579ab1d42b5d497fa7d9758d13974bedc631f64a25147217b160d251961a27644acafeae517acc6a3fb250a0aad1bc8b808bf1a82bf5baa8b7d2314cd13b88749fa1d5d8b7639d2c4110d757cb370f5b4592fdae8bd456bb354d9c4defea236b2ba5ff250f1a82eb641e7b16a9359ca356a53d4195e2e14d9f8093e75a58e3883f6a341adbb7a0d6d5614b904d3c413be60c33bb1b269794dad3cb651eb2164d74a344e70ace169da7bbb2852ed3afde3b34e0a643e6510"], 0x0) 3.219839ms ago: executing program 1 (id=685): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402480, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=686): socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x11, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x1000000, 0x0, 0x4000}, 0x20008050) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.176957][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.185744][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.195294][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.203933][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.213571][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.222412][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.242371][ T29] audit: type=1400 audit(1746023358.663:997): avc: denied { allowed } for pid=4395 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.250399][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.261570][ T29] audit: type=1400 audit(1746023358.663:998): avc: denied { create } for pid=4395 comm="syz.2.300" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.261595][ T29] audit: type=1326 audit(1746023358.663:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6302e969 code=0x7ffc0000 [ 48.271242][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.331359][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.349040][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.363280][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.382210][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.391391][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.407460][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.435037][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.444310][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.454122][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.463258][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.474481][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.483270][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.493424][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.502817][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.512593][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.521245][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.530834][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.539547][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.548291][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.557720][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.567424][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.577475][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.612611][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.624216][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.633263][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.643282][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.652089][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.662572][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.700160][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.710893][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.720660][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.737078][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.745755][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.755366][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.764556][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.794002][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.805003][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.814016][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.823838][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.832734][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.842195][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.851200][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.860983][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.869595][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.878281][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.887903][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.896997][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.910170][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 48.925385][ T4421] loop2: detected capacity change from 0 to 512 [ 49.041559][ T4438] loop4: detected capacity change from 0 to 256 [ 49.051058][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.070047][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.078896][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.106794][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.116340][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.148485][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.157099][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.182880][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.191690][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.200449][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.209100][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.217727][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.226683][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.235382][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.253756][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.262436][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.272016][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.280873][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.289677][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.298745][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.327671][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.336592][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.346058][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.355025][ T3301] syz-executor (3301) used greatest stack depth: 10808 bytes left [ 49.364480][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.373590][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.382459][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.394150][ T4451] program syz.2.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.403610][ T4451] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 49.425210][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.435902][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.440153][ T4454] FAULT_INJECTION: forcing a failure. [ 49.440153][ T4454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.444732][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.457529][ T4454] CPU: 1 UID: 0 PID: 4454 Comm: syz.2.325 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 49.457557][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.457569][ T4454] Call Trace: [ 49.457575][ T4454] [ 49.457582][ T4454] __dump_stack+0x1d/0x30 [ 49.457602][ T4454] dump_stack_lvl+0xe8/0x140 [ 49.457620][ T4454] dump_stack+0x15/0x1b [ 49.457639][ T4454] should_fail_ex+0x265/0x280 [ 49.457669][ T4454] should_fail+0xb/0x20 [ 49.457695][ T4454] should_fail_usercopy+0x1a/0x20 [ 49.457712][ T4454] _copy_to_user+0x20/0xa0 [ 49.457758][ T4454] bpf_verifier_vlog+0x36e/0x5b0 [ 49.457796][ T4454] __btf_verifier_log+0x7f/0xb0 [ 49.457817][ T4454] ? should_failslab+0x8c/0xb0 [ 49.457844][ T4454] btf_parse_hdr+0x28e/0x3b0 [ 49.457874][ T4454] btf_new_fd+0x241/0x790 [ 49.457978][ T4454] bpf_btf_load+0x112/0x130 [ 49.458024][ T4454] __sys_bpf+0x561/0x790 [ 49.458052][ T4454] __x64_sys_bpf+0x41/0x50 [ 49.458099][ T4454] x64_sys_call+0x2478/0x2fb0 [ 49.458119][ T4454] do_syscall_64+0xd0/0x1a0 [ 49.458138][ T4454] ? clear_bhb_loop+0x25/0x80 [ 49.458227][ T4454] ? clear_bhb_loop+0x25/0x80 [ 49.458320][ T4454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.458340][ T4454] RIP: 0033:0x7f2c6302e969 [ 49.458354][ T4454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.458374][ T4454] RSP: 002b:00007f2c61697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.458392][ T4454] RAX: ffffffffffffffda RBX: 00007f2c63255fa0 RCX: 00007f2c6302e969 [ 49.458403][ T4454] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 49.458414][ T4454] RBP: 00007f2c61697090 R08: 0000000000000000 R09: 0000000000000000 [ 49.458441][ T4454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.458452][ T4454] R13: 0000000000000000 R14: 00007f2c63255fa0 R15: 00007ffe73b02068 [ 49.458468][ T4454] [ 49.679728][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.716684][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.726363][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.745958][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.763805][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.772509][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.781072][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.793565][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.802240][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.811324][ T4470] program syz.1.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.820683][ T4470] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 49.831189][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.839903][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.848578][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.857136][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.865788][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.874836][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.883428][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.893161][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.901902][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.912255][ T180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.923430][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.932072][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.941345][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.950929][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.959569][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.968209][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.977625][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.981020][ T4466] bond1: entered promiscuous mode [ 49.986303][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 49.991451][ T4466] bond1: entered allmulticast mode [ 50.006043][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.006313][ T4466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.014664][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.014682][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.014699][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.014739][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.014759][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.014778][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.014800][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081630][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081650][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081666][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081687][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081707][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081770][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081790][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081808][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081840][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081863][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081880][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081898][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081958][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081975][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.081991][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082048][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082066][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082095][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082119][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082190][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082206][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082222][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082275][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082291][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082310][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082327][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082381][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082472][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082579][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082598][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082619][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082711][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082729][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082787][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082809][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082830][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082856][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082875][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.082894][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083047][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083084][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083104][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083123][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083194][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083211][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083233][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083277][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083294][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083325][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083342][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083358][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083375][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083391][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083481][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083504][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083520][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083540][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083561][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083619][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083636][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083675][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083744][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083766][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083787][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083807][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083892][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083909][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083925][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083941][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083959][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.083990][ T4323] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 580) [ 50.126167][ T180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.134965][ T4474] loop1: detected capacity change from 0 to 2048 [ 50.137613][ T4476] program syz.3.330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.137851][ T4476] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 50.169765][ T180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.172928][ T4474] loop1: p1 < > [ 50.196275][ T4455] chnl_net:caif_netlink_parms(): no params data found [ 50.845624][ T4493] loop2: detected capacity change from 0 to 2048 [ 50.856358][ T180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.878941][ T4493] loop2: p1 < > p4 [ 50.883135][ T4493] loop2: p4 size 8388608 extends beyond EOD, truncated [ 50.954694][ T4455] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.961868][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.978571][ T4455] bridge_slave_0: entered allmulticast mode [ 50.985169][ T4455] bridge_slave_0: entered promiscuous mode [ 51.000631][ T180] bridge_slave_1: left allmulticast mode [ 51.006320][ T180] bridge_slave_1: left promiscuous mode [ 51.012125][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.021041][ T180] bridge_slave_0: left allmulticast mode [ 51.026743][ T180] bridge_slave_0: left promiscuous mode [ 51.032604][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.117975][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.129132][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.138928][ T180] bond0 (unregistering): Released all slaves [ 51.146919][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.154082][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.164142][ T4455] bridge_slave_1: entered allmulticast mode [ 51.170747][ T4455] bridge_slave_1: entered promiscuous mode [ 51.190593][ T4455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.201946][ T4455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.219283][ T180] hsr_slave_0: left promiscuous mode [ 51.225211][ T180] hsr_slave_1: left promiscuous mode [ 51.233395][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.240860][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.248830][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.256244][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.267763][ T180] veth1_macvtap: left promiscuous mode [ 51.273640][ T180] veth0_macvtap: left promiscuous mode [ 51.280341][ T180] veth1_vlan: left promiscuous mode [ 51.285739][ T180] veth0_vlan: left promiscuous mode [ 51.367272][ T180] team0 (unregistering): Port device team_slave_1 removed [ 51.381056][ T180] team0 (unregistering): Port device team_slave_0 removed [ 51.427283][ T4508] loop3: detected capacity change from 0 to 128 [ 51.450803][ T4455] team0: Port device team_slave_0 added [ 51.465588][ T4455] team0: Port device team_slave_1 added [ 51.495538][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.502661][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.528700][ T4455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.552925][ T4510] program syz.2.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.568142][ T4510] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 51.598049][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.605133][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.631193][ T4455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.651319][ T4516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 51.657845][ T4516] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.665502][ T4516] vhci_hcd vhci_hcd.0: Device attached [ 51.687782][ T4514] FAULT_INJECTION: forcing a failure. [ 51.687782][ T4514] name failslab, interval 1, probability 0, space 0, times 0 [ 51.700563][ T4514] CPU: 0 UID: 0 PID: 4514 Comm: syz.3.342 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 51.700630][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.700642][ T4514] Call Trace: [ 51.700647][ T4514] [ 51.700653][ T4514] __dump_stack+0x1d/0x30 [ 51.700727][ T4514] dump_stack_lvl+0xe8/0x140 [ 51.700745][ T4514] dump_stack+0x15/0x1b [ 51.700798][ T4514] should_fail_ex+0x265/0x280 [ 51.700823][ T4514] should_failslab+0x8c/0xb0 [ 51.700850][ T4514] __kmalloc_noprof+0xa5/0x3e0 [ 51.700867][ T4514] ? __netlink_kernel_create+0x1de/0x560 [ 51.700966][ T4514] __netlink_kernel_create+0x1de/0x560 [ 51.700992][ T4514] rtnetlink_net_init+0x4b/0xa0 [ 51.701012][ T4514] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 51.701030][ T4514] ? __pfx_rtnetlink_bind+0x10/0x10 [ 51.701086][ T4514] ops_init+0x227/0x2e0 [ 51.701141][ T4514] setup_net+0x13b/0x5f0 [ 51.701162][ T4514] copy_net_ns+0x565/0x720 [ 51.701183][ T4514] create_new_namespaces+0x20e/0x410 [ 51.701259][ T4514] unshare_nsproxy_namespaces+0xe8/0x120 [ 51.701292][ T4514] ksys_unshare+0x3d0/0x6d0 [ 51.701363][ T4514] ? ksys_write+0x16e/0x1a0 [ 51.701388][ T4514] __x64_sys_unshare+0x1f/0x30 [ 51.701491][ T4514] x64_sys_call+0x2d4b/0x2fb0 [ 51.701508][ T4514] do_syscall_64+0xd0/0x1a0 [ 51.701525][ T4514] ? clear_bhb_loop+0x25/0x80 [ 51.701583][ T4514] ? clear_bhb_loop+0x25/0x80 [ 51.701599][ T4514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.701672][ T4514] RIP: 0033:0x7f63fd44e969 [ 51.701685][ T4514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.701699][ T4514] RSP: 002b:00007f63fbab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.701784][ T4514] RAX: ffffffffffffffda RBX: 00007f63fd675fa0 RCX: 00007f63fd44e969 [ 51.701795][ T4514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 51.701806][ T4514] RBP: 00007f63fbab7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.701818][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.701830][ T4514] R13: 0000000000000000 R14: 00007f63fd675fa0 R15: 00007fff11df7b38 [ 51.701846][ T4514] [ 51.707079][ T4455] hsr_slave_0: entered promiscuous mode [ 51.738933][ T4525] loop1: detected capacity change from 0 to 512 [ 51.751902][ T4518] SELinux: ebitmap: truncated map [ 51.784559][ T4455] hsr_slave_1: entered promiscuous mode [ 51.800302][ T4518] SELinux: failed to load policy [ 51.802521][ T4525] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.819494][ T4455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.843399][ T4525] EXT4-fs (loop1): invalid journal inode [ 51.845878][ T4517] vhci_hcd: connection closed [ 51.852381][ T4525] EXT4-fs (loop1): can't get journal size [ 51.857160][ T4455] Cannot create hsr debugfs directory [ 51.875919][ T12] vhci_hcd: stop threads [ 51.884237][ T36] vhci_hcd: vhci_device speed not set [ 51.892144][ T12] vhci_hcd: release socket [ 51.968478][ T36] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 51.970165][ T12] vhci_hcd: disconnect device [ 52.018310][ T4525] EXT4-fs (loop1): 1 truncate cleaned up [ 52.026429][ T4525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.059599][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.153406][ T4455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.167932][ T4455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.190542][ T4455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.200344][ T4455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.241893][ T4455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.254074][ T4455] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.264537][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.271643][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.284103][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.291172][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.336397][ T4549] program syz.3.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.347183][ T4549] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.365870][ T4455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.384721][ T4555] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 52.396610][ T4555] SELinux: failed to load policy [ 52.412321][ T4560] netlink: 'syz.2.354': attribute type 7 has an invalid length. [ 52.420053][ T4560] __nla_validate_parse: 11 callbacks suppressed [ 52.420092][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 52.461304][ T4560] program syz.2.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.472876][ T4560] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.519762][ T4576] loop3: detected capacity change from 0 to 128 [ 52.536796][ T4455] veth0_vlan: entered promiscuous mode [ 52.550714][ T4455] veth1_vlan: entered promiscuous mode [ 52.565898][ T4455] veth0_macvtap: entered promiscuous mode [ 52.573271][ T4576] 9pnet: Could not find request transport: fd0x0000000000000004 [ 52.582728][ T4455] veth1_macvtap: entered promiscuous mode [ 52.592597][ T4580] program syz.0.358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.603838][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.612818][ T4580] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.614384][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.632560][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.643024][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.652992][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.663459][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.673353][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.683815][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.696716][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.729484][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.740047][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.750112][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.754259][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.760608][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.760618][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.760630][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.760640][ T4455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.770399][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.779066][ T4455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.827495][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 52.827506][ T29] audit: type=1400 audit(1746023363.183:1312): avc: denied { create } for pid=4583 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.854143][ T29] audit: type=1400 audit(1746023363.183:1313): avc: denied { write } for pid=4583 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.874430][ T29] audit: type=1400 audit(1746023363.183:1314): avc: denied { nlmsg_write } for pid=4583 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.876571][ T4590] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 52.895196][ T29] audit: type=1400 audit(1746023363.183:1315): avc: denied { ioctl } for pid=4583 comm="syz.1.360" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.933819][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.945154][ T4594] tipc: Started in network mode [ 52.950270][ T4594] tipc: Node identity ac14140f, cluster identity 4711 [ 52.957318][ T4594] tipc: New replicast peer: 255.255.255.255 [ 52.963395][ T4594] tipc: Enabled bearer , priority 10 [ 52.964933][ T4590] SELinux: failed to load policy [ 52.970532][ T4455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.983419][ T4455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.992359][ T4455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.001225][ T4455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.022054][ T29] audit: type=1400 audit(1746023363.453:1316): avc: denied { map } for pid=4595 comm="syz.2.364" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.046212][ T29] audit: type=1400 audit(1746023363.453:1317): avc: denied { read write } for pid=4595 comm="syz.2.364" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.073676][ T4598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 53.093300][ T4598] futex_wake_op: syz.1.366 tries to shift op by -1; fix this program [ 53.110420][ T29] audit: type=1400 audit(1746023363.533:1318): avc: denied { mounton } for pid=4455 comm="syz-executor" path="/root/syzkaller.bL8jaV/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 53.134851][ T29] audit: type=1400 audit(1746023363.533:1319): avc: denied { mount } for pid=4455 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.135022][ T4598] loop1: detected capacity change from 0 to 128 [ 53.157091][ T29] audit: type=1400 audit(1746023363.533:1320): avc: denied { mount } for pid=4455 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.194955][ T4600] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.282096][ T4598] loop1: detected capacity change from 0 to 128 [ 53.302210][ T4612] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 53.308747][ T4612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.316467][ T4612] vhci_hcd vhci_hcd.0: Device attached [ 53.335488][ T4598] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.350238][ T4598] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.372751][ T4598] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.400919][ T4598] loop1: detected capacity change from 0 to 512 [ 53.401496][ T4612] SELinux: ebitmap: truncated map [ 53.422392][ T4598] EXT4-fs (loop1): too many log groups per flexible block group [ 53.430123][ T4598] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 53.432788][ T4612] SELinux: failed to load policy [ 53.440549][ T4598] EXT4-fs (loop1): mount failed [ 53.483534][ T4614] vhci_hcd: connection closed [ 53.483836][ T12] vhci_hcd: stop threads [ 53.492830][ T12] vhci_hcd: release socket [ 53.497261][ T12] vhci_hcd: disconnect device [ 53.498511][ T1040] vhci_hcd: vhci_device speed not set [ 53.525937][ T4627] netlink: 'syz.1.371': attribute type 7 has an invalid length. [ 53.533710][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 53.550026][ T4627] program syz.1.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.559376][ T4627] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 53.715852][ T4635] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 53.725713][ T4635] SELinux: failed to load policy [ 53.873644][ T4645] loop3: detected capacity change from 0 to 512 [ 53.896614][ T4648] program syz.2.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.907245][ T4648] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 53.927645][ T4645] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 53.940484][ T4645] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 53.998367][ T4645] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 54.012889][ T4645] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.379: corrupted in-inode xattr: invalid ea_ino [ 54.015984][ T4656] netlink: 'syz.5.382': attribute type 7 has an invalid length. [ 54.034035][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 54.046999][ T4645] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.379: couldn't read orphan inode 15 (err -117) [ 54.059480][ T4658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 54.078408][ T3377] tipc: Node number set to 2886997007 [ 54.108981][ T4656] program syz.5.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.113014][ T4645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.134496][ T4656] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.183777][ T4664] loop2: detected capacity change from 0 to 1024 [ 54.188640][ T4645] EXT4-fs warning (device loop3): dx_probe:863: inode #2: comm syz.3.379: dx entry: limit 1024 != root limit 124 [ 54.202643][ T4645] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.379: Corrupt directory, running e2fsck is recommended [ 54.222579][ T4664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.239227][ T4667] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.241056][ T4664] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.385: Allocating blocks 385-513 which overlap fs metadata [ 54.253341][ T4667] SELinux: failed to load policy [ 54.273655][ T4645] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.379: path /66/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 54.330311][ T4672] EXT4-fs (loop2): pa ffff88810689d0e0: logic 16, phys. 129, len 24 [ 54.338560][ T4672] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 54.375458][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.424735][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.662410][ T4696] netlink: 'syz.0.396': attribute type 7 has an invalid length. [ 54.662424][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 54.821601][ T4701] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.831899][ T4701] SELinux: failed to load policy [ 54.838524][ T4696] program syz.0.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.863679][ T4696] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.970816][ T4705] loop1: detected capacity change from 0 to 512 [ 54.977402][ T4705] ext4: Unknown parameter 'subj_user' [ 54.995272][ T4707] loop0: detected capacity change from 0 to 512 [ 55.008016][ T4709] SELinux: Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped). [ 55.015881][ T4711] loop1: detected capacity change from 0 to 512 [ 55.027958][ T4707] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 55.034606][ T4707] EXT4-fs (loop0): mount failed [ 55.047417][ T4711] EXT4-fs: Ignoring removed oldalloc option [ 55.099894][ T4711] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.111251][ T4711] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.401: Parent and EA inode have the same ino 15 [ 55.124446][ T4711] EXT4-fs (loop1): Remounting filesystem read-only [ 55.130991][ T4711] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.143987][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 55.159096][ T4711] EXT4-fs (loop1): 1 orphan inode deleted [ 55.168633][ T4711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.193125][ T4719] program syz.5.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.202614][ T4719] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.212621][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.236251][ T4721] program syz.3.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.261030][ T4721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.381820][ T4723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 55.492730][ T4724] loop5: detected capacity change from 0 to 128 [ 55.564160][ T4728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.408'. [ 55.663373][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.406'. [ 55.725168][ T4733] netlink: 'syz.2.410': attribute type 7 has an invalid length. [ 55.732890][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 55.750866][ T4738] netlink: 'syz.1.411': attribute type 3 has an invalid length. [ 55.763015][ T4733] program syz.2.410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.773067][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 55.782211][ T4733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.864409][ T4752] FAULT_INJECTION: forcing a failure. [ 55.864409][ T4752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.877499][ T4752] CPU: 0 UID: 0 PID: 4752 Comm: syz.2.415 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 55.877573][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.877584][ T4752] Call Trace: [ 55.877590][ T4752] [ 55.877597][ T4752] __dump_stack+0x1d/0x30 [ 55.877622][ T4752] dump_stack_lvl+0xe8/0x140 [ 55.877640][ T4752] dump_stack+0x15/0x1b [ 55.877734][ T4752] should_fail_ex+0x265/0x280 [ 55.877764][ T4752] should_fail+0xb/0x20 [ 55.877787][ T4752] should_fail_usercopy+0x1a/0x20 [ 55.877805][ T4752] _copy_from_iter+0xcf/0xdd0 [ 55.877823][ T4752] ? __build_skb_around+0x1a0/0x200 [ 55.877914][ T4752] ? skb_put+0x7e/0xf0 [ 55.877944][ T4752] netlink_sendmsg+0x471/0x6b0 [ 55.878056][ T4752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.878153][ T4752] __sock_sendmsg+0x142/0x180 [ 55.878173][ T4752] ____sys_sendmsg+0x31e/0x4e0 [ 55.878240][ T4752] ___sys_sendmsg+0x17b/0x1d0 [ 55.878271][ T4752] __x64_sys_sendmsg+0xd4/0x160 [ 55.878291][ T4752] x64_sys_call+0x2999/0x2fb0 [ 55.878310][ T4752] do_syscall_64+0xd0/0x1a0 [ 55.878347][ T4752] ? clear_bhb_loop+0x25/0x80 [ 55.878398][ T4752] ? clear_bhb_loop+0x25/0x80 [ 55.878416][ T4752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.878435][ T4752] RIP: 0033:0x7f2c6302e969 [ 55.878449][ T4752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.878525][ T4752] RSP: 002b:00007f2c61697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.878545][ T4752] RAX: ffffffffffffffda RBX: 00007f2c63255fa0 RCX: 00007f2c6302e969 [ 55.878557][ T4752] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 55.878568][ T4752] RBP: 00007f2c61697090 R08: 0000000000000000 R09: 0000000000000000 [ 55.878694][ T4752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.878704][ T4752] R13: 0000000000000000 R14: 00007f2c63255fa0 R15: 00007ffe73b02068 [ 55.878719][ T4752] [ 56.184512][ T4767] loop2: detected capacity change from 0 to 512 [ 56.191817][ T4767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.210502][ T4767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.223363][ T4767] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.240316][ T4764] netlink: 'syz.0.420': attribute type 13 has an invalid length. [ 56.271054][ T4764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.313748][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.337048][ T4775] netlink: 'syz.2.424': attribute type 27 has an invalid length. [ 56.397813][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.408115][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.434672][ T4775] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.443914][ T4775] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.453045][ T4775] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.462138][ T4775] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.475774][ T4775] bond1: left promiscuous mode [ 56.480890][ T4775] bond1: left allmulticast mode [ 56.590956][ T4795] loop2: detected capacity change from 0 to 256 [ 56.603425][ T4798] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.613351][ T4798] SELinux: failed to load policy [ 56.675642][ T4800] IPv6: Can't replace route, no match found [ 56.713451][ T4816] loop2: detected capacity change from 0 to 512 [ 56.752917][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.762880][ T4814] bond1: entered promiscuous mode [ 56.765768][ T4816] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.770966][ T4814] bond1: entered allmulticast mode [ 56.791391][ T4814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.804582][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.840654][ T4823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 56.847187][ T4823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.854805][ T4823] vhci_hcd vhci_hcd.0: Device attached [ 56.875190][ T4829] netlink: 'syz.3.445': attribute type 7 has an invalid length. [ 56.887624][ T4823] SELinux: ebitmap: truncated map [ 56.894255][ T4823] SELinux: failed to load policy [ 56.900897][ T4826] vhci_hcd: connection reset by peer [ 56.907300][ T4831] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.916932][ T41] vhci_hcd: stop threads [ 56.921359][ T41] vhci_hcd: release socket [ 56.922431][ T4831] SELinux: failed to load policy [ 56.925827][ T41] vhci_hcd: disconnect device [ 56.933306][ T4833] FAULT_INJECTION: forcing a failure. [ 56.933306][ T4833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.948924][ T4833] CPU: 0 UID: 0 PID: 4833 Comm: syz.3.447 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 56.948948][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.948973][ T4833] Call Trace: [ 56.948980][ T4833] [ 56.948987][ T4833] __dump_stack+0x1d/0x30 [ 56.949007][ T4833] dump_stack_lvl+0xe8/0x140 [ 56.949025][ T4833] dump_stack+0x15/0x1b [ 56.949041][ T4833] should_fail_ex+0x265/0x280 [ 56.949109][ T4833] should_fail_alloc_page+0xf2/0x100 [ 56.949215][ T4833] __alloc_frozen_pages_noprof+0xff/0x360 [ 56.949243][ T4833] alloc_pages_mpol+0xb3/0x250 [ 56.949278][ T4833] folio_alloc_mpol_noprof+0x39/0x80 [ 56.949300][ T4833] shmem_get_folio_gfp+0x3cf/0xd40 [ 56.949333][ T4833] shmem_write_begin+0xa8/0x190 [ 56.949371][ T4833] generic_perform_write+0x181/0x490 [ 56.949405][ T4833] shmem_file_write_iter+0xc5/0xf0 [ 56.949437][ T4833] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 56.949518][ T4833] vfs_write+0x49d/0x8d0 [ 56.949541][ T4833] ksys_write+0xda/0x1a0 [ 56.949602][ T4833] __x64_sys_write+0x40/0x50 [ 56.949622][ T4833] x64_sys_call+0x2cdd/0x2fb0 [ 56.949643][ T4833] do_syscall_64+0xd0/0x1a0 [ 56.949662][ T4833] ? clear_bhb_loop+0x25/0x80 [ 56.949726][ T4833] ? clear_bhb_loop+0x25/0x80 [ 56.949744][ T4833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.949762][ T4833] RIP: 0033:0x7f63fd44d41f [ 56.949774][ T4833] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 56.949788][ T4833] RSP: 002b:00007f63fbab6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 56.949857][ T4833] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f63fd44d41f [ 56.949868][ T4833] RDX: 0000000000040000 RSI: 00007f63f3697000 RDI: 0000000000000004 [ 56.949879][ T4833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000511 [ 56.949889][ T4833] R10: 00000000000007c2 R11: 0000000000000293 R12: 0000000000000004 [ 56.949898][ T4833] R13: 00007f63fbab6ef0 R14: 00007f63fbab6eb0 R15: 00007f63f3697000 [ 56.949924][ T4833] [ 57.155904][ T36] usb 5-1: enqueue for inactive port 0 [ 57.161415][ T36] usb 5-1: enqueue for inactive port 0 [ 57.182169][ T4835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.215710][ T4837] loop3: detected capacity change from 0 to 2048 [ 57.224657][ T4835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.231437][ T4841] loop0: detected capacity change from 0 to 512 [ 57.235216][ T36] vhci_hcd: vhci_device speed not set [ 57.247365][ T4841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.255210][ T4837] loop3: p1 < > p4 [ 57.267845][ T4841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.278010][ T4837] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.301126][ T4835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.315318][ T4841] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.330825][ T4841] EXT4-fs (loop0): 1 truncate cleaned up [ 57.336818][ T4841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.362158][ T4846] Cannot find add_set index 3 as target [ 57.370886][ T4835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.409952][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.426460][ T4848] loop0: detected capacity change from 0 to 128 [ 57.445710][ T4848] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.459623][ T4848] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.462685][ T4835] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.501753][ T4848] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.0.453: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 57.504782][ T4835] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.532855][ T4835] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.544578][ T4835] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.555021][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.576666][ T4835] syz.1.448 (4835) used greatest stack depth: 10712 bytes left [ 57.591807][ T4858] binfmt_misc: register: failed to install interpreter file ./file2 [ 57.607532][ T4858] 9pnet_fd: Insufficient options for proto=fd [ 57.617630][ T4858] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 57.626540][ T4854] FAULT_INJECTION: forcing a failure. [ 57.626540][ T4854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.639876][ T4854] CPU: 0 UID: 0 PID: 4854 Comm: syz.0.455 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 57.639906][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.639938][ T4854] Call Trace: [ 57.639945][ T4854] [ 57.639953][ T4854] __dump_stack+0x1d/0x30 [ 57.639975][ T4854] dump_stack_lvl+0xe8/0x140 [ 57.639994][ T4854] dump_stack+0x15/0x1b [ 57.640012][ T4854] should_fail_ex+0x265/0x280 [ 57.640082][ T4854] should_fail_alloc_page+0xf2/0x100 [ 57.640109][ T4854] __alloc_frozen_pages_noprof+0xff/0x360 [ 57.640136][ T4854] alloc_pages_mpol+0xb3/0x250 [ 57.640224][ T4854] folio_alloc_mpol_noprof+0x39/0x80 [ 57.640243][ T4854] shmem_get_folio_gfp+0x3cf/0xd40 [ 57.640272][ T4854] shmem_write_begin+0xa8/0x190 [ 57.640296][ T4854] generic_perform_write+0x181/0x490 [ 57.640385][ T4854] shmem_file_write_iter+0xc5/0xf0 [ 57.640412][ T4854] iter_file_splice_write+0x5ef/0x970 [ 57.640445][ T4854] ? __pfx_iter_file_splice_write+0x10/0x10 [ 57.640465][ T4854] do_splice+0x974/0x10b0 [ 57.640487][ T4854] ? __rcu_read_unlock+0x4f/0x70 [ 57.640514][ T4854] ? __fget_files+0x184/0x1c0 [ 57.640537][ T4854] __se_sys_splice+0x26c/0x3a0 [ 57.640570][ T4854] __x64_sys_splice+0x78/0x90 [ 57.640588][ T4854] x64_sys_call+0xb0a/0x2fb0 [ 57.640627][ T4854] do_syscall_64+0xd0/0x1a0 [ 57.640649][ T4854] ? clear_bhb_loop+0x25/0x80 [ 57.640669][ T4854] ? clear_bhb_loop+0x25/0x80 [ 57.640687][ T4854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.640707][ T4854] RIP: 0033:0x7ff3830be969 [ 57.640795][ T4854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.640810][ T4854] RSP: 002b:00007ff381727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.640826][ T4854] RAX: ffffffffffffffda RBX: 00007ff3832e5fa0 RCX: 00007ff3830be969 [ 57.640838][ T4854] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 57.640850][ T4854] RBP: 00007ff381727090 R08: 00000000088000cc R09: 0000000000000000 [ 57.640924][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.640936][ T4854] R13: 0000000000000000 R14: 00007ff3832e5fa0 R15: 00007fffbc2f3308 [ 57.640952][ T4854] [ 57.863146][ T4858] SELinux: failed to load policy [ 57.871733][ T4864] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.881883][ T4864] SELinux: failed to load policy [ 57.901208][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 57.901220][ T29] audit: type=1400 audit(1746023368.387:1814): avc: denied { write } for pid=4865 comm="syz.1.460" name="ip6_mr_vif" dev="proc" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.951952][ T4868] loop3: detected capacity change from 0 to 1024 [ 57.963620][ T4868] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.974313][ T29] audit: type=1400 audit(1746023368.467:1815): avc: denied { mount } for pid=4862 comm="syz.2.459" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.997970][ T4868] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.006030][ T4868] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.013726][ T4868] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 58.023300][ T4868] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.461: mark_inode_dirty error [ 58.036293][ T29] audit: type=1400 audit(1746023368.527:1816): avc: denied { mount } for pid=4862 comm="syz.2.459" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.058845][ T29] audit: type=1400 audit(1746023368.527:1817): avc: denied { search } for pid=4862 comm="syz.2.459" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.080823][ T29] audit: type=1400 audit(1746023368.527:1818): avc: denied { read } for pid=4862 comm="syz.2.459" name="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.102740][ T29] audit: type=1400 audit(1746023368.527:1819): avc: denied { open } for pid=4862 comm="syz.2.459" path="/" dev="configfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.125565][ T29] audit: type=1400 audit(1746023368.577:1820): avc: denied { mount } for pid=4865 comm="syz.1.460" name="/" dev="autofs" ino=9154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 58.148051][ T4868] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.461: Invalid block bitmap block 3 in block_group 0 [ 58.161621][ T4868] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.461: Invalid block bitmap block 3 in block_group 0 [ 58.181454][ T4868] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.461: Invalid block bitmap block 3 in block_group 0 [ 58.195039][ T4868] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 58.204568][ T4868] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #3: comm syz.3.461: mark_inode_dirty error [ 58.216561][ T4868] Quota error (device loop3): write_blk: dquota write failed [ 58.224219][ T4868] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm syz.3.461: lblock 6 mapped to illegal pblock 1 (length 1) [ 58.240800][ T4868] Quota error (device loop3): write_blk: dquota write failed [ 58.248187][ T4868] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 58.284759][ T4868] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.461: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.299613][ T4868] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.461: Failed to acquire dquot type 0 [ 58.319626][ T4868] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 49: comm syz.3.461: lblock 1 mapped to illegal pblock 49 (length 1) [ 58.334643][ T4868] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.461: Failed to acquire dquot type 0 [ 58.346559][ T4868] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 58.346779][ T4868] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #15: comm syz.3.461: mark_inode_dirty error [ 58.358721][ T4883] loop5: detected capacity change from 0 to 128 [ 58.369277][ T4868] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 58.385022][ T4868] EXT4-fs (loop3): 1 orphan inode deleted [ 58.391919][ T4868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.405466][ T4883] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.417628][ T4868] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 58.427759][ T4883] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.428226][ T4868] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.461: Abort forced by user [ 58.449544][ T4868] EXT4-fs (loop3): Remounting filesystem read-only [ 58.456161][ T4868] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.469471][ T4868] syz.3.461 (4868) used greatest stack depth: 8872 bytes left [ 58.492049][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.512779][ T4895] loop3: detected capacity change from 0 to 256 [ 58.516684][ T4893] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 58.525596][ T4893] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.533282][ T4893] vhci_hcd vhci_hcd.0: Device attached [ 58.534331][ T4895] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 58.547523][ T4895] FAT-fs (loop3): Filesystem has been set read-only [ 58.562925][ T4895] FAULT_INJECTION: forcing a failure. [ 58.562925][ T4895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.570506][ T4893] SELinux: ebitmap: truncated map [ 58.576188][ T4895] CPU: 1 UID: 0 PID: 4895 Comm: syz.3.471 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 58.576218][ T4895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.576229][ T4895] Call Trace: [ 58.576236][ T4895] [ 58.576244][ T4895] __dump_stack+0x1d/0x30 [ 58.576264][ T4895] dump_stack_lvl+0xe8/0x140 [ 58.576333][ T4895] dump_stack+0x15/0x1b [ 58.576349][ T4895] should_fail_ex+0x265/0x280 [ 58.576378][ T4895] should_fail_alloc_page+0xf2/0x100 [ 58.576455][ T4895] __alloc_frozen_pages_noprof+0xff/0x360 [ 58.576483][ T4895] alloc_pages_mpol+0xb3/0x250 [ 58.576504][ T4895] vma_alloc_folio_noprof+0x1aa/0x300 [ 58.576527][ T4895] do_wp_page+0x673/0x23e0 [ 58.576631][ T4895] ? __rcu_read_lock+0x37/0x50 [ 58.576652][ T4895] handle_mm_fault+0x6dc/0x2ae0 [ 58.576737][ T4895] ? __rcu_read_unlock+0x4f/0x70 [ 58.576764][ T4895] do_user_addr_fault+0x3fe/0x1090 [ 58.576795][ T4895] exc_page_fault+0x54/0xc0 [ 58.576835][ T4895] asm_exc_page_fault+0x26/0x30 [ 58.576894][ T4895] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 58.576992][ T4895] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 58.577010][ T4895] RSP: 0018:ffffc90001547b60 EFLAGS: 00050206 [ 58.577025][ T4895] RAX: ffff88810148bc18 RBX: ffffc90001547cf0 RCX: 0000000000000e80 [ 58.577089][ T4895] RDX: 0000000000000000 RSI: ffff888008df5180 RDI: 0000200000018000 [ 58.577101][ T4895] RBP: 0000000000017b80 R08: 0000000000000664 R09: 0000000000000000 [ 58.577113][ T4895] R10: 0001888008df5000 R11: 0001888008df5fff R12: ffffc90001547cd8 [ 58.577125][ T4895] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 58.577142][ T4895] _copy_to_iter+0x2d6/0xdd0 [ 58.577161][ T4895] ? should_fail_ex+0xdb/0x280 [ 58.577241][ T4895] copy_page_to_iter+0x171/0x2b0 [ 58.577260][ T4895] process_vm_rw+0x672/0x950 [ 58.577308][ T4895] __x64_sys_process_vm_readv+0x78/0x90 [ 58.577340][ T4895] x64_sys_call+0x2978/0x2fb0 [ 58.577392][ T4895] do_syscall_64+0xd0/0x1a0 [ 58.577412][ T4895] ? clear_bhb_loop+0x25/0x80 [ 58.577509][ T4895] ? clear_bhb_loop+0x25/0x80 [ 58.577529][ T4895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.577549][ T4895] RIP: 0033:0x7f63fd44e969 [ 58.577563][ T4895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.577629][ T4895] RSP: 002b:00007f63fbab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 58.577646][ T4895] RAX: ffffffffffffffda RBX: 00007f63fd675fa0 RCX: 00007f63fd44e969 [ 58.577658][ T4895] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000000d9 [ 58.577670][ T4895] RBP: 00007f63fbab7090 R08: 0000000000000286 R09: 0000000000000000 [ 58.577681][ T4895] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002 [ 58.577692][ T4895] R13: 0000000000000000 R14: 00007f63fd675fa0 R15: 00007fff11df7b38 [ 58.577710][ T4895] [ 58.629659][ T4898] SELinux: syz.5.466 (4898) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.651356][ T4893] SELinux: failed to load policy [ 58.934448][ T4896] vhci_hcd: connection closed [ 58.934609][ T12] vhci_hcd: stop threads [ 58.943597][ T12] vhci_hcd: release socket [ 58.948029][ T12] vhci_hcd: disconnect device [ 58.997000][ T4911] __nla_validate_parse: 7 callbacks suppressed [ 58.997013][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 59.022320][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 59.059158][ T4917] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 59.100412][ T4916] loop2: detected capacity change from 0 to 128 [ 59.180099][ T4923] netlink: 'syz.2.482': attribute type 7 has an invalid length. [ 59.187791][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 59.211082][ T4923] program syz.2.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.222527][ T4923] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 59.233908][ T4455] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.263666][ T4929] unsupported nla_type 27426 [ 59.310039][ T4937] FAULT_INJECTION: forcing a failure. [ 59.310039][ T4937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.323251][ T4937] CPU: 0 UID: 0 PID: 4937 Comm: syz.5.490 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 59.323287][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.323299][ T4937] Call Trace: [ 59.323305][ T4937] [ 59.323313][ T4937] __dump_stack+0x1d/0x30 [ 59.323331][ T4937] dump_stack_lvl+0xe8/0x140 [ 59.323351][ T4937] dump_stack+0x15/0x1b [ 59.323511][ T4937] should_fail_ex+0x265/0x280 [ 59.323537][ T4937] should_fail+0xb/0x20 [ 59.323564][ T4937] should_fail_usercopy+0x1a/0x20 [ 59.323584][ T4937] _copy_from_user+0x1c/0xb0 [ 59.323606][ T4937] ___sys_recvmsg+0xaa/0x370 [ 59.323646][ T4937] ? _parse_integer+0x27/0x40 [ 59.323745][ T4937] do_recvmmsg+0x1ef/0x540 [ 59.323801][ T4937] ? fput+0x8f/0xc0 [ 59.323896][ T4937] __x64_sys_recvmmsg+0xe5/0x170 [ 59.323918][ T4937] x64_sys_call+0x1c6a/0x2fb0 [ 59.323937][ T4937] do_syscall_64+0xd0/0x1a0 [ 59.323955][ T4937] ? clear_bhb_loop+0x25/0x80 [ 59.323985][ T4937] ? clear_bhb_loop+0x25/0x80 [ 59.324007][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.324039][ T4937] RIP: 0033:0x7fd47c89e969 [ 59.324054][ T4937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.324143][ T4937] RSP: 002b:00007fd47af07038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 59.324162][ T4937] RAX: ffffffffffffffda RBX: 00007fd47cac5fa0 RCX: 00007fd47c89e969 [ 59.324174][ T4937] RDX: 0000000000000001 RSI: 0000200000005e40 RDI: 0000000000000007 [ 59.324186][ T4937] RBP: 00007fd47af07090 R08: 0000000000000000 R09: 0000000000000000 [ 59.324198][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.324210][ T4937] R13: 0000000000000000 R14: 00007fd47cac5fa0 R15: 00007ffc66febf38 [ 59.324229][ T4937] [ 59.393554][ T4941] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.437222][ T4945] SELinux: policydb magic number 0x829a03ff does not match expected magic number 0xf97cff8c [ 59.544647][ T4946] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 59.556941][ T4946] loop5: detected capacity change from 0 to 128 [ 59.566060][ T4948] loop0: detected capacity change from 0 to 512 [ 59.574291][ T4945] SELinux: failed to load policy [ 59.598074][ T4946] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.610599][ T4946] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.663717][ T4945] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.676206][ T4955] loop2: detected capacity change from 0 to 1024 [ 59.684701][ T4955] EXT4-fs: Ignoring removed oldalloc option [ 59.690762][ T4955] ext4: Bad value for 'debug_want_extra_isize' [ 59.703375][ T4957] program syz.0.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.712746][ T4957] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 59.728047][ T4455] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.746195][ T4959] loop1: detected capacity change from 0 to 1024 [ 59.754865][ T4959] EXT4-fs: Ignoring removed orlov option [ 59.760855][ T4959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.781000][ T4959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.810956][ T4959] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.823780][ T4970] FAULT_INJECTION: forcing a failure. [ 59.823780][ T4970] name failslab, interval 1, probability 0, space 0, times 0 [ 59.836480][ T4970] CPU: 0 UID: 0 PID: 4970 Comm: syz.0.503 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 59.836578][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.836589][ T4970] Call Trace: [ 59.836594][ T4970] [ 59.836599][ T4970] __dump_stack+0x1d/0x30 [ 59.836619][ T4970] dump_stack_lvl+0xe8/0x140 [ 59.836665][ T4970] dump_stack+0x15/0x1b [ 59.836682][ T4970] should_fail_ex+0x265/0x280 [ 59.836713][ T4970] ? alloc_pipe_info+0xae/0x350 [ 59.836736][ T4970] should_failslab+0x8c/0xb0 [ 59.836836][ T4970] __kmalloc_cache_noprof+0x4c/0x320 [ 59.836854][ T4970] alloc_pipe_info+0xae/0x350 [ 59.836894][ T4970] splice_direct_to_actor+0x592/0x680 [ 59.836917][ T4970] ? kstrtouint_from_user+0x9f/0xf0 [ 59.836944][ T4970] ? __pfx_direct_splice_actor+0x10/0x10 [ 59.837058][ T4970] ? __rcu_read_unlock+0x4f/0x70 [ 59.837079][ T4970] ? get_pid_task+0x96/0xd0 [ 59.837095][ T4970] ? avc_policy_seqno+0x15/0x30 [ 59.837122][ T4970] do_splice_direct+0xda/0x150 [ 59.837144][ T4970] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 59.837237][ T4970] do_sendfile+0x380/0x640 [ 59.837269][ T4970] __x64_sys_sendfile64+0x105/0x150 [ 59.837295][ T4970] x64_sys_call+0xb39/0x2fb0 [ 59.837339][ T4970] do_syscall_64+0xd0/0x1a0 [ 59.837361][ T4970] ? clear_bhb_loop+0x25/0x80 [ 59.837382][ T4970] ? clear_bhb_loop+0x25/0x80 [ 59.837445][ T4970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.837467][ T4970] RIP: 0033:0x7ff3830be969 [ 59.837482][ T4970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.837500][ T4970] RSP: 002b:00007ff381727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 59.837520][ T4970] RAX: ffffffffffffffda RBX: 00007ff3832e5fa0 RCX: 00007ff3830be969 [ 59.837532][ T4970] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 59.837541][ T4970] RBP: 00007ff381727090 R08: 0000000000000000 R09: 0000000000000000 [ 59.837596][ T4970] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 59.837606][ T4970] R13: 0000000000000000 R14: 00007ff3832e5fa0 R15: 00007fffbc2f3308 [ 59.837623][ T4970] [ 60.079666][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 60.088571][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 60.099736][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 60.120936][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.131044][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 60.139873][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 60.150345][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 60.209837][ T4991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.237310][ T4996] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 60.360518][ T5015] netlink: 'syz.3.520': attribute type 39 has an invalid length. [ 60.375422][ T5017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.441219][ T5017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.500708][ T5017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.547297][ T5029] netlink: 'syz.5.526': attribute type 15 has an invalid length. [ 60.573068][ T5017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.655039][ T5017] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.668050][ T5017] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.702677][ T5017] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.722762][ T5017] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.780812][ T5056] netlink: 'syz.5.538': attribute type 4 has an invalid length. [ 60.812979][ T5056] : renamed from bond0 (while UP) [ 60.829942][ T5058] pim6reg1: entered promiscuous mode [ 60.835296][ T5058] pim6reg1: entered allmulticast mode [ 60.931118][ T5064] FAULT_INJECTION: forcing a failure. [ 60.931118][ T5064] name failslab, interval 1, probability 0, space 0, times 0 [ 60.943812][ T5064] CPU: 0 UID: 0 PID: 5064 Comm: syz.2.542 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 60.943904][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 60.943911][ T5064] Call Trace: [ 60.943915][ T5064] [ 60.943919][ T5064] __dump_stack+0x1d/0x30 [ 60.943932][ T5064] dump_stack_lvl+0xe8/0x140 [ 60.944009][ T5064] dump_stack+0x15/0x1b [ 60.944018][ T5064] should_fail_ex+0x265/0x280 [ 60.944052][ T5064] should_failslab+0x8c/0xb0 [ 60.944114][ T5064] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 60.944127][ T5064] ? cond_bools_copy+0x30/0x80 [ 60.944138][ T5064] ? __pfx_cond_bools_destroy+0x10/0x10 [ 60.944149][ T5064] kmemdup_noprof+0x2b/0x70 [ 60.944198][ T5064] ? __pfx_cond_bools_destroy+0x10/0x10 [ 60.944208][ T5064] cond_bools_copy+0x30/0x80 [ 60.944218][ T5064] ? __pfx_cond_bools_destroy+0x10/0x10 [ 60.944229][ T5064] hashtab_duplicate+0x11b/0x360 [ 60.944284][ T5064] ? __pfx_cond_bools_copy+0x10/0x10 [ 60.944295][ T5064] cond_policydb_dup+0xd2/0x4e0 [ 60.944307][ T5064] security_set_bools+0xa0/0x340 [ 60.944324][ T5064] sel_commit_bools_write+0x1ea/0x270 [ 60.944335][ T5064] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 60.944369][ T5064] vfs_write+0x266/0x8d0 [ 60.944382][ T5064] ? __rcu_read_unlock+0x4f/0x70 [ 60.944394][ T5064] ? __fget_files+0x184/0x1c0 [ 60.944408][ T5064] ? ksys_write+0x10d/0x1a0 [ 60.944426][ T5064] __x64_sys_pwrite64+0xfd/0x150 [ 60.944475][ T5064] x64_sys_call+0xe45/0x2fb0 [ 60.944519][ T5064] do_syscall_64+0xd0/0x1a0 [ 60.944531][ T5064] ? clear_bhb_loop+0x25/0x80 [ 60.944543][ T5064] ? clear_bhb_loop+0x25/0x80 [ 60.944554][ T5064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.944596][ T5064] RIP: 0033:0x7f2c6302e969 [ 60.944618][ T5064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.944628][ T5064] RSP: 002b:00007f2c61697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 60.944639][ T5064] RAX: ffffffffffffffda RBX: 00007f2c63255fa0 RCX: 00007f2c6302e969 [ 60.944704][ T5064] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000009 [ 60.944711][ T5064] RBP: 00007f2c61697090 R08: 0000000000000000 R09: 0000000000000000 [ 60.944718][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.944725][ T5064] R13: 0000000000000000 R14: 00007f2c63255fa0 R15: 00007ffe73b02068 [ 60.944735][ T5064] [ 61.232367][ T5068] program syz.2.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.248484][ T5068] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 61.280809][ T5070] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 61.290798][ T5070] SELinux: failed to load policy [ 61.332118][ T5080] program syz.5.549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.343669][ T5080] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 61.496437][ T5100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 61.502972][ T5100] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.510668][ T5100] vhci_hcd vhci_hcd.0: Device attached [ 61.523241][ T5098] loop2: detected capacity change from 0 to 512 [ 61.545299][ T5100] SELinux: ebitmap: truncated map [ 61.545849][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.558195][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.566010][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.568154][ T5100] SELinux: failed to load policy [ 61.573800][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.586517][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.594298][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.602090][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.609912][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.617669][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.623735][ T5102] vhci_hcd: connection closed [ 61.625526][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.625752][ T3413] vhci_hcd: stop threads [ 61.630295][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.630324][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.638007][ T3413] vhci_hcd: release socket [ 61.638020][ T3413] vhci_hcd: disconnect device [ 61.642309][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.674275][ T5098] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.551: Failed to acquire dquot type 1 [ 61.674619][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.686810][ T5098] EXT4-fs (loop2): 1 truncate cleaned up [ 61.693453][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.699127][ T3380] vhci_hcd: vhci_device speed not set [ 61.700987][ T5098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.706854][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.712314][ T5098] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.724638][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.724663][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.733530][ T5098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.742800][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.742824][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.742849][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.790430][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.798142][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.805873][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.813645][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.821372][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.829114][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.836840][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.844557][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.852299][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.860033][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.867833][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.875654][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.883425][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.891214][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.898945][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.906718][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.914435][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.922246][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.930080][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.937796][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.945666][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.953561][ T36] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 61.962740][ T36] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 62.005177][ T5111] wireguard0: entered promiscuous mode [ 62.010761][ T5111] wireguard0: entered allmulticast mode [ 62.024121][ T5117] serio: Serial port pts0 [ 62.084668][ T5126] FAULT_INJECTION: forcing a failure. [ 62.084668][ T5126] name failslab, interval 1, probability 0, space 0, times 0 [ 62.097374][ T5126] CPU: 1 UID: 0 PID: 5126 Comm: syz.2.559 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 62.097405][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 62.097416][ T5126] Call Trace: [ 62.097472][ T5126] [ 62.097479][ T5126] __dump_stack+0x1d/0x30 [ 62.097555][ T5126] dump_stack_lvl+0xe8/0x140 [ 62.097575][ T5126] dump_stack+0x15/0x1b [ 62.097589][ T5126] should_fail_ex+0x265/0x280 [ 62.097614][ T5126] ? getname_flags+0x208/0x3b0 [ 62.097684][ T5126] should_failslab+0x8c/0xb0 [ 62.097763][ T5126] __kmalloc_cache_noprof+0x4c/0x320 [ 62.097781][ T5126] getname_flags+0x208/0x3b0 [ 62.097804][ T5126] __x64_sys_link+0x33/0x70 [ 62.097867][ T5126] x64_sys_call+0x2af9/0x2fb0 [ 62.097889][ T5126] do_syscall_64+0xd0/0x1a0 [ 62.097910][ T5126] ? clear_bhb_loop+0x25/0x80 [ 62.097932][ T5126] ? clear_bhb_loop+0x25/0x80 [ 62.097949][ T5126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.098095][ T5126] RIP: 0033:0x7f2c6302e969 [ 62.098111][ T5126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.098130][ T5126] RSP: 002b:00007f2c61697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 62.098149][ T5126] RAX: ffffffffffffffda RBX: 00007f2c63255fa0 RCX: 00007f2c6302e969 [ 62.098211][ T5126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000003040 [ 62.098221][ T5126] RBP: 00007f2c61697090 R08: 0000000000000000 R09: 0000000000000000 [ 62.098231][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.098249][ T5126] R13: 0000000000000000 R14: 00007f2c63255fa0 R15: 00007ffe73b02068 [ 62.098269][ T5126] [ 62.277620][ T5127] syz.1.556 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.313994][ T5131] loop2: detected capacity change from 0 to 512 [ 62.332926][ T5131] EXT4-fs (loop2): too many log groups per flexible block group [ 62.340936][ T5131] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 62.347880][ T5131] EXT4-fs (loop2): mount failed [ 62.373367][ T5141] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 62.379927][ T5141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.387713][ T5141] vhci_hcd vhci_hcd.0: Device attached [ 62.415667][ T5143] vhci_hcd: connection closed [ 62.415826][ T41] vhci_hcd: stop threads [ 62.424906][ T41] vhci_hcd: release socket [ 62.424954][ T5147] loop1: detected capacity change from 0 to 2048 [ 62.429432][ T41] vhci_hcd: disconnect device [ 62.436254][ T5147] ext4: Unknown parameter 'noacl' [ 62.490659][ T5150] loop1: detected capacity change from 0 to 1024 [ 62.510830][ T5150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.524139][ T5150] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.545445][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.847494][ T5157] netlink: 'syz.3.568': attribute type 7 has an invalid length. [ 62.862201][ T5157] program syz.3.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.872297][ T5157] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.897206][ T5159] loop3: detected capacity change from 0 to 512 [ 62.921028][ T5159] EXT4-fs (loop3): 1 orphan inode deleted [ 62.927389][ T5159] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.938721][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 62.938733][ T29] audit: type=1400 audit(1746023373.427:2198): avc: denied { map } for pid=5158 comm="syz.3.569" path="socket:[10935]" dev="sockfs" ino=10935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.967898][ T29] audit: type=1400 audit(1746023373.427:2199): avc: denied { read } for pid=5158 comm="syz.3.569" path="socket:[10935]" dev="sockfs" ino=10935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.992762][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 63.002590][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 63.014858][ T29] audit: type=1400 audit(1746023373.497:2200): avc: denied { write } for pid=5158 comm="syz.3.569" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.015295][ T5159] EXT4-fs (loop3): shut down requested (0) [ 63.036507][ T29] audit: type=1400 audit(1746023373.497:2201): avc: denied { add_name } for pid=5158 comm="syz.3.569" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.063985][ T29] audit: type=1400 audit(1746023373.497:2202): avc: denied { create } for pid=5158 comm="syz.3.569" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.085188][ T29] audit: type=1400 audit(1746023373.497:2203): avc: denied { read append open } for pid=5158 comm="syz.3.569" path="/106/file1/memory.numa_stat" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.109949][ T29] audit: type=1400 audit(1746023373.497:2204): avc: denied { ioctl } for pid=5158 comm="syz.3.569" path="/106/file1/memory.numa_stat" dev="loop3" ino=16 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.149581][ T5167] loop5: detected capacity change from 0 to 128 [ 63.167388][ T29] audit: type=1400 audit(1746023373.647:2205): avc: denied { mount } for pid=5165 comm="syz.5.570" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 63.227267][ T29] audit: type=1400 audit(1746023373.707:2206): avc: denied { connect } for pid=5165 comm="syz.5.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.326434][ T5186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 63.333055][ T5186] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.340837][ T5186] vhci_hcd vhci_hcd.0: Device attached [ 63.381169][ T5192] netlink: 'syz.3.579': attribute type 7 has an invalid length. [ 63.384824][ T5186] SELinux: ebitmap: truncated map [ 63.398059][ T5186] SELinux: failed to load policy [ 63.405947][ T5192] program syz.3.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.415256][ T5187] vhci_hcd: connection closed [ 63.415633][ T5192] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 63.417556][ T41] vhci_hcd: stop threads [ 63.433191][ T41] vhci_hcd: release socket [ 63.437653][ T41] vhci_hcd: disconnect device [ 63.444802][ T5194] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 63.451406][ T5194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.459230][ T5194] vhci_hcd vhci_hcd.0: Device attached [ 63.467261][ T5195] vhci_hcd: connection closed [ 63.467457][ T12] vhci_hcd: stop threads [ 63.476444][ T12] vhci_hcd: release socket [ 63.480874][ T12] vhci_hcd: disconnect device [ 63.532027][ T5203] loop1: detected capacity change from 0 to 512 [ 63.550835][ T5203] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.562390][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.583: corrupted inode contents [ 63.575267][ T5203] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.583: mark_inode_dirty error [ 63.588025][ T5203] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.583: corrupted inode contents [ 63.599921][ T5203] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.583: mark_inode_dirty error [ 63.635684][ T5214] loop1: detected capacity change from 0 to 128 [ 63.643849][ T5214] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.965874][ T5229] netlink: 'syz.2.591': attribute type 7 has an invalid length. [ 63.983851][ T5229] program syz.2.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.993327][ T5229] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 64.473454][ T5253] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 64.480035][ T5253] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.487640][ T5253] vhci_hcd vhci_hcd.0: Device attached [ 64.514587][ T5253] SELinux: ebitmap: truncated map [ 64.532369][ T5253] SELinux: failed to load policy [ 64.542248][ T5254] vhci_hcd: connection closed [ 64.542547][ T41] vhci_hcd: stop threads [ 64.551618][ T41] vhci_hcd: release socket [ 64.556031][ T41] vhci_hcd: disconnect device [ 64.558096][ T5257] loop1: detected capacity change from 0 to 512 [ 64.569954][ T5257] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.669979][ T5265] __nla_validate_parse: 14 callbacks suppressed [ 64.669995][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 64.843302][ T5268] loop5: detected capacity change from 0 to 512 [ 64.852582][ T5268] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 64.862164][ T5268] EXT4-fs (loop5): invalid journal inode [ 64.867880][ T5268] EXT4-fs (loop5): can't get journal size [ 64.874203][ T5268] EXT4-fs (loop5): 1 truncate cleaned up [ 64.882549][ T5268] tipc: Started in network mode [ 64.887430][ T5268] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 64.896766][ T5268] tipc: Enabled bearer , priority 10 [ 64.906864][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.602'. [ 64.925176][ T5273] loop2: detected capacity change from 0 to 512 [ 64.933039][ T5273] EXT4-fs: Ignoring removed nobh option [ 64.940598][ T5273] EXT4-fs: quotafile must be on filesystem root [ 64.947826][ T4455] EXT4-fs unmount: 9 callbacks suppressed [ 64.947838][ T4455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.958045][ T5273] loop9: detected capacity change from 0 to 5 [ 64.969286][ T5273] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.977594][ T5273] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.985583][ T5273] loop9: unable to read partition table [ 64.991505][ T5273] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 64.991505][ T5273] U) failed (rc=-5) [ 65.006844][ T5273] FAULT_INJECTION: forcing a failure. [ 65.006844][ T5273] name failslab, interval 1, probability 0, space 0, times 0 [ 65.019500][ T5273] CPU: 0 UID: 0 PID: 5273 Comm: syz.2.604 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 65.019584][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 65.019598][ T5273] Call Trace: [ 65.019605][ T5273] [ 65.019613][ T5273] __dump_stack+0x1d/0x30 [ 65.019634][ T5273] dump_stack_lvl+0xe8/0x140 [ 65.019657][ T5273] dump_stack+0x15/0x1b [ 65.019741][ T5273] should_fail_ex+0x265/0x280 [ 65.019821][ T5273] should_failslab+0x8c/0xb0 [ 65.019880][ T5273] kmem_cache_alloc_noprof+0x50/0x310 [ 65.019907][ T5273] ? security_file_alloc+0x32/0x100 [ 65.019928][ T5273] security_file_alloc+0x32/0x100 [ 65.019998][ T5273] init_file+0x5c/0x1d0 [ 65.020037][ T5273] alloc_empty_file+0x8b/0x200 [ 65.020064][ T5273] alloc_file_pseudo+0xc6/0x160 [ 65.020119][ T5273] sock_alloc_file+0x9c/0x1e0 [ 65.020139][ T5273] __sys_socketpair+0x2b8/0x430 [ 65.020205][ T5273] __x64_sys_socketpair+0x52/0x60 [ 65.020253][ T5273] x64_sys_call+0x23f2/0x2fb0 [ 65.020275][ T5273] do_syscall_64+0xd0/0x1a0 [ 65.020295][ T5273] ? clear_bhb_loop+0x25/0x80 [ 65.020317][ T5273] ? clear_bhb_loop+0x25/0x80 [ 65.020339][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.020438][ T5273] RIP: 0033:0x7f2c6302e969 [ 65.020454][ T5273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.020473][ T5273] RSP: 002b:00007f2c61697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 65.020496][ T5273] RAX: ffffffffffffffda RBX: 00007f2c63255fa0 RCX: 00007f2c6302e969 [ 65.020509][ T5273] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 65.020522][ T5273] RBP: 00007f2c61697090 R08: 0000000000000000 R09: 0000000000000000 [ 65.020535][ T5273] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000002 [ 65.020546][ T5273] R13: 0000000000000000 R14: 00007f2c63255fa0 R15: 00007ffe73b02068 [ 65.020561][ T5273] [ 65.243719][ T5283] loop2: detected capacity change from 0 to 512 [ 65.250749][ T5283] EXT4-fs: Ignoring removed nobh option [ 65.257614][ T5281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 65.267900][ T5283] EXT4-fs: quotafile must be on filesystem root [ 65.276543][ T5281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42543 sclass=netlink_route_socket pid=5281 comm=syz.3.607 [ 65.305229][ T5283] loop9: detected capacity change from 0 to 5 [ 65.313561][ T5283] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.321586][ T5283] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.329479][ T5283] loop9: unable to read partition table [ 65.335202][ T5283] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 65.335202][ T5283] U) failed (rc=-5) [ 65.414343][ T5289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5289 comm=syz.2.610 [ 65.509080][ T5300] loop2: detected capacity change from 0 to 1024 [ 65.515993][ T5300] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.526980][ T5300] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.537512][ T5300] JBD2: no valid journal superblock found [ 65.543258][ T5300] EXT4-fs (loop2): Could not load journal inode [ 65.718764][ T5304] loop2: detected capacity change from 0 to 512 [ 65.725603][ T5304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.737693][ T5304] EXT4-fs (loop2): 1 truncate cleaned up [ 65.743574][ T5304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.784670][ T5307] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 65.786006][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.791194][ T5307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.791300][ T5307] vhci_hcd vhci_hcd.0: Device attached [ 65.823767][ T5311] FAULT_INJECTION: forcing a failure. [ 65.823767][ T5311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.836949][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.2.619 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 65.836975][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 65.836988][ T5311] Call Trace: [ 65.836995][ T5311] [ 65.837004][ T5311] __dump_stack+0x1d/0x30 [ 65.837089][ T5311] dump_stack_lvl+0xe8/0x140 [ 65.837104][ T5311] dump_stack+0x15/0x1b [ 65.837118][ T5311] should_fail_ex+0x265/0x280 [ 65.837227][ T5311] should_fail+0xb/0x20 [ 65.837253][ T5311] should_fail_usercopy+0x1a/0x20 [ 65.837315][ T5311] copy_page_from_iter_atomic+0x21b/0xff0 [ 65.837340][ T5311] ? shmem_write_begin+0xa8/0x190 [ 65.837442][ T5311] ? shmem_write_begin+0xe1/0x190 [ 65.837467][ T5311] generic_perform_write+0x2c2/0x490 [ 65.837494][ T5311] shmem_file_write_iter+0xc5/0xf0 [ 65.837548][ T5311] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 65.837616][ T5311] vfs_write+0x49d/0x8d0 [ 65.837646][ T5311] ksys_write+0xda/0x1a0 [ 65.837681][ T5311] __x64_sys_write+0x40/0x50 [ 65.837706][ T5311] x64_sys_call+0x2cdd/0x2fb0 [ 65.837799][ T5311] do_syscall_64+0xd0/0x1a0 [ 65.837822][ T5311] ? clear_bhb_loop+0x25/0x80 [ 65.837934][ T5311] ? clear_bhb_loop+0x25/0x80 [ 65.837969][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.837987][ T5311] RIP: 0033:0x7f2c6302d41f [ 65.838002][ T5311] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 65.838081][ T5311] RSP: 002b:00007f2c61696df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 65.838159][ T5311] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f2c6302d41f [ 65.838172][ T5311] RDX: 0000000000040000 RSI: 00007f2c59277000 RDI: 0000000000000007 [ 65.838243][ T5311] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000046d [ 65.838253][ T5311] R10: 00000000000003be R11: 0000000000000293 R12: 0000000000000007 [ 65.838263][ T5311] R13: 00007f2c61696ef0 R14: 00007f2c61696eb0 R15: 00007f2c59277000 [ 65.838279][ T5311] [ 66.039479][ T5311] loop2: detected capacity change from 0 to 512 [ 66.048555][ T1040] tipc: Node number set to 4269801488 [ 66.054026][ T5311] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.067156][ T5307] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.076909][ T5311] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.619: inode #1: comm syz.2.619: iget: illegal inode # [ 66.091218][ T5307] SELinux: failed to load policy [ 66.092589][ T5314] loop5: detected capacity change from 0 to 512 [ 66.096484][ T5311] EXT4-fs (loop2): no journal found [ 66.107795][ T5311] EXT4-fs (loop2): can't get journal size [ 66.108258][ T5314] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 66.113946][ T5308] vhci_hcd: connection closed [ 66.122704][ T5314] EXT4-fs (loop5): invalid journal inode [ 66.123457][ T41] vhci_hcd: stop threads [ 66.127423][ T5314] EXT4-fs (loop5): can't get journal size [ 66.138405][ T3388] vhci_hcd: vhci_device speed not set [ 66.143091][ T41] vhci_hcd: release socket [ 66.152879][ T41] vhci_hcd: disconnect device [ 66.158466][ T5311] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 66.168047][ T5314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 66.173194][ T5311] EXT4-fs (loop2): failed to initialize system zone (-22) [ 66.176350][ T5314] System zones: 1-12, 13-13 [ 66.187839][ T5311] EXT4-fs (loop2): mount failed [ 66.187871][ T5314] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.620: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 66.210454][ T5314] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.620: couldn't read orphan inode 15 (err -117) [ 66.222222][ T3388] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 66.222249][ T3388] usb 3-1: enqueue for inactive port 0 [ 66.222267][ T3388] usb 3-1: enqueue for inactive port 0 [ 66.222283][ T3388] usb 3-1: enqueue for inactive port 0 [ 66.251555][ T5314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.265133][ T5322] FAULT_INJECTION: forcing a failure. [ 66.265133][ T5322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.265170][ T5314] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.287439][ T5322] CPU: 1 UID: 0 PID: 5322 Comm: syz.2.623 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 66.287457][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.287464][ T5322] Call Trace: [ 66.287469][ T5322] [ 66.287534][ T5322] __dump_stack+0x1d/0x30 [ 66.287547][ T5322] dump_stack_lvl+0xe8/0x140 [ 66.287558][ T5322] dump_stack+0x15/0x1b [ 66.287567][ T5322] should_fail_ex+0x265/0x280 [ 66.287714][ T5322] should_fail_alloc_page+0xf2/0x100 [ 66.287731][ T5322] __alloc_frozen_pages_noprof+0xff/0x360 [ 66.287747][ T5322] alloc_pages_mpol+0xb3/0x250 [ 66.287759][ T5322] vma_alloc_folio_noprof+0x1aa/0x300 [ 66.287826][ T5322] handle_mm_fault+0x1056/0x2ae0 [ 66.287841][ T5322] ? __rcu_read_lock+0x37/0x50 [ 66.287979][ T5322] __get_user_pages+0xde2/0x1d20 [ 66.288000][ T5322] __mm_populate+0x243/0x3a0 [ 66.288030][ T5322] do_mlock+0x47f/0x520 [ 66.288041][ T5322] ? __secure_computing+0x82/0x150 [ 66.288053][ T5322] __x64_sys_mlock+0x36/0x50 [ 66.288063][ T5322] x64_sys_call+0x28f4/0x2fb0 [ 66.288075][ T5322] do_syscall_64+0xd0/0x1a0 [ 66.288132][ T5322] ? clear_bhb_loop+0x25/0x80 [ 66.288144][ T5322] ? clear_bhb_loop+0x25/0x80 [ 66.288155][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.288167][ T5322] RIP: 0033:0x7f2c6302e969 [ 66.288219][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.288229][ T5322] RSP: 002b:00007f2c61697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 66.288240][ T5322] RAX: ffffffffffffffda RBX: 00007f2c63255fa0 RCX: 00007f2c6302e969 [ 66.288247][ T5322] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 66.288254][ T5322] RBP: 00007f2c61697090 R08: 0000000000000000 R09: 0000000000000000 [ 66.288261][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.288292][ T5322] R13: 0000000000000000 R14: 00007f2c63255fa0 R15: 00007ffe73b02068 [ 66.288301][ T5322] [ 66.501247][ T3388] vhci_hcd: vhci_device speed not set [ 66.566331][ T5330] loop2: detected capacity change from 0 to 512 [ 66.572954][ T5330] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.579529][ T5330] EXT4-fs: Ignoring removed orlov option [ 66.587426][ T5330] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 3: comm syz.2.626: lblock 0 mapped to illegal pblock 3 (length 1) [ 66.602700][ T5330] EXT4-fs warning (device loop2): dx_probe:793: inode #2: lblock 0: comm syz.2.626: error -117 reading directory block [ 66.615398][ T5330] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 66.628326][ T5330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.644170][ T5334] program syz.0.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.653549][ T5334] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 66.664955][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.685496][ T5338] FAULT_INJECTION: forcing a failure. [ 66.685496][ T5338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.698749][ T5338] CPU: 1 UID: 0 PID: 5338 Comm: syz.2.628 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 66.698816][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.698828][ T5338] Call Trace: [ 66.698834][ T5338] [ 66.698842][ T5338] __dump_stack+0x1d/0x30 [ 66.698860][ T5338] dump_stack_lvl+0xe8/0x140 [ 66.698876][ T5338] dump_stack+0x15/0x1b [ 66.698973][ T5338] should_fail_ex+0x265/0x280 [ 66.699051][ T5338] should_fail+0xb/0x20 [ 66.699076][ T5338] should_fail_usercopy+0x1a/0x20 [ 66.699095][ T5338] copy_page_from_iter_atomic+0x21b/0xff0 [ 66.699117][ T5338] ? shmem_write_begin+0xa8/0x190 [ 66.699138][ T5338] ? shmem_write_begin+0xe1/0x190 [ 66.699219][ T5338] generic_perform_write+0x2c2/0x490 [ 66.699276][ T5338] shmem_file_write_iter+0xc5/0xf0 [ 66.699307][ T5338] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 66.699332][ T5338] vfs_write+0x49d/0x8d0 [ 66.699429][ T5338] ksys_write+0xda/0x1a0 [ 66.699449][ T5338] __x64_sys_write+0x40/0x50 [ 66.699469][ T5338] x64_sys_call+0x2cdd/0x2fb0 [ 66.699490][ T5338] do_syscall_64+0xd0/0x1a0 [ 66.699524][ T5338] ? clear_bhb_loop+0x25/0x80 [ 66.699595][ T5338] ? clear_bhb_loop+0x25/0x80 [ 66.699617][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.699648][ T5338] RIP: 0033:0x7f2c6302d41f [ 66.699661][ T5338] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 66.699675][ T5338] RSP: 002b:00007f2c61696df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 66.699693][ T5338] RAX: ffffffffffffffda RBX: 0000000000014800 RCX: 00007f2c6302d41f [ 66.699705][ T5338] RDX: 0000000000014800 RSI: 00007f2c59277000 RDI: 0000000000000005 [ 66.699719][ T5338] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000006fa [ 66.699731][ T5338] R10: 00000000000007d0 R11: 0000000000000293 R12: 0000000000000005 [ 66.699743][ T5338] R13: 00007f2c61696ef0 R14: 00007f2c61696eb0 R15: 00007f2c59277000 [ 66.699757][ T5338] [ 66.700385][ T5338] loop2: detected capacity change from 0 to 164 [ 66.916930][ T5338] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.926132][ T5342] program syz.1.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.935757][ T5342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 66.945306][ T5344] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.955114][ T5344] SELinux: failed to load policy [ 66.980188][ T5348] loop0: detected capacity change from 0 to 512 [ 66.993931][ T5348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.994073][ T5353] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 67.016449][ T5348] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.054766][ T5358] program syz.5.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.070980][ T5361] SELinux: syz.1.638 (5361) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.084723][ T5358] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.098019][ T5363] program syz.3.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.107419][ T5363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.107556][ T1040] IPVS: starting estimator thread 0... [ 67.130071][ T5348] EXT4-fs: Ignoring removed orlov option [ 67.137995][ T5348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.146595][ T5348] EXT4-fs (loop0): can't enable nombcache during remount [ 67.164989][ T5348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.633'. [ 67.199421][ T5376] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 67.212858][ T5376] SELinux: failed to load policy [ 67.218514][ T5378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.644'. [ 67.218548][ T5364] IPVS: using max 2976 ests per chain, 148800 per kthread [ 67.249909][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.278588][ T5380] netlink: 'syz.3.646': attribute type 7 has an invalid length. [ 67.286272][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 67.299727][ T5382] loop2: detected capacity change from 0 to 2048 [ 67.312164][ T5380] program syz.3.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.322116][ T5380] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.348741][ T5382] loop2: p1 < > p4 [ 67.355904][ T5382] loop2: p4 size 8388608 extends beyond EOD, truncated [ 67.398729][ T5392] program syz.1.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.415068][ T5392] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.483556][ T5370] netlink: 'syz.5.641': attribute type 21 has an invalid length. [ 67.491422][ T5370] netlink: 'syz.5.641': attribute type 20 has an invalid length. [ 67.503280][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 67.512194][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 67.521082][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 67.531271][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 67.540249][ T5401] netlink: 'syz.1.654': attribute type 6 has an invalid length. [ 67.548992][ T5405] FAULT_INJECTION: forcing a failure. [ 67.548992][ T5405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.561544][ T5406] netlink: 'syz.1.654': attribute type 6 has an invalid length. [ 67.562086][ T5405] CPU: 0 UID: 0 PID: 5405 Comm: syz.0.656 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 67.562113][ T5405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 67.562206][ T5405] Call Trace: [ 67.562212][ T5405] [ 67.562219][ T5405] __dump_stack+0x1d/0x30 [ 67.562270][ T5405] dump_stack_lvl+0xe8/0x140 [ 67.562289][ T5405] dump_stack+0x15/0x1b [ 67.562305][ T5405] should_fail_ex+0x265/0x280 [ 67.562335][ T5405] should_fail+0xb/0x20 [ 67.562372][ T5405] should_fail_usercopy+0x1a/0x20 [ 67.562390][ T5405] copy_page_from_iter_atomic+0x21b/0xff0 [ 67.562457][ T5405] ? shmem_write_begin+0xa8/0x190 [ 67.562521][ T5405] ? shmem_write_begin+0xe1/0x190 [ 67.562546][ T5405] generic_perform_write+0x2c2/0x490 [ 67.562578][ T5405] shmem_file_write_iter+0xc5/0xf0 [ 67.562607][ T5405] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 67.562757][ T5405] vfs_write+0x49d/0x8d0 [ 67.562787][ T5405] ksys_write+0xda/0x1a0 [ 67.562811][ T5405] __x64_sys_write+0x40/0x50 [ 67.562834][ T5405] x64_sys_call+0x2cdd/0x2fb0 [ 67.562918][ T5405] do_syscall_64+0xd0/0x1a0 [ 67.562939][ T5405] ? clear_bhb_loop+0x25/0x80 [ 67.562959][ T5405] ? clear_bhb_loop+0x25/0x80 [ 67.562979][ T5405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.563000][ T5405] RIP: 0033:0x7ff3830bd41f [ 67.563045][ T5405] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.563106][ T5405] RSP: 002b:00007ff381726df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.563124][ T5405] RAX: ffffffffffffffda RBX: 0000000000014800 RCX: 00007ff3830bd41f [ 67.563136][ T5405] RDX: 0000000000014800 RSI: 00007ff379307000 RDI: 0000000000000006 [ 67.563148][ T5405] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000006fa [ 67.563160][ T5405] R10: 00000000000007d0 R11: 0000000000000293 R12: 0000000000000006 [ 67.563171][ T5405] R13: 00007ff381726ef0 R14: 00007ff381726eb0 R15: 00007ff379307000 [ 67.563215][ T5405] [ 67.570086][ T5405] loop0: detected capacity change from 0 to 164 [ 67.720246][ T5412] loop1: detected capacity change from 0 to 1024 [ 67.752244][ T5411] loop2: detected capacity change from 0 to 256 [ 67.791356][ T5412] EXT4-fs: Ignoring removed nobh option [ 67.797047][ T5412] EXT4-fs: Ignoring removed bh option [ 67.803187][ T5405] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.814947][ T5411] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.837992][ T5412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0003] [ 67.858506][ T5425] netlink: 'syz.0.660': attribute type 7 has an invalid length. [ 67.866515][ T5412] System zones: 1-12 [ 67.872978][ T5412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.894999][ T5425] program syz.0.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.904489][ T5425] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 67.956088][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 67.956102][ T29] audit: type=1400 audit(1746023378.437:2608): avc: denied { create } for pid=5434 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.968184][ T5435] netlink: 'syz.5.665': attribute type 11 has an invalid length. [ 67.998080][ T29] audit: type=1400 audit(1746023378.437:2609): avc: denied { module_request } for pid=5434 comm="syz.5.665" kmod="net-pf-16-proto-21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.020550][ T29] audit: type=1400 audit(1746023378.457:2610): avc: denied { create } for pid=5434 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.040046][ T29] audit: type=1400 audit(1746023378.457:2611): avc: denied { write } for pid=5434 comm="syz.5.665" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.041541][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.060191][ T29] audit: type=1400 audit(1746023378.457:2612): avc: denied { create } for pid=5434 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.089774][ T29] audit: type=1400 audit(1746023378.457:2613): avc: denied { write } for pid=5434 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.110088][ T29] audit: type=1400 audit(1746023378.457:2614): avc: denied { read } for pid=5434 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.130385][ T29] audit: type=1400 audit(1746023378.477:2615): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.159645][ T5442] FAULT_INJECTION: forcing a failure. [ 68.159645][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 68.172654][ T5442] CPU: 0 UID: 0 PID: 5442 Comm: syz.3.666 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 68.172726][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 68.172740][ T5442] Call Trace: [ 68.172745][ T5442] [ 68.172751][ T5442] __dump_stack+0x1d/0x30 [ 68.172770][ T5442] dump_stack_lvl+0xe8/0x140 [ 68.172789][ T5442] dump_stack+0x15/0x1b [ 68.172828][ T5442] should_fail_ex+0x265/0x280 [ 68.172924][ T5442] should_failslab+0x8c/0xb0 [ 68.172949][ T5442] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 68.172973][ T5442] ? scm_fp_dup+0x40/0x200 [ 68.172993][ T5442] kmemdup_noprof+0x2b/0x70 [ 68.173009][ T5442] scm_fp_dup+0x40/0x200 [ 68.173028][ T5442] __unix_dgram_recvmsg+0x693/0x840 [ 68.173111][ T5442] unix_dgram_recvmsg+0x81/0x90 [ 68.173179][ T5442] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 68.173280][ T5442] sock_recvmsg_nosec+0x104/0x130 [ 68.173302][ T5442] ____sys_recvmsg+0x26f/0x280 [ 68.173323][ T5442] ___sys_recvmsg+0x11f/0x370 [ 68.173350][ T5442] do_recvmmsg+0x1ef/0x540 [ 68.173450][ T5442] ? fput+0x8f/0xc0 [ 68.173466][ T5442] __x64_sys_recvmmsg+0xe5/0x170 [ 68.173529][ T5442] x64_sys_call+0x1c6a/0x2fb0 [ 68.173550][ T5442] do_syscall_64+0xd0/0x1a0 [ 68.173572][ T5442] ? clear_bhb_loop+0x25/0x80 [ 68.173594][ T5442] ? clear_bhb_loop+0x25/0x80 [ 68.173613][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.173704][ T5442] RIP: 0033:0x7f63fd44e969 [ 68.173719][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.173737][ T5442] RSP: 002b:00007f63fbab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 68.173755][ T5442] RAX: ffffffffffffffda RBX: 00007f63fd675fa0 RCX: 00007f63fd44e969 [ 68.173821][ T5442] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 68.173834][ T5442] RBP: 00007f63fbab7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.173881][ T5442] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 68.173893][ T5442] R13: 0000000000000000 R14: 00007f63fd675fa0 R15: 00007fff11df7b38 [ 68.173908][ T5442] [ 68.393295][ T29] audit: type=1400 audit(1746023378.667:2616): avc: denied { create } for pid=5443 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.414754][ T29] audit: type=1400 audit(1746023378.907:2617): avc: denied { ioctl } for pid=5443 comm="syz.1.668" path="socket:[12464]" dev="sockfs" ino=12464 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.519096][ T5445] uprobe: syz.0.669:5445 failed to unregister, leaking uprobe [ 68.589353][ T5459] netlink: 'syz.2.674': attribute type 7 has an invalid length. [ 68.608651][ T5459] program syz.2.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.628572][ T5459] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 68.676486][ T5470] batadv_slave_1: entered promiscuous mode [ 68.699535][ T5473] x_tables: duplicate underflow at hook 1 [ 68.705494][ T5467] batadv_slave_1: left promiscuous mode [ 68.745127][ T5476] netem: change failed [ 68.760031][ T5483] batadv_slave_0: entered promiscuous mode [ 68.775141][ T5483] FAULT_INJECTION: forcing a failure. [ 68.775141][ T5483] name failslab, interval 1, probability 0, space 0, times 0 [ 68.787901][ T5483] CPU: 1 UID: 0 PID: 5483 Comm: syz.5.682 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 68.787926][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 68.787936][ T5483] Call Trace: [ 68.787942][ T5483] [ 68.787948][ T5483] __dump_stack+0x1d/0x30 [ 68.787967][ T5483] dump_stack_lvl+0xe8/0x140 [ 68.787982][ T5483] dump_stack+0x15/0x1b [ 68.787997][ T5483] should_fail_ex+0x265/0x280 [ 68.788043][ T5483] should_failslab+0x8c/0xb0 [ 68.788066][ T5483] kmem_cache_alloc_noprof+0x50/0x310 [ 68.788104][ T5483] ? skb_clone+0x151/0x1f0 [ 68.788124][ T5483] skb_clone+0x151/0x1f0 [ 68.788140][ T5483] __netlink_deliver_tap+0x2c9/0x500 [ 68.788244][ T5483] netlink_unicast+0x64c/0x670 [ 68.788266][ T5483] netlink_sendmsg+0x58b/0x6b0 [ 68.788292][ T5483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.788408][ T5483] __sock_sendmsg+0x142/0x180 [ 68.788427][ T5483] ____sys_sendmsg+0x31e/0x4e0 [ 68.788452][ T5483] ___sys_sendmsg+0x17b/0x1d0 [ 68.788527][ T5483] __x64_sys_sendmsg+0xd4/0x160 [ 68.788544][ T5483] x64_sys_call+0x2999/0x2fb0 [ 68.788603][ T5483] do_syscall_64+0xd0/0x1a0 [ 68.788619][ T5483] ? clear_bhb_loop+0x25/0x80 [ 68.788635][ T5483] ? clear_bhb_loop+0x25/0x80 [ 68.788755][ T5483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.788772][ T5483] RIP: 0033:0x7fd47c89e969 [ 68.788783][ T5483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.788874][ T5483] RSP: 002b:00007fd47af07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.788889][ T5483] RAX: ffffffffffffffda RBX: 00007fd47cac5fa0 RCX: 00007fd47c89e969 [ 68.788899][ T5483] RDX: 0000000020008050 RSI: 00002000000003c0 RDI: 0000000000000005 [ 68.788908][ T5483] RBP: 00007fd47af07090 R08: 0000000000000000 R09: 0000000000000000 [ 68.788918][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.788927][ T5483] R13: 0000000000000000 R14: 00007fd47cac5fa0 R15: 00007ffc66febf38 [ 68.789032][ T5483] [ 68.789400][ T5485] loop1: detected capacity change from 0 to 128 [ 68.802146][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.872009][ T5491] loop0: detected capacity change from 0 to 512 [ 69.015024][ T5491] ext4: Unknown parameter 'fsname' [ 69.015088][ T5483] batadv_slave_0 (unregistering): left promiscuous mode [ 69.015158][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.015177][ T5491] ================================================================== [ 69.015209][ T5491] BUG: KCSAN: data-race in data_push_tail / string [ 69.015249][ T5491] [ 69.015256][ T5491] write to 0xffffffff88e17958 of 1 bytes by task 5483 on cpu 1: [ 69.015273][ T5491] string+0x187/0x220 [ 69.015294][ T5491] vsnprintf+0x532/0x890 [ 69.015318][ T5491] vscnprintf+0x41/0x90 [ 69.015353][ T5491] printk_sprint+0x30/0x2d0 [ 69.015384][ T5491] vprintk_store+0x599/0x860 [ 69.015411][ T5491] vprintk_emit+0x178/0x650 [ 69.015428][ T5491] vprintk_default+0x26/0x30 [ 69.015446][ T5491] vprintk+0x1d/0x30 [ 69.015470][ T5491] _printk+0x79/0xa0 [ 69.015496][ T5491] __netdev_printk+0x321/0x3e0 [ 69.015512][ T5491] netdev_info+0x9b/0xd0 [ 69.015533][ T5491] __dev_set_promiscuity+0x173/0x360 [ 69.015558][ T5491] dev_set_promiscuity+0x39/0x90 [ 69.015581][ T5491] packet_notifier+0x161/0x4f0 [ 69.015609][ T5491] raw_notifier_call_chain+0x6c/0x1b0 [ 69.015627][ T5491] call_netdevice_notifiers_info+0xae/0x100 [ 69.015653][ T5491] unregister_netdevice_many_notify+0xd9a/0x16a0 [ 69.015672][ T5491] rtnl_dellink+0x3cb/0x550 [ 69.015694][ T5491] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 69.015714][ T5491] netlink_rcv_skb+0x120/0x220 [ 69.015740][ T5491] rtnetlink_rcv+0x1c/0x30 [ 69.015758][ T5491] netlink_unicast+0x59e/0x670 [ 69.015783][ T5491] netlink_sendmsg+0x58b/0x6b0 [ 69.015808][ T5491] __sock_sendmsg+0x142/0x180 [ 69.015829][ T5491] ____sys_sendmsg+0x31e/0x4e0 [ 69.015858][ T5491] ___sys_sendmsg+0x17b/0x1d0 [ 69.015875][ T5491] __x64_sys_sendmsg+0xd4/0x160 [ 69.015893][ T5491] x64_sys_call+0x2999/0x2fb0 [ 69.015912][ T5491] do_syscall_64+0xd0/0x1a0 [ 69.015930][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.015949][ T5491] [ 69.015955][ T5491] read to 0xffffffff88e17958 of 8 bytes by task 5491 on cpu 0: [ 69.015970][ T5491] data_push_tail+0xfd/0x420 [ 69.015998][ T5491] data_alloc+0xbf/0x2b0 [ 69.016023][ T5491] prb_reserve+0x808/0xaf0 [ 69.016044][ T5491] vprintk_store+0x56d/0x860 [ 69.016069][ T5491] vprintk_emit+0x178/0x650 [ 69.016082][ T5491] vprintk_default+0x26/0x30 [ 69.016096][ T5491] vprintk+0x1d/0x30 [ 69.016114][ T5491] _printk+0x79/0xa0 [ 69.016135][ T5491] logfc+0x2b2/0x2c0 [ 69.016151][ T5491] vfs_parse_fs_param+0x1e0/0x2a0 [ 69.016167][ T5491] vfs_parse_monolithic_sep+0x18c/0x210 [ 69.016184][ T5491] generic_parse_monolithic+0x24/0x30 [ 69.016202][ T5491] parse_monolithic_mount_data+0x43/0x60 [ 69.016222][ T5491] do_new_mount+0x1da/0x680 [ 69.016240][ T5491] path_mount+0x4a4/0xb20 [ 69.016257][ T5491] __se_sys_mount+0x28f/0x2e0 [ 69.016275][ T5491] __x64_sys_mount+0x67/0x80 [ 69.016294][ T5491] x64_sys_call+0xd36/0x2fb0 [ 69.016311][ T5491] do_syscall_64+0xd0/0x1a0 [ 69.016327][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.016353][ T5491] [ 69.016357][ T5491] value changed: 0x00000000ffffe2b8 -> 0x2820305f6576616c [ 69.016367][ T5491] [ 69.016372][ T5491] Reported by Kernel Concurrency Sanitizer on: [ 69.016383][ T5491] CPU: 0 UID: 0 PID: 5491 Comm: syz.0.684 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 69.016406][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.016418][ T5491] ================================================================== [ 69.365472][ T5489] batadv_slave_0: entered promiscuous mode [ 69.372325][ T5494] batadv_slave_0 (unregistering): left promiscuous mode [ 69.380246][ T5494] batman_adv: batadv0: Removing interface: batadv_slave_0